98 matches found
RHEL 4 : thunderbird (RHSA-2006:0330)
Updated thunderbird packages that fix various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 24 Apr 2006 The erratum text has been updated to include the details of additional issu...
Critical: Red Hat Security Advisory: thunderbird security update
Updated thunderbird packages that fix various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 24 Apr 2006 The erratum text has been updated to include the details of additional issu...
CVE-2006-1045
The CVE affects Mozilla Thunderbird 1.5. When Block loading of remote images in mail messages is enabled, Thunderbird’s HTML rendering engine does not fully block external images in inline HTML attachments. This could allow a remote attacker to obtain sensitive information (e.g., application vers...
CVE-2003-1045
votes.cgi in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote attackers to read a user's voting page when that user has voted on a restricted bug, which allows remote attackers to read potentially sensitive voting information by modifying the who parameter...
CVE-2003-1045
CVE-2003-1045 affects Bugzilla: votes.cgi in Bugzilla 2.16.3 and earlier, and 2.17.1–2.17.4. The vulnerability lets remote attackers read a user’s voting page if that user voted on a restricted bug, by modifying the who parameter to access potentially sensitive voting information. The underlying ...
CVE-2003-1045
votes.cgi in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote attackers to read a user's voting page when that user has voted on a restricted bug, which allows remote attackers to read potentially sensitive voting information by modifying the who parameter...
CVE-2002-1045
Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service crash via a malformed Date field that is converted into a year greater than 2037...
CVE-2002-1045
CVE-2002-1045 affects Ultrafunk Popcorn 1.20. A malformed Date field can be converted into a year > 2037, allowing remote attackers to cause a crash (DoS). Based on NVD/NVD summaries, impact is partial availability with network access, no authentication required, and no confidentiality/integri...
Basilix Webmail basilix.php3 request_id[DUMMY] Variable Traversal Arbitrary File Access
The script 'basilix.php3' is installed on the remote web server. Some versions of this webmail software allow the users to read any file on the system with the permission of the webmail software, and execute any PHP. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. References: From: "karol "...
CVE-1999-1045
pnserver in RealServer 5.0 and earlier allows remote attackers to cause a denial of service by sending a short, malformed request...
CVE-1999-1045
RealServer 5.0 and earlier is affected by CVE-1999-1045 due to a vulnerability in the pnserver component. A remote attacker can cause a denial of service by sending a short, malformed request. The entry provides a CVSS v2 base score of 7.8 (NETWORK attack, low complexity, no authentication, avail...
CVE-2001-1045
CVE-2001-1045 describes a directory traversal vulnerability in Basilix Webmail up to version 1.0.3beta, where an attacker can read arbitrary files by injecting a .. (dot dot) into the request_id[DUMMY] parameter of basilix.php3. The connected documents corroborate that the vulnerability allows re...
CVE-2001-1045
Directory traversal vulnerability in basilix.php3 in Basilix Webmail 1.0.3beta and earlier allows remote attackers to read arbitrary files via a .. dot dot in the requestidDUMMY parameter...
CVE-2000-1045
The vulnerability CVE-2000-1045 affects nss_ldap versions earlier than 121 when used with nscd. A remote attacker can cause a denial of service by flooding the LDAP service with requests. The documented impact is a partial availability degradation. Remediation in the sources indicates upgrading t...
CVE-2000-1045
nssldap earlier than 121, when run with nscd name service caching daemon, allows remote attackers to cause a denial of service via a flood of LDAP requests...
CVE-2000-1045
nssldap earlier than 121, when run with nscd name service caching daemon, allows remote attackers to cause a denial of service via a flood of LDAP requests...
