CVE-2010-0851

CVE-2010-0851 affects the Oracle Database XML DB component. The vulnerability exists in Oracle Database versions 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3, caused by an unspecified issue that allows remote authenticated users to affect confidentiality via unknown vectors. The connected documents...

CVE-2009-0851

creationtimestamp| type| source ---|---|--- 2009-03-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8161...

CVE-2008-0851

CVE-2008-0851 affects Dokeos 1.8.4 with multiple cross-site scripting (XSS) vulnerabilities. Remote attackers can inject arbitrary web script/HTML via (1) username in inscription.php, (2) courseCode in main/calendar/myagenda.php, (3) category in main/admin/course_category.php, (4) message in main...

Debian Security Advisory DSA 559-1 (net-acct)

The remote host is missing an update to net-acct announced via advisory DSA 559-1. OpenVAS Vulnerability Test $Id: deb5591.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 559-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2007-0851

CVE-2007-0851 describes a buffer overflow in Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, exploitable when processing UPX-packed executables (as used in CCC Cleaner). The CCC Cleaner component is affected when the UPX-packed file is scanned, enabling arbitrary code ...

CVE-2006-0851

SQL injection vulnerability in the forum module of ilchClan 1.05g and earlier allows remote attackers to execute arbitrary SQL via the pid parameter when creating a newpost. Root cause: unsanitized input in the pid field. Impact: partial confidentiality/integrity/availability. Affected: ilchClan ...

CVE-2005-0851

CVE-2005-0851 affects the FileZilla FTP Server up to version 0.9.6. When using MODE Z (zlib compression), it can trigger a denial-of-service via certain file uploads or directory listings, causing an infinite loop. The vulnerability is associated with a NETWORK attack vector, with low complexity ...

CVE-2004-0851

CVE-2004-0851 affects Net-Acct before version 0.71, where write_list and dump_curr_list could allow local users to overwrite arbitrary files via insecure temporary file handling (symlink attack). Mitigation: Debian fixed in DSA-559-1, upgrading net-acct to 0.71-5woody1 (and 0.71-7 for sid) is rec...

CVE-2004-0851

The 1 writelist and 2 dumpcurrlist functions in Net-Acct before 0.71 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2004-0851

The 1 writelist and 2 dumpcurrlist functions in Net-Acct before 0.71 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

Debian DSA-559-1 : net-acct - insecure temporary file

Stefan Nordhausen has identified a local security hole in net-acct, a user-mode IP accounting daemon. Old and redundant code from some time way back in the past created a temporary file in an insecure fashion. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

CVE-2004-0851

The 1 writelist and 2 dumpcurrlist functions in Net-Acct before 0.71 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2004-0851

The 1 writelist and 2 dumpcurrlist functions in Net-Acct before 0.71 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

RHEL 2.1 : openssl (RHSA-2004:119)

Updated OpenSSL packages that fix a remote denial of service vulnerability are now available for Red Hat Enterprise Linux 2.1. OpenSSL is a toolkit that implements Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols as well as a full-strength general purpose cryptography...

CVE-2003-0851

...

CVE-2003-0851

CVE-2003-0851 describes a DoS in OpenSSL’s ASN.1 parser caused by large recursion in malformed ASN.1 sequences. Public diagnostics in the connected data tie the issue to OpenSSL 0.9.6k and older, with Red Hat/Fedora advisories noting fixes in later OpenSSL releases (e.g., 0.9.6l or newer). The vu...

Vulnerability in OpenSSL CVE-2003-0851

A flaw in OpenSSL 0.9.6k only would cause certain ASN.1 sequences to trigger a large recursion. On platforms such as Windows this large recursion cannot be handled correctly and so the bug causes OpenSSL to crash. A remote attacker could exploit this flaw if they can send arbitrary ASN.1 sequence...

CVE-2002-0851

The CVE-2002-0851 issue affects the ISDN4Linux (i4l) package, specifically the PPP daemon ipppd. A format string vulnerability in the device name command line argument is not properly sanitized in a syslog call, allowing a local user to exploit the flaw and gain root privileges. The connected doc...

CVE-2002-0851

Removed by vendor...

CVE-2002-0851

Format string vulnerability in ISDN Point to Point Protocol PPP daemon ipppd in the ISDN4Linux i4l package allows local users to gain root privileges via format strings in the device name command line argument, which is not properly handled in a call to syslog...