101 matches found
CVE-2009-0987
CVE-2009-0987 affects Oracle Database: Upgrade component in versions 9.2.0.8, 9.2.0.8DV, 10.1.0.5 and 10.2.0.3. The vulnerability allows remote authenticated users to affect confidentiality and integrity via unknown vectors, with the vulnerability listed in the July 2009 CPU. The Oracle risk matr...
CVE-2008-0987
Apple Mac OS X 10.5.2 (and Digital Camera RAW Compatibility before Update 2.0 for Aperture 2 and iPhoto 7.1.2) is affected by a stack-based buffer overflow in Image Raw when processing crafted DNG images, allowing remote code execution. The issue is triggered by malformed Adobe Digital Negative f...
SOL5576 - Authentication vulnerability in Apache mod_digest - CAN-2003-0987
Vulnerability description moddigest for Apache before 1.3.31 does not properly verify the nonce of a client response by using a AuthNonce secret. Information about this advisory is available at the following location:...
CVE-2007-0987
CVE-2007-0987 is a real vulnerability in Jupiter CMS 1.1.5: directory traversal via the n parameter in index.php allows remote attackers to include and execute arbitrary local files using .. or an absolute pathname. Affects the web application component (index.php) and is exploitable over a remot...
CVE-2006-0987
CVE-2006-0987 affects ISC BIND configured as a caching DNS server, where the default setup before 9.4.1-P1 allows recursive queries and leaks delegation information to arbitrary IPs, enabling remote attackers to trigger traffic amplification and a denial of service via spoofed DNS queries. The co...
CVE-2005-0987
CVE-2005-0987 is described as an Unknown vulnerability in IRC Services NickServ LISTLINKS prior to version 5.0.50, allowing remote attackers to obtain the links of a nick. The connected documents confirm the affected component as IRC Services NickServ LISTLINKS and specify the fixed version as 5....
CVE-2004-0987
Buffer overflow in the processmenu function in yardradius 1.0.20 allows remote attackers to execute arbitrary code...
CVE-2004-0987
CVE-2004-0987 refers to a buffer overflow in yardradius 1.0.20 (process_menu) that allows remote arbitrary code execution. Debian DSA-598-1 fixes this in yardradius 1.0.20-2woody1 (stable Woody) and 1.0.20-15 (sid). The vulnerability is remote and can give root context; upgrade to the fixed packa...
Debian DSA-598-1 : yardradius - buffer overflow
Max Vozeler noticed that yardradius, the YARD radius authentication and accounting server, contained a stack overflow similar to the one from radiusd which is referenced as CAN-2001-0534. This could lead to the execution of arbitrary code as root. %NASLMINLEVEL 70300 C Tenable Network Security,...
CVE-2003-0987
...
CVE-2003-0987
moddigest for Apache before 1.3.31 does not properly verify the nonce of a client response by using a AuthNonce secret...
CVE-2003-0987
CVE-2003-0987 affects Apache’s mod_digest prior to 1.3.31, where nonce verification using an AuthNonce secret can enable a replay attack. Affected component: mod_digest in the Apache HTTP Server. Root cause: improper nonce validation allows interception and replay of Digest authentication sequenc...
CVE-2002-0987
X server Xsco in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp using popen, which could allow local users to gain privileges...
CVE-2002-0987
The CVE-2002-0987 entry refers to X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 that fail to drop privileges before invoking programs (e.g., xkbcomp) via popen. This behavior could allow local users to gain privileges. The described vulnerability is a local privilege escalation due to inad...
CVE-2002-0987
X server Xsco in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp using popen, which could allow local users to gain privileges...
CVE-2001-0987
Cross-site scripting vulnerability in CGIWrap before 3.7 allows remote attackers to execute arbitrary Javascript on other web clients by causing the Javascript to be inserted into error messages that are generated by CGIWrap...
CVE-2001-0987
Cross-site scripting vulnerability in CGIWrap before 3.7 allows remote attackers to execute arbitrary Javascript on other web clients by causing the Javascript to be inserted into error messages that are generated by CGIWrap...
CVE-2000-0987
Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter...
CVE-1999-0987
CVE-1999-0987 affects Windows NT where a domain user logging in with a trailing space in the domain name can cause the system policy to download improperly. The CVSS v2 base score is 10.0 (HIGH) with network attack vector and no authentication required, indicating a severe impact on confidentiali...