336 matches found
Unify eWave ServletExec 3.0C file upload
ServletExec has a servlet called SPDX-FileCopyrightText: 2000 Matt Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10570";...
CVE-2005-1024
modules.php in PHP-Nuke 6.x to 7.6 allows remote attackers to obtain sensitive information via a direct request to 1 myheadlines, 2 userinfo, or 3 search, which reveals the path in a PHP error message...
CVE-2005-1024
CVE-2005-1024 affects PHP-Nuke 6.x to 7.6. The issue is an information disclosure via direct requests to my_headlines, userinfo, or search, which causes a PHP error that reveals the path. No explicit root cause or vulnerable version patch is provided in the connected documents, and exploitation d...
Sun Solaris tcsh(1) contains vulnerability in the built-in ls-F command
Overview Sun Solaris tcsh1 contains a vulnerability in the built-in ls-F command that could allow an unprivileged user to create or remove files or gain privileges of another user. Description A vulnerability in the built-in ls-F command of the Sun Solaris tcsh1 may allow an intruder to create or...
CVE-2003-1024
The CVE-2003-1024 entry affects the Sun Solaris tcsh(1) built-in ls-F command on Solaris 8. The root cause is a vulnerability in the ls-F implementation that could allow a local unprivileged user to create or delete files as another user and possibly gain privileges (up to the attacker’s describe...
CVE-2002-1024
Technical details for CVE-2002-1024 are not publicly available in the provided connected documents. Monitor for updates in the Vulners feed for affected products, versions, impact, and fixes.
CVE-2002-1024
Cisco IOS 12.0 through 12.2, when supporting SSH, allows remote attackers to cause a denial of service CPU consumption via a large packet that was designed to exploit the SSH CRC32 attack detection overflow CVE-2001-0144...
CVE-2001-1024
CVE-2001-1024 : Entrust getAccess CGI scripts (e.g., login.gas.bat) are vulnerable to remote command execution via an alternate -classpath argument, allowing an attacker to run Java programs. The CVSS data indicates a Network-exposed, low complexity, no-auth exploit with Partial impact on confide...
CVE-2001-1024
login.gas.bat and other CGI scripts in Entrust getAccess allow remote attackers to execute Java programs, and possibly arbitrary commands, by specifying an alternate -classpath argument...
WRSHDNT 2.21.00 CPU overusage
WRSHDNT 2.21.00 CPU overusage Greetings, Denicomp Systems fixed previous bug partially: version 2.21.00 is prone to the same bug when port number is 1024. Support personnel reply to my bug report was: "If you don't write buggy rsh clients, you don't have a problem :" Cheers, Martin / WRSHDNT...
CVE-1999-1024
ipprint procedure in Tcpdump 3.4a allows remote attackers to cause a denial of service via a packet with a zero length header, which causes an infinite loop and core dump when tcpdump prints the packet...
CVE-1999-1024
The CVE-1999-1024 entry concerns the ip_print path in tcpdump 3.4a. A packet with a zero-length header can trigger an infinite loop within ip_print, leading to a denial of service and core dump when tcpdump prints the packet. The vulnerability is network-transmissible and has a high impact as per...
CVE-2000-1024
eWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet, which allows remote attackers to upload files and execute arbitrary commands...
CVE-1999-0816
The connected records confirm CVE-1999-0816 affects the Motorola CableRouter, where a remote attacker can connect to and configure the device via port 1024. The core vulnerability details (root cause, exact component/file, affected versions) are not explicitly specified in the provided documents....