80 matches found
Mac OS X 10.5.x < 10.5.3 Multiple Vulnerabilities
The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.3. Mac OS X 10.5.3 contains security fixes for a number of programs. C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; if NASLLEVEL 3004 exit0; include"compat.inc"; if description scriptid32477;...
Mac OS X Multiple Vulnerabilities (Security Update 2008-003)
The remote host is running a version of Mac OS X 10.4 that does not have the security update 2008-003 applied. This update contains security fixes for a number of programs. C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; if NASLLEVEL 3004 exit0; include"compat.inc"; if descripti...
Apple Help Viewer vulnerable to buffer overflow
Overview A vulnerability in the way Apple Help Viewer handles specially crafted URLs may allow an attacker to execute arbitrary code or cause a denial of service. Description According to Apple Security Update 2008-003: An integer underflow in Help Viewer's handling of help:topic URLs may result ...
Apple Mac OS X 2008-003更新修复多个安全漏洞
BUGTRAQ ID: 29412 CVECAN ID: CVE-2008-1027,CVE-2008-1028,CVE-2008-1577,CVE-2008-1575,CVE-2008-1580,CVE-2008-1030,CVE-2008-1031,CVE-2008-1032,CVE-2008-1033,CVE-2008-1034,CVE-2008-1035,CVE-2008-1036,CVE-2008-1571,CVE-2008-1572,CVE-2008-1573,CVE-2008-1574,CVE-2008-1576,CVE-2008-1578,CVE-2008-1579 Ma...
lsa_transnames_heap-osx.rb.txt
$Id: lsatransnamesheap.rb 5059 2007-07-24 23:44:44Z ramon $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
CVE-2007-1034
The CVE-2007-1034 entry describes an SQL injection vulnerability in the Emporium module (PHP-Nuke) affecting version 2.3.0 and earlier. The issue lies in the category_id parameter processed by modules.php, which allows remote attackers to execute arbitrary SQL commands. Observed impact is arbitra...
Debian DSA-1034-1 : horde2 - several vulnerabilities
Several remote vulnerabilities have been discovered in the Horde web application framework, which may lead to the execution of arbitrary web script code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-1260 Null characters in the URL parameter bypas...
CVE-2005-1034
CVE-2005-1034 affects SurgeFTP 2.2m1 and allows a remote attacker to cause a denial of service (application hang) by abusing the non‑standard LEAK command. The underlying issue is how the LEAK command is processed, which can crash the ftp daemon. Public material in the connected sources notes tha...
CVE-2004-1034
CVE-2004-1034 describes a buffer overflow in Kaffeine (before 0.5) whose code is also used in gxine (before 0.3.3) triggered by a long Content-Type header for a Real Audio .ram playlist. The overflow occurs in the http_open function and can cause a denial of service (application crash) and potent...
CVE-2004-1034
Buffer overflow in the httpopen function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long Content-Type header for a Real Audio Media .ram playlist file...
CVE-2004-1034
Buffer overflow in the httpopen function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long Content-Type header for a Real Audio Media .ram playlist file...
CVE-2003-1034
The RPM installation of SAP DB 7.x creates the 1 dbmsrv or 2 lserver programs with world-writable permissions, which allows local users to gain privileges by modifying those programs...
CVE-2003-1034
The CVE-2003-1034 issue affects SAP DB 7.x when installed as an RPM: the dbmsrv and lserver binaries are created with world-writable permissions, enabling local users to modify these executables and escalate privileges. This is a local privilege escalation vulnerability due to insufficient file p...
CVE-2002-1034
none.php for SunPS iRunbook 2.5.2 allows remote attackers to read arbitrary files via an absolute pathname in the argument...
CVE-2002-1034
CVE-2002-1034 affects SunPS iRunbook 2.5.2. The vulnerability is triggered through none.php by supplying an absolute pathname as an argument, enabling remote attackers to read arbitrary files and potentially compromise confidentiality (and integrity per CVSS). The available connected documents pr...
CVE-1999-1034
This CVE (CVE-1999-1034) is a local privilege escalation in the login component of AT&T System V Release 4. The NVD entry lists a base score of 7.2 (HIGH) with Local attack vector, low attack complexity, no authentication required, and complete impact on confidentiality, integrity, and availabili...
CVE-2001-1034
CVE-2001-1034 describes format-string vulnerabilities in HylaFAX. HylaFAX components affected include faxrm, faxalter, faxgetty, faxwatch, and hfaxd; the root cause is unchecked input used as a format string, enabling local privilege escalation or denial of service in some configurations. Debian ...
CVE-2000-1034
Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFileName parameter in HTML source code, aka the "ActiveX Parameter Validation" vulnerability...
CVE-2000-1034
Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFileName parameter in HTML source code, aka the "ActiveX Parameter Validation" vulnerability...