CVE-2006-0973

CVE-2006-0973 describes an SQL injection vulnerability in topics.php of the Appalachian State University phpWebSite project (version 0.10.2 and earlier). The underlying issue is that the topic parameter is used unsafely in SQL queries, allowing remote attackers to inject arbitrary SQL commands. T...

CVE-2005-0973

CVE-2005-0973 affects Mac OS X 10.3.9 and earlier. The issue is in the setsockopt system call and allows local users to cause a denial of service via crafted arguments, resulting in memory exhaustion. In the connected documents, the description consistently states a local, memory-exhaustion impac...

CVE-2004-0973

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-0457. Reason: This candidate is a reservation duplicate of CVE-2004-0457. Notes: All CVE users should reference CVE-2004-0457 instead of this candidate. All references and descriptions in this candidate have been removed to...

[FLSA-2004:1325] Updated mod_python packages fix security vulnerability

----------------------------------------------------------------------- Fedora Legacy Update Advisory Synopsis: Updated modpython resolves security vulnerability Advisory ID: FLSA:1325 Issue date: 2004-10-03 Product: Red Hat Linux Keywords: Security Cross references:...

RHEL 2.1 / 3 : mod_python (RHSA-2004:058)

Updated modpython packages that fix a denial of service vulnerability are now available for Red Hat Enterprise Linux. modpython embeds the Python language interpreter within the Apache httpd server. A bug has been found in modpython versions 2.7.10 and earlier that can lead to a denial of service...

CVE-2003-0973

Unknown vulnerability in modpython 3.0.x before 3.0.4, and 2.7.x before 2.7.9, allows remote attackers to cause a denial of service httpd crash via a certain query string...

CVE-2003-0973

The CVE-2003-0973 entry describes a denial-of-service in mod_python: affected versions are mod_python 3.0.x before 3.0.4 and 2.7.x before 2.7.9. A remote attacker can crash the Apache httpd by supplying a crafted query string. Public advisories (e.g., Debian DSA-452, Red Hat RHSA-2004:058, and re...

CVE-2002-0973

Integer signedness error in several system calls for FreeBSD 4.6.1 RELEASE-p10 and earlier may allow attackers to access sensitive kernel memory via large negative values to the 1 accept, 2 getsockname, and 3 getpeername system calls, and the 4 vesa FBIOGETPALETTE ioctl...

CVE-2002-0973

The CVE-2002-0973 entry describes an integer signedness error in FreeBSD 4.6.1 RELEASE-p10 and earlier affecting the (1) accept, (2) getsockname, (3) getpeername system calls, and (4) vesa FBIO_GETPALETTE ioctl. This vulnerability can allow attackers to access sensitive kernel memory by supplying...

CVE-2001-0973

CVE-2001-0973 concerns BSCW groupware (versions 3.3–4.0.2 beta). The vulnerability arises when extracting tar archives into the user’s data-bag space: symbolic links within the tar are followed, allowing a remote attacker to read arbitrary files readable by the web server and potentially overwrit...

CVE-2001-0973

BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary files by uploading and extracting a tar file with a symlink into the data-bag space...

CVE-2001-0973

BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary files by uploading and extracting a tar file with a symlink into the data-bag space...

CVE-2000-0973

Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by forcing a long error message to be generated...

CVE-2000-0973

CVE-2000-0973 affects curl before 6.0-1.1 and curl-ssl before 6.0-1.2. A buffer overflow occurs when generating a long error message, allowing remote attackers to execute arbitrary commands. Root cause: unchecked length in error handling. Connected sources (OSV, CVE records) confirm the overflow ...

CVE-2000-0973

Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by forcing a long error message to be generated...

CVE-1999-0973

CVE-1999-0973 describes a buffer overflow in the Solaris snoop program. An attacker can trigger the overflow by supplying a long domain name when snoop runs in verbose mode, potentially allowing remote code execution to gain root privileges. Public records consistently cite the vulnerable compone...