87 matches found
CVE-2002-0942
Buffer overflows in Lugiment Log Explorer before 3.02 allow attackers with database permissions to execute arbitrary code via long arguments to the extended stored procedures 1 xplogattachStartProf, 2 xplogattachsetport, or 3 xplogattach...
CVE-2001-0942
The CVE concerns Oracle 8.1.6 and 8.1.7 where dbsnmp uses the ORACLE_HOME environment variable to locate and execute the dbsnmp program. A local user can point ORACLE_HOME to an attacker-controlled directory that contains a malicious dbsnmp, enabling arbitrary code execution with local privileges...
CVE-2001-0942
dbsnmp in Oracle 8.1.6 and 8.1.7 uses the ORACLEHOME environment variable to find and execute the dbsnmp program, which allows local users to execute arbitrary programs by pointing the ORACLEHOME to an alternate directory that contains a malicious version of dbsnmp...
CVE-2000-0942
CVE-2000-0942 affects the CiWebHitsFile component of Microsoft Indexing Services for Windows 2000. The vulnerability allows remote attackers to perform a cross-site scripting (XSS) attack via a CiRestriction parameter in a .htw request. The NVD/connected records confirm the impact as a partial co...
CVE-2000-0942
The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting CSS attack via a CiRestriction parameter in a .htw request, aka the "Indexing Services Cross Site Scripting" vulnerability...
CVE-1999-0942
UnixWare dos7utils is affected by CVE-1999-0942. A local user can gain root privileges by using the STATICMERGE environment variable to locate and execute a script. The vulnerability is triggered by how STATICMERGE is resolved and used by the utility, enabling privilege escalation. Affected versi...