CVE-2008-0924

The CVE-2008-0924 issue affects Novell eDirectory (Linux and possibly others) where a stack-based buffer overflow in the DoLBURPRequest path of libnldap/ndsd is triggered by a long delRequest LDAP Extended Request, likely involving a long DN. Affected versions are eDirectory 8.7.3.9 and earlier, ...

Novell eDirectory LDAP扩展请求消息栈溢出漏洞

BUGTRAQ ID: 28434 CVECAN ID: CVE-2008-0924 Novell eDirectory是一个的跨平台的目录服务器。 Novell eDirectory处理畸形的请求数据时存在缓冲区溢出漏洞，如果向Novell eDirectory服务器发送了超长的LDAP扩展请求消息的话，就可能触发栈溢出，导致执行任意指令。 Novell eDirectory = 8.8.1 Novell eDirectory = 8.7.3.9 Novell ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

ZDI-08-013: Novell eDirectory for Linux Stack Overflow

ZDI-08-013: Novell eDirectory for Linux Stack Overflow http://www.zerodayinitiative.com/advisories/ZDI-08-013 March 26, 2008 -- CVE ID: CVE-2008-0924 -- Affected Vendors: Novell -- Affected Products: Novell eDirectory -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers have been...

Debian Security Advisory DSA 426-1 (netpbm-free)

The remote host is missing an update to netpbm-free announced via advisory DSA 426-1. OpenVAS Vulnerability Test $Id: deb4261.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 426-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2007-0924

CVE-2007-0924 affects phpPolls 1.0.3. The issue allows remote attackers to bypass authentication and perform certain administrative actions via a direct request to phpPollAdmin.php3. The vulnerability may subsume CVE-2006-3764. Exploit details, affected versions beyond 1.0.3, or concrete remediat...

CVE-2006-0924

Affected product : Brown Bear iCal 3.10. Vulnerability : Cross-site scripting (XSS) via the Calendar Text field when adding a new event. Impact : remote attackers can inject arbitrary web script or HTML. Root cause : insufficient sanitization/input handling in the Calendar Text field. Exploitatio...

CVE-2004-0924

NetInfo Manager on Mac OS X 10.3.x through 10.3.5, after an initial root login, reports the root account as being disabled, even when it has not...

CVE-2004-0924

CVE-2004-0924 affects NetInfo Manager on Mac OS X 10.3.x up to 10.3.5. After an initial root login, it reports the root account as disabled even when it has not, implying a misleading status indication. The available sources confirm the issue but do not provide concrete remediation steps or patch...

CVE-2004-0924

NetInfo Manager on Mac OS X 10.3.x through 10.3.5, after an initial root login, reports the root account as being disabled, even when it has not...

CVE-2003-0924

netpbm 9.25 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files...

CVE-2003-0924

CVE-2003-0924 concerns NetPBM immediately prior to version 10.0, where utilities create temporary files with predictable names, enabling a local attacker to overwrite files with the invoking user’s privileges. Public reports summarize effects across multiple distributions (Debian DSA-426, Red Hat...

CVE-2003-0924

netpbm 9.25 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files...

Mandrake Linux Security Advisory : netpbm (MDKSA-2004:011-1)

A number of temporary file bugs have been found in versions of NetPBM. These could allow a local user the ability to overwrite or create files as a different user who happens to run one of the the vulnerable utilities. Update : The patch applied made some calls to the mktemp utility with an...

DEBIAN-CVE-2003-0924

netpbm 9.25 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files...

CVE-2002-0924

CVE-2002-0924 affects CGIScript.net’s csNews.cgi. The vulnerability allows remote authenticated users to execute arbitrary Perl code by injecting terminating quotes and metacharacters into text fields under the “Advanced Settings” capability. The CVSS metrics in the provided document indicate net...

CVE-2001-0924

Directory traversal vulnerability in ifx CGI program in Informix Web DataBlade allows remote attackers to read arbitrary files via a .. dot dot in the LO parameter...

CVE-2001-0924

CVE-2001-0924 describes a directory traversal vulnerability in the Informix SQL Web DataBlade CGI (LO parameter) that allows remote attackers to read arbitrary files on the affected system. The issue arises from improper handling of the .. (dot dot) path traversal in the LO parameter of the ifx C...

CVE-1999-0924

The Syntax Checker in ColdFusion Server 4.0 allows remote attackers to conduct a denial of service...

CVE-1999-0924

The CVE-1999-0924 entry concerns ColdFusion Server 4.0, where the Syntax Checker component is the vulnerable element. The issue enables remote denial of service. The connected documents reiterate the same description and do not provide explicit exploit vectors, affected build numbers beyond “4.0,...

CVE-2000-0924

The CVE-2000-0924 entry describes a directory traversal in Armada Master Index’s search.cgi, exploitable via the catigory parameter using .. to read arbitrary files. Affected component: search.cgi. Impact: partial confidentiality loss. Exploit details and patch availability are not provided in th...