CVE-2007-0950

CVE-2007-0950 is an XSS vulnerability in listmain.asp of the Fullaspsite ASP Hosting Site, exploitable by injecting arbitrary script via the cat parameter. The NVD entry records a CVSS v2 base score of 6.8 (Network attack vector, Medium access complexity, No authentication, Partial impact on conf...

CVE-2006-0950

CVE-2006-0950 affects unalz 0.53. The vulnerability is a directory traversal in ALZ extraction, where filename paths containing .. can cause files to be written outside the intended directory. This is due to an input validation error during extraction. Affected component: unalz (ALZ archive handl...

CVE-2005-0950

CVE-2005-0950 is a directory traversal vulnerability in FastStone 4in1 Browser 1.2. It allows remote attackers to read arbitrary files via a URL containing a triple-dot sequence (…)

CVE-2004-0950

CVE-2004-0950 affects Danware NetOp Host (prior to version 7.65 build 2004278). Affected component is the NetOp Host protocol during initial handshake, where an attacker can obtain sensitive information such as the host name, username, and local IP address. The vulnerability arises from informati...

CVE-2003-0950

CVE-2003-0950 affects PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x. The issue allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the directory name (based on system time) used to store the file, and directly requesting that file. The underlyi...

CVE-2003-0950

PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the insufficiently random system time name of the directory used to store the file, and directly requesting that file...

CVE-2002-0950

Cross-site scripting vulnerability in TransWARE Active! mail 1.422 and 2.0 allows remote attackers to execute arbitrary code via a certain e-mail header, which is not properly filtered...

CVE-2002-0950

TransWARE Active! mail 1.422 and 2.0 are affected by a cross-site scripting vulnerability in an email header that is not properly filtered, enabling remote attackers to execute arbitrary code. This CVE (CVE-2002-0950) has a CVSS v2 base score of 7.5 (NETWORK, LOW attack complexity, no authenticat...

CVE-2001-0950

CVE-2001-0950 concerns the ValiCert Enterprise Validation Authority (EVA) Administration Server, version 3.3–4.2.1. The root cause is the use of insufficiently random data: session tokens for HSMs are generated with the C rand() function, and certificate/key generation may rely on /dev/urandom in...

CVE-2000-0950

Format string vulnerability in x-gw in TIS Firewall Toolkit FWTK allows local users to execute arbitrary commands via a malformed display name...

CVE-2000-0950

CVE-2000-0950 affects the x-gw component of the TIS Firewall Toolkit (FWTK). The root cause is a format string vulnerability in x-gw that allows local users to execute arbitrary commands via a malformed display name. Impact as described: complete confidentiality, integrity, and availability could...

CVE-1999-0950

CVE-1999-0950 describes a buffer overflow in the WFTPD FTP server triggered by a sequence of MKD and CWD commands that create nested directories. The underlying vulnerability allows a remote attacker to gain root privileges on affected systems. The issue is a classic WU-FTPD-related overflow scen...

CVE-1999-0950

Buffer overflow in WFTPD FTP server allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories...