CVE-2009-0894

Heap-based buffer overflow in the decodercreate function in the initialization functionality in xvidcore/src/decoder.c in Xvid before 1.2.2, as used by Windows Media Player and other applications, allows remote attackers to execute arbitrary code via vectors involving the DirectShow aka DShow...

CVE-2009-0894

CVE-2009-0894 describes a heap-based buffer overflow in the decoder_create function of Xvid’s initialization code (xvidcore/src/decoder.c) affecting Xvid before 1.2.2. The issue, noted in multiple feeds (NVD, Red Hat, Debian/Ubuntu trackers), is triggered during processing of a crafted movie file...

Gentoo Security Advisory GLSA 200504-20 (openMosixview)

The remote host is missing updates announced in advisory GLSA 200504-20. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2007-0894

MediaWiki prior to 1.9.2 is affected. The vulnerability allows remote attackers to cause error messages that disclose the installation path by requesting specific skin files (Simple.deps.php, MonoBook.deps.php, MySkin.deps.php, Chick.deps.php) under wiki/skins. This is an information-disclosure i...

CVE-2006-0894

CVE-2006-0894 affects NOCC Webmail 1.0. The available documents identify multiple XSS vectors allowing remote attackers to inject arbitrary script or HTML via specific parameters in error.php, filter_prefs.php, no_mail.php, html_bottom_table.php, and the _SESSION['nocc_theme'] in footer.php. The ...

CVE-2004-0894

CVE-2004-0894 is a local elevation-of-privilege issue in LSASS on Microsoft Windows 2000 Server and Windows Server 2003. The vulnerability stems from incomplete validation of connection information by LSASS, allowing a locally authenticated user to gain complete control of the system by running a...

Debian DSA-093-1 : postfix - remote DoS

Wietse Venema reported he found a denial of service vulnerability in postfix. The SMTP session log that postfix keeps for debugging purposes could grow to an unreasonable size. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...

CVE-2000-0894

WatchGuard SOHO Firewall HTTP service exposed to the private network allows administrative actions (password reset, reboot) without proper authentication, enabling denial of service or unauthorized activity. The ISS advisory details multiple issues mapped to CAN-2000-0894/0895/0896 across firmwar...

CVE-2003-0894

Buffer overflow in the 1 oracle and 2 oracleO programs in Oracle 9i Database 9.0.x and 9.2.x before 9.2.0.4 allows local users to execute arbitrary code via a long command line argument...

CVE-2003-0894

CVE-2003-0894 affects Oracle 9i Database (9.0.x and 9.2.x up to 9.2.0.4). A buffer overflow in the oracle and oracleO command-line programs can allow a local user to execute arbitrary code with the oracle user’s privileges via a long argv[1]. Public exploit scripts were noted by CERT/CC. Oracle r...

CVE-2002-0894

NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service crash via 1 a request for a long .jsp file, or 2 a long URL sent directly to com.newatlanta.servletexec.JSP10Servlet...

CVE-2002-0894

NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service crash via 1 a request for a long .jsp file, or 2 a long URL sent directly to com.newatlanta.servletexec.JSP10Servlet...

CVE-2002-0894

Affected software: NewAtlanta ServletExec ISAPI 4.1. The issue: remote denial of service caused by sending an overly long request for a .jsp file or a long URL to com.newatlanta.servletexec.JSP10Servlet. Vulnerable component: the ServletExec/JRun ISAPI handling for JSP requests. Impact: the remot...

CVE-2001-0894

Postfix SMTP server (pre-20010228-pl07) is affected by a remote DoS: when configured to email the postmaster on SMTP errors, a storm of errors can cause the SMTP session log to grow, leading to memory exhaustion. Debian advisory DSA-093-1 and OpenVAS/NESL entries corroborate a remote DoS due to e...

CVE-1999-0894

The CVE-1999-0894 issue concerns the Red Hat Linux screen program that does not use Unix98 ptys, enabling local users to write to other terminals. The connected PT-2000-1029 entry reiterates the Red Hat Linux screen issue and notes that no information about a newer version containing a fix is ava...