CVE-2006-0880

CVE-2006-0880 – The Noah’s Classifieds 1.3 PHP application is vulnerable to multiple XSS flaws in index.php. Attackers can inject arbitrary script/HTML via the (1) inf parameter, and, if PHP register_globals is enabled, via the (2) upperTemplate and (3) lowerTemplate parameters. The description d...

CVE-2005-0880

CVE-2005-0880 affects the Vortex Portal’s content.php. An invalid act parameter allows remote attackers to obtain sensitive information by causing a PHP error message that leaks the full pathname. The CVSS data indicates attack vector: network; authentication: none; access: partial confidentialit...

CVE-2004-0880

getmail 4.x before 4.2.0, when run as root, allows local users to overwrite arbitrary files via a symlink attack on an mbox file...

CVE-2004-0880

CVE-2004-0880 affects getmail 4.x up to version before 4.2.0. When run with root privileges, local users can exploit a symlink attack on an mbox file to overwrite arbitrary files. The risk is described as a local, likely low-severity issue with partial integrity impact; exploitation details are n...

CVE-2004-0880

Removed by vendor...

CVE-2003-0880

CVE-2003-0880 involves a vulnerability in Mac OS X prior to 10.3 where local users could access Dock functions from behind Screen Effects when Full Keyboard Access is enabled via the Keyboard pane in System Preferences. The description labels the vulnerability as Unknown, with no publicly provide...

CVE-2002-0880

Cisco IP Phone VoIP models 7910, 7940, and 7960 allow remote attackers to cause a denial of service crash via malformed packets as demonstrated by 1 "jolt", 2 "jolt2", 3 "raped", 4 "hping2", 5 "bloop", 6 "bubonic", 7 "mutant", 8 "trash", and 9 "trash2."...

CVE-2002-0880

Cisco IP Phone (VoIP) models 7910, 7940, and 7960 are affected by CVE-2002-0880. Remote attackers can cause a denial of service (crash) by sending malformed packets (examples: jolt, jolt2, raped, hping2, bloop, bubonic, mutant, trash, trash2). The root cause is described only as malformed packets...

CVE-2002-0880

Cisco IP Phone VoIP models 7910, 7940, and 7960 allow remote attackers to cause a denial of service crash via malformed packets as demonstrated by 1 "jolt", 2 "jolt2", 3 "raped", 4 "hping2", 5 "bloop", 6 "bubonic", 7 "mutant", 8 "trash", and 9 "trash2."...

CVE-2000-0880

LPPlus creates the lpdprocess file with world-writeable permissions, which allows local users to kill arbitrary processes by specifying an alternate process ID and using the setuid dcclpdshut program to kill the process that was specified in the lpdprocess file...

CVE-2000-0880

The CVE-2000-0880 entry concerns LPPlus creating the lpdprocess file with world-writable permissions, which allows local users to kill arbitrary processes by specifying a process ID and using the setuid dcclpdshut program to terminate the specified process. Impact is local access and partial inte...

CVE-1999-0880

CVE-1999-0880 corresponds to a memory exhaustion DoS in WU-FTPD caused by the SITE NEWER command not freeing memory. Multiple connected sources confirm the issue and reference affected software as WU-FTPD, with a specific note that versions prior to 2.6.0 are vulnerable (Nessus plugin title indic...