150 matches found
CVE-2007-0862
CVE-2007-0862 affects gnopaste (versions 0.5.3 and earlier); it describes a PHP remote file inclusion in index.php via the GNP_REAL_PATH parameter. The note indicates a dispute that GNP_REAL_PATH is a constant, not a variable. Impact is remote code execution as described, with no explicit exploit...
CVE-2006-0862
CVE-2006-0862 affects InfoVista PortalSE 2.0 Build 20087 on Solaris 8; an unspecified vulnerability allows remote attackers to read arbitrary files via a crafted URL. The issue is reported to occur without the IV00038969 hotfix. No public details on underlying root cause are provided beyond the v...
CVE-2005-0862
CVE-2005-0862 describes multiple PHP remote file inclusion vulnerabilities in PHPOpenChat 3.0.1 and earlier. An attacker can cause arbitrary PHP code execution by manipulating the phpbb_root_path, poc_root_path, or sourcedir parameters to various scripts (poc_loginform.php, phpbb/poc.php, phpnuke...
CVE-2002-0862
The 1 CertGetCertificateChain, 2 CertVerifyCertificateChainPolicy, and 3 WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Windows 98 through XP, Office for Mac, Internet Explorer for Mac, and Outlook Express for Mac, do not properly verify the Basic Constraints ...
CVE-2002-0862
The 1 CertGetCertificateChain, 2 CertVerifyCertificateChainPolicy, and 3 WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Windows 98 through XP, Office for Mac, Internet Explorer for Mac, and Outlook Express for Mac, do not properly verify the Basic Constraints ...
CVE-2002-0862
CVE-2002-0862 concerns the CryptoAPI in Microsoft products (Windows 98 through XP; Office for Mac; IE for Mac; Outlook Express for Mac). The issue: the CertGetCertificateChain, CertVerifyCertificateChainPolicy, and WinVerifyTrust APIs fail to properly verify the Basic Constraints of intermediate ...
CVE-2002-0828
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2002-0862. Reason: This is a duplicate of CVE-2002-0862. Notes: All CVE users should reference CVE-2002-0862 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usag...
CVE-2001-0862
Cisco 12000 Series routers running IOS 12.0 with Engine 2 line cards are affected. The flaw permits non‑initial IP fragments to bypass ACLs, enabling a remote attacker to bypass firewall rules. The issue is tied to how fragment handling is treated in ACLs, leading to incomplete filtering. Affecte...
CVE-2000-0862
The vulnerability CVE-2000-0862 affects the Allaire Spectra 1.0.1 product, specifically its administrative interface utility. The exposed issue allows remote attackers to read and modify sensitive configuration information. The NVD entry lists a CVSS v2 base score of 6.4 (Medium) with network acc...
CVE-1999-0862
The CVE-1999-0862 case relates to insecure directory permissions in the PostgreSQL RPM distribution, enabling local users to gain privileges by reading a plaintext password file. The PT-Security entry notes PostgreSQL (affected versions not specified) and identifies the root cause as insecure RPM...