199 matches found
Debian: Security Advisory (DSA-1048-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-1048-1 : asterisk - several vulnerabilities
Several problems have been discovered in Asterisk, an Open Source Private Branch Exchange telephone control center. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-3559 Adam Pointon discovered that due to missing input sanitising it is possible to...
CVE-2006-1048
CVE-2006-1048 affects Joomla! 1.0.7 and earlier. It allows attackers to bypass intended access restrictions and gain certain privileges via multiple vectors in the Joomla! components (1) Weblink, (2) Polls, (3) Newsfeeds, (4) Weblinks, (5) Content, (6) Content Section, (7) Content Category, (8) C...
CVE-2005-1048
CVE-2005-1048 relates to a SQL injection in PostNuke 0.760 RC3, where the sid parameter in modules.php can be exploited remotely to run arbitrary SQL statements. The affected software is PostNuke (version 0.760 RC3 as cited; vendor reportedly could not reproduce issues for 0.760 RC3 or 0.750). Th...
CVE-2003-1048
CVE-2003-1048 describes a double-free vulnerability in Internet Explorer’s GIF handling via mshtml.dll. The flaw affects IE6 and related builds where processing GIFs could allow a remote attacker to crash the application or, in some scenarios, execute arbitrary code. Public advisories (MS04-025) ...
CVE-2003-1048
Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service application crash via a malformed GIF image...
CVE-2002-1048
HP JetDirect printers allow remote attackers to obtain the administrative password for the 1 web and 2 telnet services via an SNMP request to the variable .iso.3.6.1.4.1.11.2.3.9.4.2.1.3.9.1.1.0...
AWOL helperfunction.php includedir Parameter Remote File Inclusion
The remote host is running AWOL, an open source PHP application. It is possible to make the remote host include php files hosted on a third party server using the '$include' variable in AWOL. An attacker may use this flaw to inject arbitrary code in the remote host and gain a shell with the...
CVE-1999-1048
Buffer overflow in bash 2.0.0, 1.4.17, and other versions allows local attackers to gain privileges by creating an extremely large directory name, which is inserted into the password prompt via the \w option in the PS1 environmental variable when another user changes into that directory...
CVE-2001-1048
AWOL-related CVE-2001-1048 affects the AWOL PHP application and allows a remote attacker to include arbitrary files from remote web sites by setting the includedir HTTP parameter. The vulnerability enables remote code execution through local file inclusion-like behavior via a crafted request to i...
CVE-1999-1048
CVE-1999-1048 affects Bash versions including 2.0.0 and 1.4.17, where a buffer overflow can be triggered by an extremely large directory name. The vulnerability is exploited via the PS1 prompt (\w) when another user changes into that directory, enabling local privilege escalation. The provided do...
CVE-2001-1048
AWOL PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable...
CVE-2000-1048
Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to read arbitrary files via a .. dot dot attack via an HTTP GET request that uses encoded characters in the URL...
CVE-1999-1048
Buffer overflow in bash 2.0.0, 1.4.17, and other versions allows local attackers to gain privileges by creating an extremely large directory name, which is inserted into the password prompt via the \w option in the PS1 environmental variable when another user changes into that directory...
CVE-2017-1048
CVE-2017-1048 is rejected/not used and does not represent an active vulnerability entry.
Office 2016 1048
Office 2016 1048...
SharePoint Server Subscription Edition 1048
SharePoint Server Subscription Edition 1048...