99 matches found
Multiple Vendors rpc.pcnfsd Syslog Format String Remote Code Execution (CVE-2010-1039)
The rpc.pcnfsd daemon handles requests from PC-NFS clients for authentication services on remote machines. These services include authentication for mounting and for print spooling. An integer overflow vulnerability was reported in the rpc.pcnfsd service within the several systems. The...
SuSE 11 Security Update : libpng (SAT Patch Number 1039)
This update of libpng improves the parsing of 1-bit interlaced images. This bug could be abused to use 'out-of-bounds pixels' to read memory. CVE-2009-2042 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 updat...
CVE-2009-1039
CVE-2009-1039: Buffer overflow in CDex 1.70b2 can allow remote code execution via a crafted Info header in an Ogg Vorbis (.ogg) file. Affected: CDex 1.70b2. Root cause: malformed Info header leads to overflow. No remediation details are provided in the supplied documents.
CVE-2008-1039
The vulnerability is a SQL injection in PORAR WEBBOARD’s web interface. Specifically, a weakness in the file/endpoint associated with question.asp allows remote attackers to inject arbitrary SQL through the QID parameter, enabling potentially unauthorized database access or manipulation as descri...
CVE-2007-1039
Unspecified vulnerability in Peanut Knowledge Base PeanutKB 0.0.3 and earlier has unknown impact and attack vectors...
CVE-2006-1039
CVE-2006-1039 affects the SAP Web Application Server (WebAS) Kernel prior to 7.0. The vulnerability allows remote attackers to inject arbitrary bytes into the HTTP response and obtain sensitive authentication information (and potentially other impacts) by exploiting a ";%20" sequence followed by ...
CVE-2005-1039
CVE-2005-1039 describes a race condition in Core Utilities (coreutils) 5.2.1. When running mkdir, mknod, or mkfifo with the -m switch, local users can modify permissions of other files. Connected sources (Red Hat, Ubuntu, Debian, OSV, NVD, etc.) reiterate the same description. The provided docume...
CVE-2004-1039
The CVE-2004-1039 issue affects SCO UnixWare 7.1.1, 7.1.3, 7.1.4, and 7.0.1 (and possibly other versions) when NFS mountd is run via inetd. The vulnerability arises because inetd spawns a new mountd process for each NFS mount-related request, causing memory exhaustion and potentially a system cra...
CVE-2004-1039
The NFS mountd service on SCO UnixWare 7.1.1, 7.1.3, 7.1.4, and 7.0.1, and possibly other versions, when run from inetd, allows remote attackers to cause a denial of service memory exhaustion via a series of requests, which causes inetd to launch a separate process for each request...
CVE-2004-1039
The NFS mountd service on SCO UnixWare 7.1.1, 7.1.3, 7.1.4, and 7.0.1, and possibly other versions, when run from inetd, allows remote attackers to cause a denial of service memory exhaustion via a series of requests, which causes inetd to launch a separate process for each request...
CVE-2003-1039
The CVE-2003-1039 entry describes multiple buffer overflows in the mySAP.com architecture for SAP, enabling remote code execution via a long HTTP Host header to three components: Message Server, Web Dispatcher, and Application Server. The root cause is buffer overflow in the handling of Host head...
CVE-2003-1039
Multiple buffer overflows in the mySAP.com architecture for SAP allow remote attackers to execute arbitrary code via a long HTTP Host header to 1 Message Server, 2 Web Dispatcher, or 3 Application Server...
CVE-2002-1039
The vulnerability CVE-2002-1039 affects Double Choco Latte (DCL) prior to 20020706. A directory traversal in the Projects: Attachments feature lets remote attackers read arbitrary files by manipulating .. sequences during file download. The impact is described as partial confidentiality loss. No ...
CVE-2002-1039
Directory traversal vulnerability in Double Choco Latte DCL before 20020706 allows remote attackers to read arbitrary files via .. dot dot sequences when downloading files from the Projects: Attachments feature...
CVE-2001-1039
The CVE describes a vulnerability in the JetAdmin web interface for HP JetDirect where the telnet interface password is not set after the admin password is changed. This allows remote attackers to gain access to the printer over the network (attack vector: network, low complexity). The available ...
CVE-1999-1039
CVE-1999-1039 affects IRIX 6.4, specifically the diskalign and diskperf code paths patched by IRIX 6.4 patches 2291 and 2848. A local user could create root-owned files, leading to a root compromise. The connected records confirm affected components and root-privelege impact; no exploit details a...
CVE-2000-1039
Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connection attempts and completing the TCP/IP handshake without maintaining the connection state on the attacker host, aka the "NAPTHA" class of vulnerabilities...
CVE-2000-1039
CVE-2000-1039 (Naptha) describes DoS in various TCP/IP stacks and network apps where remote attackers flood a target with TCP connection attempts and complete the TCP handshake without maintaining state, exhausting resources and causing partial availability impact. Connected documents confirm the...