101 matches found
Debian Security Advisory DSA 425-1 (tcpdump)
The remote host is missing an update to tcpdump announced via advisory DSA 425-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Buffer overflow
Buffer overflow in the EasyMailSMTPObj ActiveX control in emsmtp.dll 6.0.1 in the Quiksoft EasyMail SMTP Object, as used in Postcast Server Pro 3.0.61 and other products, allows remote attackers to execute arbitrary code via a long argument to the SubmitToExpress method, a different vulnerability...
CVE-2007-1029
Stack-based buffer overflow in the Connect method in the IMAP4 component in Quiksoft EasyMail Objects before 6.5 allows remote attackers to execute arbitrary code via a long host name...
CVE-2007-1029
CVE-2007-1029 concerns the Quiksoft EasyMail Objects IMAP4 component. A stack-based buffer overflow in the Connect method can be triggered by a long hostname, potentially allowing remote code execution. Affected products include EasyMail Objects versions before 6.5; warnings and advisories refere...
CVE-2006-7008
Unspecified vulnerability in Joomla! before 1.0.10 has unknown impact and attack vectors, related to "securing mosmsg from misuse." NOTE: it is possible that this issue overlaps CVE-2006-1029...
CVE-2006-1029
Technical details about CVE-2006-1029 are not publicly available in the provided documents; monitor for updates.
Mac OS X Java JRE Plug-in Capability Arbitrary Package Access (Security Update 2005-002)
The remote host is missing Security Update 2005-002. This security update contains a security bugfix for Java 1.4.2. A vulnerability in the Java Plug-in may allow an untrusted applet to escalate privileges, through JavaScript calling into Java code, including reading and writing files with the...
CVE-2004-1029
The vulnerability CVE-2004-1029 affects Sun Java Plug-in in JRE 1.4.2_01, 1.4.2_04, and possibly earlier versions, where data transfer between JavaScript and Java applets fails to restrict access. The root cause is improper isolation that allows a remote attacker to use reflection to access priva...
CVE-2001-1029
libutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the capabilities for reading the copyright and welcome files, which allows local users to bypass the capabilities checks and read arbitrary files by specifying alternate copyright or welcome files...
CVE-2001-1029
CVE-2001-1029 : In FreeBSD 4.4 and earlier, libutil in OpenSSH does not drop privileges before verifying capabilities for reading copyright and welcome files, allowing local users to bypass capability checks and read arbitrary files by specifying alternate files. The description provides the vuln...
CVE-2003-1029
CVE-2003-1029 affects the tcpdump packet analyzer (versions 3.8.1 and earlier) with a vulnerable L2TP protocol parser. A packet with invalid data sent to UDP port 1701 can trigger an infinite loop and unbounded memory use in l2tp_avp_print, causing a denial of service. Connections in the related ...
CVE-2002-1029
Res Manager in Worldspan for Windows Gateway 4.1 allows remote attackers to cause a denial of service crash via a malformed request to TCP port 17990...
CVE-2002-1029
CVE-2002-1029 describes a Denial of Service in Worldspan for Windows Gateway 4.1, specifically the Res Manager component. An attacker can remotely crash the service by sending a malformed request to TCP port 17990, leading to partial availability impact. The vulnerability is documented in multipl...
CVE-2001-1029
libutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the capabilities for reading the copyright and welcome files, which allows local users to bypass the capabilities checks and read arbitrary files by specifying alternate copyright or welcome files...
CVE-1999-1029
SSHD2 before 2.0.12 does not log login attempts if the connection is closed early, enabling a remote attacker to guess passwords without audit entries; affected software: SSHD2 prior to 2.0.12.
CVE-1999-1029
SSH server sshd2 before 2.0.12 does not properly record login attempts if the connection is closed before the maximum number of tries, allowing a remote attacker to guess the password without showing up in the audit logs...
CVE-2000-1029
Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR query...
CVE-2000-1029
CVE-2000-1029 describes a buffer overflow in the host command that lets a remote attacker execute arbitrary commands via a long response to an AXFR (zone transfer) query. The available documents confirm this vulnerability can yield complete confidentiality, integrity, and availability impact as i...