Mah-Jong 1.4 - ClientServer Remote sscanf() Buffer Overflow

Mah-Jong 1.4 - ClientServer Remote sscanf Buffer Overflow // source: https://www.securityfocus.com/bid/8557/info A remote buffer overflow vulnerability when calling the sscanf function has been reported to affect the mah-jong game client and server programs. The issue occurs within seperate sourc...

CVE-2003-0756

SiteBuilder 1.4 contains a directory traversal flaw in sitebuilder.cgi, exploitable via .. sequences in the selectedpage parameter that allows reading arbitrary files. Evidence from CVE-2003-0756 across NVD/Red Hat records confirms the same vector; no exploit status or active exploitation is prov...

Sitebuilder 1.4 - 'sitebuilder.cgi' Directory Traversal

source: https://www.securityfocus.com/bid/8521/info Sitebuilder is said to be prone to a directory traversal vulnerability, potentially allowing users to disclose the contents of system files. The problem occurs due to the application failing to parse user-supplied input for directory traversal...

DEBIAN-CVE-2003-0581

X Fontserver for Truetype fonts xfstt 1.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a 1 FSQueryXExtents8 or 2 FSQueryXBitmaps8 packet, and possibly other types of packets, with a large numranges value, which causes an out-of-bounds array access...

CVE-2003-0304

one||zero aka One or Zero Helpdesk 1.4 rc4 allows remote attackers to create administrator accounts by directly calling the install.php Helpdesk Installation script...

CVE-2001-1008

The CVE-2001-1008 entry concerns Java Plugin 1.4 for JRE 1.3, where signed applets can run even if the code-signing certificate is expired. This indicates a vulnerability in how the plugin handles expired certificates, allowing remote attackers to attempt unauthorized activity via an applet signe...

gBook

Informations : °°°°°°°°°°°°°° Language : PHP Tested version : 1.4 Problem : Admin access PHP Code : °°°°°°°°°° /gb/index.php : ------------------------------------------------------ ?php include"config.inc.php"; if$action == "login" if$user == $loginu && $pw == $loginpw setcookie"login", "true",...

CVE-2001-1365

Vulnerability in IntraGnat before 1.4...

CVE-2001-1365

Technical details about CVE-2001-1365 are not publicly available in the provided documents. Monitor for updates.

CVE-2001-1365

Vulnerability in IntraGnat before 1.4...

Interactive Story File Disclosure Vulnerability

Interactive Story File Disclosure Vulnerability qDefense Advisory Number QDAV-2001-7-3 Product: Interactive Story Vendor: Valerie Mates http://www.valeriemates.com Severity: Remote; Attacker may read arbitrary file Versions Affected: Version 1.3 Vendor Status: Vendor contacted; has released new...

Advisory Ghttp 1.4

/--------------------------------------------/ / - Advisory "Ghttpd 1.4" - / /--------------------------------------------/ / Auteurs : Lionel & Gangstuck / / Contact : [email protected] / / [email protected] / / WEB : www.secu-fr.org / / www.clickmicro.com / / IRC : :secu-fr clickmicro /...

CVE-2000-1175

Buffer overflow in Koules 1.4 allows local users to execute arbitrary commands via a long command line argument...

CVE-2000-1175

Buffer overflow in Koules 1.4 allows local users to execute arbitrary commands via a long command line argument...

CVE-2000-1175

CVE-2000-1175 describes a buffer overflow in Koules 1.4 that allows local users to execute arbitrary commands via a long command line argument. The affected product is Koules 1.4; the root cause is a buffer overflow triggered by long command-line input, enabling local privilege execution with a b...

CVE-2000-0361

The CVE-2000-0361 issue affects wvdial 1.4 and earlier, where the PPP wvdial.lxdialog script creates a .config file with world-readable permissions. This allows a local attacker who is in the dialout group to access login credentials stored in that file. The available connected sources confirm th...

AT Computing atsar_linux 1.4 - File Manipulation

AT Computing atsarlinux 1.4 - File Manipulation source: https://www.securityfocus.com/bid/1048/info atsar is a linux load monitoring software package released under the GPL by AT Computing. atsadc is a setuid root binary that is included in the atsar package. atsadc is setuid because it obtains...