176 matches found
CVE-2006-0838
IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 stores cleartext passwords in /etc/neusecure.conf (CMS_DBPASS, CMSM_DBPASS, RPT_DBPASS) and in /opt/NeuSecure/bin/ns_archiver.log, enabling local users to gain privileges. The issue is a configuration/password storage vulnerability affecting local pr...
CVE-2005-0838
CVE-2005-0838 affects IceCast 2.20’s XSL parser. Multiple buffer overflows in handling long values in xsl:when, xsl:if, or xsl:value-of may lead to denial of service and possibly arbitrary code execution. The description specifies the vulnerable components but does not provide patched versions or...
CVE-2004-0838
Lexar Safe Guard for JumpDrive Secure 1.0 stores the password insecurely in memory using XOR encryption, which allows local users to read the password directly from the device and access the password protected part of the drive...
CVE-2004-0838
CVE-2004-0838 affects Lexar Safe Guard for JumpDrive Secure 1.0. The issue is that the password is stored insecurely in memory using XOR encryption, allowing a local user to read the password directly from the device and access the password-protected area. The NVD metrics indicate a local attack ...
CVE-2004-0838
Lexar Safe Guard for JumpDrive Secure 1.0 stores the password insecurely in memory using XOR encryption, which allows local users to read the password directly from the device and access the password protected part of the drive...
CVE-2003-0838
Internet Explorer allows remote attackers to bypass zone restrictions to inject and execute arbitrary programs by creating a popup window and inserting ActiveX object code with a "data" tag pointing to the malicious code, which Internet Explorer treats as HTML or Javascript, but later executes as...
CVE-2003-0838
CVE-2003-0838 concerns Internet Explorer where an attacker can bypass zone restrictions and cause arbitrary code execution by creating a popup window and inserting ActiveX object code with a data tag that IE may treat as HTML/Javascript but execute as an HTA application. The vulnerability is rela...
CVE-2003-0838
Internet Explorer allows remote attackers to bypass zone restrictions to inject and execute arbitrary programs by creating a popup window and inserting ActiveX object code with a "data" tag pointing to the malicious code, which Internet Explorer treats as HTML or Javascript, but later executes as...
[SECURITY] [DSA 179-1] New gnome-gv packages fix buffer overflow
-------------------------------------------------------------------------- Debian Security Advisory DSA 179-1 [email protected] http://www.debian.org/security/ Martin Schulze October 18th, 2002 http://www.debian.org/security/faq -...
CVE-2002-0838
Buffer overflow in 1 gv 3.5.8 and earlier, 2 gvv 1.0.2 and earlier, 3 ggv 1.99.90 and earlier, 4 gnome-gv, and 5 kghostview in kdegraphics 2.2.2 and earlier, allows attackers to execute arbitrary code via a malformed a PDF or b PostScript file, which is processed by an unsafe call to sscanf...
CVE-2002-0838
Buffer overflow in 1 gv 3.5.8 and earlier, 2 gvv 1.0.2 and earlier, 3 ggv 1.99.90 and earlier, 4 gnome-gv, and 5 kghostview in kdegraphics 2.2.2 and earlier, allows attackers to execute arbitrary code via a malformed a PDF or b PostScript file, which is processed by an unsafe call to sscanf...
CVE-2002-0838
Buffer overflow in 1 gv 3.5.8 and earlier, 2 gvv 1.0.2 and earlier, 3 ggv 1.99.90 and earlier, 4 gnome-gv, and 5 kghostview in kdegraphics 2.2.2 and earlier, allows attackers to execute arbitrary code via a malformed a PDF or b PostScript file, which is processed by an unsafe call to sscanf...
CVE-2000-0838
CVE-2000-0838 affects Fastream FUR HTTP server 1.0b. The issue allows remote denial of service triggered by a long GET request. The available data specifies a network-accessible condition with a medium base score (CVSS v2.0: AV:N/AC:L/Au:N/C:N/I:N/A:P) and no information on exploited vectors, spe...
CVE-2001-0838
Network Solutions Rwhoisd 1.5.x is affected by a remote format-string vulnerability in the -soa handling, allowing arbitrary code execution. Root cause: format string vulnerability in the server’s error/format handling. Impact: remote code execution with the privileges of the RWhoisd process; pot...
CVE-1999-0838
Concrete details from connected documents show that Serv-U FTP before version 2.5e is affected by multiple issues: a buffer overflow in the SERVER when processing the SITE command can cause a denial of service, and a path disclosure via CWD commands for nonexistent directories can reveal the root...