94 matches found
CVE-2007-0955
The CVE-2007-0955 entry concerns MailEnable Professional (version 2.35 and earlier) where the NTLM_UnPack_Type3 function in MENTLM.dll is vulnerable. Remote attackers can cause an application crash (DoS) by sending certain base64-encoded data after an AUTHENTICATE NTLM command to the IMAP port (1...
CVE-2003-1147
CVE-2003-1147 is rejected and not used; duplicate of CVE-2003-0955.
CVE-2005-0955
InterAKT MX Shop 1.1.1 is affected by a SQL injection vulnerability via the id_ctg parameter, allowing remote attackers to execute arbitrary SQL commands. CVSSv2 base score 7.5 (NETWORK/LOW ATTACK COMPLEXITY, NO AUTHENTICATION). No remediation details are provided in the supplied documents; explo...
CVE-2003-1147
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2003-0955. Reason: This candidate is a duplicate of CVE-2003-0955. Notes: All CVE users should reference CVE-2003-0955 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2003-0955
OpenBSD kernel 3.3 and 3.4 are affected by CVE-2003-0955 due to a stack-based buffer overflow in iBCS2 emulation (ibcs2_exec.c) and in exec_elf.c triggered by a program with an invalid header. Local users can cause a denial of service (kernel panic) and possibly execute arbitrary code on 3.4. The...
CVE-2002-0955
Cross-site scripting vulnerability in YaBB.cgi for Yet Another Bulletin Board YaBB 1 Gold SP1 and earlier allows remote attackers to execute arbitrary script as other web site visitors via script in the num parameter, which is not filtered in the resulting error message...
CVE-2002-0955
Cross-site scripting vulnerability in YaBB.cgi for Yet Another Bulletin Board YaBB 1 Gold SP1 and earlier allows remote attackers to execute arbitrary script as other web site visitors via script in the num parameter, which is not filtered in the resulting error message...
CVE-2002-0955
CVE-2002-0955 describes a cross-site scripting vulnerability in YaBB.cgi for Yet Another Bulletin Board (YaBB) 1 Gold SP1 and earlier. An attacker can supply a malicious script via the num parameter, which is not filtered in the resulting error message, allowing the script to run in the context o...
CVE-2001-0955
Buffer overflow in fbglyph.c in XFree86 before 4.2.0, related to glyph clipping for large origins, allows attackers to cause a denial of service and possibly gain privileges via a large number of characters, possibly through the web page search form of KDE Konqueror or from an xterm command with ...
CVE-2001-0955
XFree86 vulnerable to a buffer overflow in fbglyph.c (before 4.2.0) related to glyph clipping for large origins. The issue can cause a denial of service and may allow privilege escalation via a large number of characters, potentially triggered by a long title in an xterm or through KDE Konqueror ...
CVE-2001-0955
Buffer overflow in fbglyph.c in XFree86 before 4.2.0, related to glyph clipping for large origins, allows attackers to cause a denial of service and possibly gain privileges via a large number of characters, possibly through the web page search form of KDE Konqueror or from an xterm command with ...
CVE-2000-0955
CVE-2000-0955 affects Cisco Virtual Central Office 4000 (VCO/4K). The issue is weak encryption used to store usernames and passwords in the SNMP MIB, enabling an attacker who knows the community name to crack credentials and gain privileges. According to the NVD entry, this yields a CVSS v2 base ...
CVE-1999-0955
CVE-1999-0955 describes a race condition in wu-ftpd and BSDI ftpd that allows remote attackers to gain root access via the SITE EXEC command. Affected software includes wu-ftpd and BSDI ftpd; the underlying issue is a race in handling SITE EXEC. The vulnerability is remote-exploit via FTP, leadin...