Fedora Core 10 FEDORA-2009-9374 (asterisk)

The remote host is missing an update to asterisk announced via advisory FEDORA-2009-9374. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

CVE-2009-0871

CVE-2009-0871 affects the SIP channel driver in Asterisk Open Source and Asterisk Business Edition C.2.3 when the pedantic option is enabled. Remote authenticated users can crash the system by sending a SIP INVITE without headers, triggering a NULL pointer dereference in sip_uri_headers_cmp and s...

Now SMS/MMS Gateway Buffer Overflow

This module exploits a stack buffer overflow in Now SMS/MMS Gateway v2007.06.27. By sending a specially crafted GET request, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...

CVE-2008-0871

creationtimestamp| type| source ---|---|--- 2008-05-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5695 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16779 2018-05-29 15:50:33+00:00| seen|...

CVE-2008-0871

CVE-2008-0871 affects Now SMS/MMS Gateway (v2007.06.27 and earlier). The vulnerability consists of multiple stack-based buffer overflows: (1) in the HTTP service triggered by a long password in the Authorization header, and (2) in the SMPP service triggered by oversized SMPP packets. Public explo...

CVE-2007-0871

The CVE-2007-0871 entry concerns the eXtremePow eXtreme File Hosting product, where an unrestricted file upload vulnerability exists. The underlying issue is that an attacker can upload files with double extensions (for example, .rar.php or .zip.php), enabling remote execution of PHP code on the ...

CVE-2006-0871

CVE-2006-0871 (Mambo 4.5.3/4.5.3h and earlier): directory traversal in _setTemplate via mos_change_template parameter could allow remote reading of arbitrary files. Related entries note an updated Mambo release; exploits reference local file inclusion/remote impact in multiple components. CVE-200...

CVE-2005-0871

The CVE-2005-0871 entry describes a vulnerability in the Topic Calendar 1.0.1 module for phpBB. When run on Microsoft IIS, remote attackers can obtain sensitive information by supplying invalid parameters, which cause error messages to reveal the server path. The affected component is calendar_sc...

CVE-2005-0871

calendarscheduler.php in Topic Calendar 1.0.1 module for phpBB, when running on a Microsoft IIS server, allows remote attackers to obtain sensitive information via invalid parameters, which reveal the path in an error message...

CVE-2004-0871

CVE-2004-0871 refers to a cross security boundary cookie injection issue in which cookies set over HTTP can be presented to HTTPS in the same domain (the cookie domain attribute can enable leakage across secure boundaries). The connected documentation attributes this to multiple browsers (Interne...

CVE-2003-0871

Unknown vulnerability in QuickTime Java in Mac OS X v10.3 and Mac OS X Server 10.3 allows attackers to gain "unauthorized access to a system."...

CVE-2003-0871

CVE-2003-0871 concerns QuickTime Java in Mac OS X v10.3 and Mac OS X Server 10.3. The description indicates an unknown vulnerability that could allow an attacker to gain unauthorized access to a system. Connected documents do not provide details beyond this, including verified affected components...

Alchemy Eye HTTP Server does not adequately validate user input thereby allowing remote command execution

Overview Alchemy Eye does not properly validate HTTP requests, allowing arbitrary command execution. Description Alchemy Eye includes an HTTP server for remote system monitoring and control. In versions 2.0 through 2.6 of Alchemy Eye, the HTTP server component does not adequately validate HTTP...

CVE-2002-0871

xinetd 2.3.4 leaks file descriptors for the signal pipe to services that are launched by xinetd, which could allow those services to cause a denial of service via the pipe...

CVE-2001-0871

Directory traversal vulnerability in HTTP server for Alchemy Eye and Alchemy Network Monitor allows remote attackers to execute arbitrary commands via an HTTP request containing 1 a .. in versions 2.0 through 2.6.18, or 2 a DOS device name followed by a .. in versions 2.6.19 through 3.0.10...

CVE-2001-0871

CVE-2001-0871 affects Alchemy Eye and Alchemy Network Monitor’s built-in HTTP server. Versions 2.0–2.6.18 are vulnerable to simple dotdot traversal; versions 2.6.19–3.0.10 are vulnerable to a variant using a DOS device name (e.g., NUL) plus traversal. Successful exploitation allows remote attacke...

CVE-2000-0871

CVE-2000-0871 describes a buffer overflow in EFTP’s newline handling that allows a remote attacker to trigger a denial of service by sending a string without a trailing newline and then disconnecting. Public sources (NVD/CVE records, CVE List, Nessus plugin) confirm the affected component as EFTP...

EFTP Newline String Handling Remote DoS

The version of EFTP running on the remote host has a denial of service vulnerability. Sending data without a trailing carriage return causes the service to crash. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10510; scriptversion"1.36";...

CVE-1999-0871

Internet Explorer 4.0 and 4.01 allow a remote attacker to read files via IE's cross frame security, aka the "Cross Frame Navigate" vulnerability...

CVE-1999-0871

The vulnerability CVE-1999-0871 affects Internet Explorer 4.0 and 4.01, described as the "Cross Frame Navigate" issue where a remote attacker can read files due to IE’s cross-frame security. The provided documents identify the affected product and the basic impact (read access to files) but do no...