CVE-2009-0845

Summary of CVE-2009-0845 details from provided sources : The SPNEGO implementation in MIT Kerberos 5 (krb5) up to version 1.6.3 is affected. Specifically, in spnego_mech.c, the spnego_gss_accept_sec_context path can be triggered when SPNEGO is used with invalid ContextFlags data in a negTokenInit...

CVE-2008-0845

The CVE-2008-0845 entry concerns the WordPress WP-People plugin (version 1.6.1) vulnerability in wp-people-popup.php where the person parameter enables SQL injection, allowing remote attackers to execute arbitrary SQL commands. The underlying issue is improper handling of user input in the wp-peo...

CVE-2007-0845

CVE-2007-0845 affects Advanced Poll 2.0.0–2.0.5-dev, where admin/index.php can allow remote attackers to bypass authentication and gain administrator privileges by obtaining a valid session identifier and setting uid=1. This entry provides the vulnerability description and base CVSS 2.0 score (7....

CVE-2006-0845

CVE-2006-0845 affects Leif M. Wright's Blog 3.5. The vulnerability arises when an administrator can configure the sendmail path to a malicious pathname, allowing remote authenticated users with admin privileges to execute arbitrary shell commands. The EVULN/SECURITYVULNS records indicate a shell ...

CVE-2006-0845

Leif M. Wright's Blog 3.5 allows remote authenticated users with administrative privileges to execute arbitrary programs, including shell commands, by configuring the sendmail path to a malicious pathname...

CVE-2005-0845

CVE-2005-0845 concerns SurgeMail 2.2g3, where a directory traversal in the Webmail interface, via the attach_id parameter, permits remote authenticated users to write arbitrary files or directories. The underlying issue is improper validation of the dot-dot (.. ) path segment, enabling access out...

CVE-2004-0845

Internet Explorer 5.01, 5.5, and 6 does not properly cache SSL content, which allows remote attackers to obtain information or spoof content via a web site with the same host name as the target web site, whose content is cached and reused when the user visits the target web site...

CVE-2004-0845

CVE-2004-0845 concerns Internet Explorer (IE) versions 5.01, 5.5, and 6. The vulnerability arises from improper caching of SSL content, allowing an attacker to obtain information or spoof content by redirecting a user to a malicious site with the same host name as the target, causing cached conte...

CVE-2003-0845

Unknown vulnerability in the HSQLDB component in JBoss 3.2.1 and 3.0.8 on Java 1.4.x platforms, when running in the default configuration, allows remote attackers to conduct unauthorized activities and possibly execute arbitrary code via certain SQL statements to 1 TCP port 1701 in JBoss 3.2.1, a...

CVE-2002-0845

CVE-2002-0845 affects Sun ONE / iPlanet Web Server 4.1 and 6.0. The vulnerability is a buffer overflow in the Chunked Encoding processing, allowing a remote attacker to execute arbitrary code via an HTTP request that uses chunked transfer encoding. Affected components are the web server’s HTTP pr...

Immunity Canvas: IPLANET_CHUNKED

Name| iplanetchunked ---|--- CVE| CVE-2002-0845 Exploit Pack| CANVAS Description| iPlanet Chunked Encoding Notes| References: http://www.sun.com/service/sunone/software/alerts/transferencodingalert-23july2002.html http://www.eeye.com/html/Research/Advisories/AD20020808a.html CVE Name: CVE-2002-08...

CVE-2001-0845

Technical details about CVE-2001-0845 are not publicly available in the provided connected documents. Monitor for updates from NVD/CVE records to obtain affected products, scope, impact, and remediation.

CVE-2001-0845

Vulnerability in DECwindows Motif Server on OpenVMS VAX or Alpha 6.2 through 7.3, and SEVMS VAX or Alpha 6.2, allows local users to gain access to unauthorized resources...

CVE-2000-0845

kdebug daemon kdebugd in Digital Unix 4.0F allows remote attackers to read arbitrary files by specifying the full file name in the initialization packet...

CVE-2000-0845

CVE-2000-0845 affects Digital Unix 4.0F: the kdebugd daemon allows remote attackers to read arbitrary files by specifying the full path in the initialization packet. Exploitation status and remediation details are not provided in the supplied documents.

CVE-1999-0845

The CVE-1999-0845 entry describes a buffer overflow in the SCO ‘su’ program that allows a local user to gain root privileges by supplying a long username. The vulnerable component is the su utility on SCO Unix-like systems; impact is local privilege escalation to root . Connected documents corrob...