141 matches found
CVE-2008-0836
Unspecified vulnerability in the vuidmice STREAMS modules in Sun Solaris 9 and 10 on x86 architectures allows local users to cause a denial of service panic via unspecified vectors that trigger a NULL pointer dereference in the vuid3ps2 module, a different issue than CVE-2007-5319...
CVE-2008-0836
CVE-2008-0836 describes an unspecified vulnerability in the vuidmice STREAMS modules on Sun Solaris 8–10 (x86) that allows local users to cause a denial of service (panic) via vectors triggering a NULL pointer dereference in the vuid3ps2 module. The issue is categorized as a local access problem ...
Debian Security Advisory DSA 562-1 (mysql)
The remote host is missing an update to mysql announced via advisory DSA 562-1. OpenVAS Vulnerability Test $Id: deb5621.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 562-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Solaris 10 (x86) : 127751-02
SunOS 5.10x86: vuidmice driver patch. Date this patch was last updated by Sun : Jan/31/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...
CVE-2007-0836
CVE-2007-0836 affects Coppermine Photo Gallery 1.4.10 (and possibly earlier). The issue allows remote authenticated users to include arbitrary local and possibly remote files through the “Path to custom header include” and “Path to custom footer include” fields in admin.php. The underlying flaw i...
CVE-2006-0836
CVE-2006-0836 : Affected product is Mozilla Thunderbird 1.5. The issue allows user-assisted attackers to cause an unspecified denial of service by convincing a user to import an LDIF file containing a long field (demonstrated by a long homePhone field) into the address book. The available connect...
SUSE-SA:2005:032: java2
The remote host is missing the patch for the advisory SUSE-SA:2005:032 java2. Two security bugs in the SUN Java implementation have been fixed. Java Web Start can be exploited remotely due to an error in input validation of tags in JNLP files, so an attacker can pass arbitrary command-line option...
CVE-2005-0836
Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.206 allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file...
CVE-2005-0418
Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.206, on Mac OS X, allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file. NOTE: it is highly likely that this item will be MERGED with CVE-2005-0836...
CVE-2005-0836
Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.206 allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file...
CVE-2005-0836
CVE-2005-0836 describes an argument injection in Sun Java Web Start/J2SE (Java Web Start for J2SE 1.4.2 up to 1.4.2_06) where the value parameter in a JNLP file’s property tag can be exploited to grant privileges to untrusted applications. This can bypass Java security restrictions and may lead t...
Fedora Core 2 : mysql-3.23.58-9.1 (2004-530)
" - Tue Oct 12 2004 Tom Lane 3.23.58-9.1 - fix security issues CVE-2004-0835, CVE-2004-0836, CVE-2004-0837 bugs 135372, 135375, 135387 - fix privilege escalation on GRANT ALL ON Foo\Bar CVE-2004-0957 - fix multilib problem with mysqlbug and mysqlconfig - adjust chkconfig priority per bug 128852 -...
CVE-2004-0836
Buffer overflow in the mysqlrealconnect function in MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows remote DNS servers to cause a denial of service and possibly execute arbitrary code via a DNS response with a large address length hlength...
CVE-2004-0836
Buffer overflow in the mysqlrealconnect function in MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows remote DNS servers to cause a denial of service and possibly execute arbitrary code via a DNS response with a large address length hlength...
CVE-2004-0836
CVE-2004-0836 concerns a buffer overflow in the mysql_real_connect function in MySQL 4.x (< 4.0.21) and 3.x (
CVE-2002-0836
dvips converter for Postscript files in the tetex package calls the system function insecurely, which allows remote attackers to execute arbitrary commands via certain print jobs, possibly involving fonts...
CVE-2003-0836
CVE-2003-0836 concerns IBM DB2 Universal Database: a stack-based buffer overflow in the LOAD command. Affected versions are DB2 UDB v7.2 before Fixpak 10/10a and v8.1 before Fixpak 2. An attacker with Connect privileges can execute arbitrary code. IBM fixed the issue via Fixpak 10/10a for v7.2 an...
ptl-2003-01: IBM DB2 LOAD Command Stack Overflow Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Pentest Limited Security Advisory IBM DB2 LOAD Command Stack Overflow Vulnerability Advisory Details - ---------------- Title: IBM DB2 LOAD Command Stack Overflow Vulnerability Announcement date: 1st October 2003 Advisory Reference: ptl-2003-01 CVE...
CVE-2000-0836
CVE-2000-0836 affects CamShot WebCam Trial2.6. The vulnerability is a buffer overflow in the Authorization header that allows remote attackers to execute arbitrary commands. The CVSS metrics indicate a network, low complexity, no authentication requirement, with partial impact on confidentiality,...