CVE-2011-0867

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.231 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors relate...

CVE-2011-0867

CVE-2011-0867 is documented in connected advisories as a vulnerability in the Java Runtime Environment (JRE) component of Oracle Java SE 6 Update 25 and earlier, Java 5.0 Update 29 and earlier, and 1.4.2_31 and earlier. The MiracleLinux AXSA:2011-485 advisory lists CVE-2011-0867 among fixed issue...

CentOS 5 : java-1.6.0-openjdk (CESA-2011:0857)

Updated java-1.6.0-openjdk packages that fix several security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Critical: Red Hat Security Advisory: java-1.6.0-sun security update

Updated java-1.6.0-sun packages that fix several security issues are now available for Red Hat Enterprise Linux 4 Extras, and Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring...

RHEL 6 : flash-plugin (RHSA-2010:0867)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2010:0867 advisory. - flash-plugin: security bulletin APSB10-26 CVE-2010-3636, CVE-2010-3639, CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643,...

Oracle Database DBMS_JVM_EXP_PERMS System Command Execution (CVE-2010-0866; CVE-2010-0867)

Oracle Database server is an enterprise-level relational database application suite. A privilege escalation vulnerability exists in Oracle Database server that can allow users with limited privileges to execute arbitrary operating system commands on a target server. The vulnerability is due to an...

CVE-2010-0867

CVE-2010-0867 targets Oracle Database JavaVM; connected advisories disclose a privilege escalation/command execution flaw in the DBMS_JAVA/DBMS_JVM_EXP_PERMS paths. Remote authenticated users with CREATE_SESSION can exploit the weakness to execute arbitrary OS commands, potentially with elevated ...

Fedora Core 10 FEDORA-2009-0867 (DevIL)

The remote host is missing an update to DevIL announced via advisory FEDORA-2009-0867. OpenVAS Vulnerability Test $Id: fcore20090867.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-0867 DevIL Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Fedora Core 10 FEDORA-2009-0867 (DevIL)

The remote host is missing an update to DevIL announced via advisory FEDORA-2009-0867. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Cross site scripting

Apple Safari allows web sites to set cookies for country-specific top-level domains, such as co.uk and com.au, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session, aka "Cross-Site Cooking," a related issue to CVE-2004-0746, CVE-2004-0866, and...

CVE-2008-0867

BEA AquaLogic Interaction 6.1 MP1 and Plumtree Foundation 6.0 SP1 are affected by CVE-2008-0867, a Cross‑Site Scripting (XSS) flaw in portal/server.pt that allows injection of arbitrary web script or HTML via the name parameter. The vulnerability arises from handling user-supplied input in the po...

CVE-2007-0867

PHP remote file inclusion vulnerability in classes/menu.php in Site-Assistant 0990 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathsversion parameter...

CVE-2007-0867

CVE-2007-0867 affects Site-Assistant: PHP remote file inclusion in classes/menu.php (Site-Assistant 0990 and earlier) allows an attacker to execute arbitrary PHP code via a URL supplied in the paths[version] parameter. Root cause is improper handling of user-controlled input enabling RFI. The lin...

CVE-2006-0867

CVE-2006-0867 affects South River (SRT) WebDrive, with vulnerable versions potentially including 6.08 build 1131 and version 8. The issue is a buffer overflow in the name entry field that can be triggered by a long string, leading to application crash and persistent erratic behavior (denial of se...

CVE-2005-0867

CVE-2005-0867 involves an integer overflow in the Linux kernel 2.6 sysfs_write_file() function. The Ubuntu USN-110-1 and Red Hat RHSA-2005:366 describe a local user could exploit this to crash the kernel or possibly execute code with root privileges by writing to a user-writable sysfs file under ...

CVE-2004-0867

CVE-2004-0867 affects Mozilla Firefox 0.9.2 by allowing websites to set cookies for country-specific top‑level domains (e.g., .ltd.uk, .plc.uk, .sch.uk), which could enable a session‑fixation attack and session hijack. The note indicates 2.x may also be affected. Technical details in the provided...

CVE-2002-0867

CVE-2002-0867 affects Microsoft Virtual Machine up to build 5.0.3805, enabling remote attackers to crash Internet Explorer via invalid handle data in a Java applet (Handle Validation Flaw). OpenVAS and CVE records corroborate this as part of MS02-052/related issues, with proposed remediation: app...

CVE-2003-0867

Note: CVE-2003-0867 is a duplicate of CVE-2003-0662 and is not the active entry. The concrete details are in CVE-2003-0662: Buffer overflow in the Troubleshooter ActiveX Control (Tshoot.ocx) in Windows 2000 SP4 and earlier allows remote code execution via a crafted HTML document invoking RunQuery...

CVE-2001-0867

Cisco 12000 Series routers running IOS 12.0 with Engine 2 line cards are affected by CVE-2001-0867. The vulnerability is that packet fragment filtering is not applied by ACLs when the fragment keyword is used, allowing remote attackers to bypass intended access controls (network-based, no authent...

CVE-2001-0867

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly filter does not properly filter packet fragments even when the "fragment" keyword is used in an ACL, which allows remote attackers to bypass the intended access controls...