CVE-2004-0866

CVE-2004-0866 involves Internet Explorer 6.0. The vulnerability allows websites to set cookies for country‑specific top‑level domains (e.g., .ltd.uk, .plc.uk, .sch.uk), which could enable a remote attacker to perform a session fixation attack and hijack a user’s HTTP session. The provided documen...

CVE-2004-0868

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-0866. Reason: This candidate is a duplicate of CVE-2004-0866. Notes: The description for CVE-2004-0866 was inadvertently attached to this issue instead. All CVE users should reference CVE-2004-0866 instead of this candidate...

Debian DSA-395-1 : tomcat4 - incorrect input handling

Aldrin Martoq has discovered a denial of service DoS vulnerability in Apache Tomcat 4.0.x. Sending several non-HTTP requests to Tomcat's HTTP connector makes Tomcat reject further requests on this port until it is restarted. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive tex...

CVE-2004-0868

CVE-2004-0868 is rejected/not used; this CVE ID does not represent an active vulnerability entry.

CVE-2002-0866

Java Database Connectivity JDBC classes in Microsoft Virtual Machine VM up to and including 5.0.3805 allow remote attackers to load and execute DLLs dynamic link libraries via a Java applet that calls the constructor for com.ms.jdbc.odbc.JdbcOdbc with the desired DLL terminated by a null string,...

CVE-2002-0866

CVE-2002-0866 affects Microsoft's Java VM JDBC classes, where JDBC functionality could be misused by a Java applet to load and execute a DLL via com.ms.jdbc.odbc.JdbcOdbc, with the DLL name terminated by a null string. The issue enables remote execution of DLLs from the client system, as describe...

CVE-2003-0866

CVE-2003-0866 affects the Catalina org.apache.catalina.connector.http package in Apache Tomcat 4.0.x up to 4.0.6, where malformed HTTP requests can cause the request processing thread pool to become unresponsive, allowing a DoS. Public detail from GHSA confirms Tomcat 4.0.x DoS exposure; remediat...

CVE-2003-0866

The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service via several requests that do not follow the HTTP protocol, which causes Tomcat to reject later requests...

Fixed in Apache Tomcat 4.1.0

Important: Denial of service CVE-2003-0866 A malformed HTTP request can cause the request processing thread to become unresponsive. A sequence of such requests will cause all request processing threads, and hence Tomcat as a whole, to become unresponsive. Affects: 4.0.0-4.0.6 Low: Information...

CVE-2001-0866

Cisco 12000 with IOS 12.0 and lines card based on Engine 2 does not properly handle an outbound ACL when an input ACL is not configured on all the interfaces of a multi port line card, which could allow remote attackers to bypass the intended access controls...

CVE-2001-0866

Cisco 12000 Series routers running IOS 12.0 with Engine 2 line cards are affected. The issue is an ACL handling flaw where an outbound ACL may not properly apply if an input ACL is not configured on all interfaces of a multi-port line card, potentially allowing remote attackers to bypass intended...

CVE-2001-0866

Cisco 12000 with IOS 12.0 and lines card based on Engine 2 does not properly handle an outbound ACL when an input ACL is not configured on all the interfaces of a multi port line card, which could allow remote attackers to bypass the intended access controls...

CVE-2000-0866

Interbase 6 SuperServer for Linux is affected by a denial of service vulnerability triggered by a query containing 0 bytes. The incident is described as a local attack that can cause availability impact without requiring authentication or user interaction. The provided documents do not specify a ...

CVE-2000-0866

Interbase 6 SuperServer for Linux allows an attacker to cause a denial of service via a query containing 0 bytes...

CVE-1999-0866

CVE-1999-0866 describes a buffer overflow in the UnixWare xauto program that allows local users to gain root privileges. Affected software: UnixWare xauto component. Root cause: buffer overflow leading to privilege escalation. Impact: complete confidentiality, integrity, and availability (per CVS...

CVE-2026-0866

...

CVE-2026-0866

CVE-2026-0866 corresponds to the Zombie ZIP technique. Attackers manipulate ZIP headers (e.g., compressiontype=0, stored) so tools scan the archive as uncompressed data while the payload is actually DEFLATE compressed. A custom loader decompresses the payload, enabling bypass of many antivirus/ED...