Multiple vulnerabilities in LEPTON

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in LEPTON, which can be exploited to perform Local File Inclusion, Cross Site Scripting and SQL Injection attacks. 1 Local File Inclusion in LEPTON: CVE-2012-0998 Input passed via the "language" POST parameter to...

CVE-2010-0998

Free Download Manager (FDM) is affected by CVE-2010-0998 due to multiple stack-based buffer overflows in versions prior to 3.0.852. The issues affect Site Explorer folders and websites handling, plus processing of FTP URIs and redirects, enabling remote code execution. OpenVAS and Secunia report ...

CVE-2009-0998

Unspecified vulnerability in the PeopleSoft Enterprise HRMS - eBenefits component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2009-0998

CVE-2009-0998 affects the PeopleSoft Enterprise HRMS eBenefits component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne, specifically versions 8.9.18 and 9.0.8. The vulnerability is described as an unspecified issue that allows remote authenticated users to compromise confidentialit...

CVE-2008-0998

CVE-2008-0998 affects Apple Mac OS X 10.4.11 and 10.5.2. The vulnerability is in NetCfgTool (System Configuration) where local users can bypass authorization and execute arbitrary code by sending crafted distributed objects to a privileged process. The root cause is improper handling of distribut...

RHEL 5 : xen (RHSA-2007:0114)

An updated Xen package to fix one security issue and two bugs is now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The Xen package contains the tools for managing the virtual machine monitor in Red H...

CVE-2007-0998

Summary of CVE-2007-0998 : The vulnerability concerns the VNC server implementation in QEMU (as used by Xen and potentially other environments). It allows local users within a guest OS to read arbitrary files on the host via the QEMU monitor mode, demonstrated by mapping files to a CD-ROM device;...

Important: Red Hat Security Advisory: xen security update

An updated Xen package to fix one security issue and two bugs is now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The Xen package contains the tools for managing the virtual machine monitor in Red H...

CVE-2005-0998

The CVE-2005-0998 entry concerns the Web_Links module of PHP-Nuke 7.6. Reported vulnerability: an invalid show parameter triggers a division-by-zero PHP error, causing leakage of the server’s full pathname. Affected component: Web_Links module (PHP-Nuke 7.6). Impact: remote attackers could obtain...

CVE-2004-0998

CVE-2004-0998 is a format-string vulnerability in telnetd-ssl versions up to 0.17.17+0.1-2woody3 (stable) / 0.17.24+0.1-6 (sid) that allows a remote attacker to execute arbitrary code. Debian's DSA-616-1 confirms a remote, format-string flaw in netkit-telnet-ssl with a fixed upgrade path to the c...

CVE-2004-0998

Format string vulnerability in telnetd-ssl 0.17 and earlier allows remote attackers to execute arbitrary code...

CVE-2004-0998

Format string vulnerability in telnetd-ssl 0.17 and earlier allows remote attackers to execute arbitrary code...

CVE-2003-0998

Technical details about CVE-2003-0998 are not publicly provided in the connected documents. No affected versions, root cause, or remediation are specified here. Monitor for updates in case new details are released.

CVE-2002-0998

Directory traversal vulnerability in cafenews.php for CARE 2002 before beta 1.0.02 allows remote attackers to read arbitrary files via .. dot dot sequences and null characters in the lang parameter, which is processed by a call to the include function...

CVE-2002-0998

The CVE-2002-0998 entry affects CARE 2002 prior to beta 1.0.02 in cafenews.php, where the lang parameter is processed by include, enabling directory traversal to read arbitrary files via .. patterns (and null chars). The issue arises in the cafenews.php include call, affecting CARE 2002’s web com...

CVE-2001-0998

IBM HACMP 4.4 allows remote attackers to cause a denial of service via a completed TCP connection to HACMP ports e.g., using a port scan that does not send additional data, which causes a failure in snmpd...

CVE-2001-0998

CVE-2001-0998 affects IBM HACMP 4.4. A completed TCP connection to HACMP ports (e.g., during a port scan) that sends no additional data can cause a failure in snmpd, yielding a denial-of-service condition. The available sources identify the affected product and the remote DoS impact but do not pr...

CVE-2001-0998

IBM HACMP 4.4 allows remote attackers to cause a denial of service via a completed TCP connection to HACMP ports e.g., using a port scan that does not send additional data, which causes a failure in snmpd...

CVE-2000-0998

CVE-2000-0998 describes a format-string vulnerability in the top program that allows local attackers to gain root privileges via the kill or renice functions. The connected documents confirm the vulnerability description but do not provide concrete exploitation details, affected product versions,...

CVE-1999-0998

The CVE-1999-0998 entry concerns Cisco Cache Engine, where an attacker can replace content in the cache. The connected PT-1999-1517 entry reiterates Cisco Cache Engine as affected, but does not specify affected versions. The NVD entry shows a CVSS v2 base score of 5.0 (Network attack vector, low ...