335 matches found
CVE-2004-0847
The Microsoft .NET forms authentication capability for ASP.NET allows remote attackers to bypass authentication for .aspx files in restricted directories via a request containing a 1 "" backslash or 2 "%5C" encoded backslash, aka "Path Validation Vulnerability."...
CVE-2003-0847
SuSEconfig.susewm in the susewm package on SuSE Linux 8.2Pro allows local users to overwrite arbitrary files via a symlink attack on the susewm.$$ temporary file...
CVE-2003-0847
SuSEconfig.susewm in the susewm package on SuSE Linux 8.2Pro allows local users to overwrite arbitrary files via a symlink attack on the susewm.$$ temporary file...
CVE-2003-0847
CVE-2003-0847 : The SuSEconfig.susewm component in the susewm package on SuSE Linux 8.2Pro is vulnerable to a local, symlink-based attack on the susewm.$$ temporary file, enabling local users to overwrite arbitrary files. The vulnerability is described as a local-priority issue with partial confi...
CVE-2002-0847
CVE-2002-0847 affects tinyproxy (versions up to 1.5.0, 1.4.3 and earlier) where improper handling of certain invalid proxy requests leads to a double-free of memory, enabling potential remote code execution. Multiple connected sources corroborate the doubly freed memory vulnerability in tinyproxy...
CVE-2002-0847
tinyproxy HTTP proxy 1.5.0, 1.4.3, and earlier allows remote attackers to execute arbitrary code via memory that is freed twice double-free...
CVE-2002-0847
tinyproxy HTTP proxy 1.5.0, 1.4.3, and earlier allows remote attackers to execute arbitrary code via memory that is freed twice double-free...
CVE-2002-0847
tinyproxy HTTP proxy 1.5.0, 1.4.3, and earlier allows remote attackers to execute arbitrary code via memory that is freed twice double-free...
CVE-2001-0847
Lotus Domino Web Server 5.x allows remote attackers to gain sensitive information by accessing the default navigator $defaultNav via 1 URL encoding the request, or 2 directly requesting the ReplicaID...
CVE-2001-0847
CVE-2001-0847 affects Lotus Domino Web Server 5.x. The vulnerability allows remote attackers to disclose sensitive information by accessing the default navigator $defaultNav, either by URL-encoding the request or by directly requesting the ReplicaID. The public records describe the affected compo...
CVE-2001-0847
Lotus Domino Web Server 5.x allows remote attackers to gain sensitive information by accessing the default navigator $defaultNav via 1 URL encoding the request, or 2 directly requesting the ReplicaID...
CVE-2000-0847
The CVE-2000-0847 entry describes a buffer overflow in the University of Washington c-client library (used by Pine and other programs). The vulnerability arises from processing a long X-Keywords header, enabling remote attackers to execute arbitrary commands. Documents explicitly identify the aff...
CVE-2000-0847
Buffer overflow in University of Washington c-client library used by pine and other programs allows remote attackers to execute arbitrary commands via a long X-Keywords header...
CVE-1999-0847
Buffer overflow in free internet chess server FICS program, xboard...
CVE-1999-0847
CVE-1999-0847 maps to a buffer overflow in the Free Internet Chess Server (FICS) program, specifically the xboard component. The available documents identify the vulnerability as a buffer overflow and reference FICS/xboard as affected, but they do not provide detailed root-cause analysis, specifi...