138 matches found
CVE-2003-1049
IBM DB2 Universal Database 7 before FixPak 12 creates certain DMS directories with insecure permissions 777, which allows local users to modify or delete certain DB2 files...
CVE-2003-1049
IBM DB2 Universal Database 7 before FixPak 12 creates certain DMS directories with insecure permissions 777, which allows local users to modify or delete certain DB2 files...
CVE-2003-1049
CVE-2003-1049 affects IBM DB2 Universal Database 7 before FixPak 12, where DMS directories are created with insecure 777 permissions, allowing local users to modify or delete certain DB2 files. Root cause: insecure directory permissions on DMS components. Impact as per CVSS: partial confidentiali...
CVE-2002-1049
CVE-2002-1049 is a format string vulnerability in HylaFAX faxgetty prior to 4.1.3. The TSI data element is used in a format string without proper sanitization, allowing remote attackers to crash the faxgetty process (denial of service). Several advisories reference this issue, with Debian noting ...
CVE-2002-1049
Format string vulnerability in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service crash via the TSI data element...
CVE-2002-1049
Format string vulnerability in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service crash via the TSI data element...
CVE-2001-1049
Phorecast PHP script before 0.40 allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable...
CVE-2001-1049
CVE-2001-1049 affects Phorecast PHP script prior to version 0.40. The vulnerability enables a remote attacker to include arbitrary files from remote web sites by issuing an HTTP request that sets the includedir variable. This is a remote file inclusion (RFI) type issue, with the attack surface ti...
CVE-2001-1049
Phorecast PHP script before 0.40 allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable...
CVE-1999-1049
ARCserve NT agents authenticate using a weak XOR scheme for passwords. The vulnerability allows remote attackers to sniff the authentication request sent to port 6050 and decrypt the password, leading to potential unauthorized access and confidentiality/ integrity impact as described in the CVE e...
CVE-1999-1049
ARCserve NT agents use weak encryption XOR for passwords, which allows remote attackers to sniff the authentication request to port 6050 and decrypt the password...
CVE-2000-1049
CVE-2000-1049 affects Allaire JRun 3.0 HTTP servlet server. The vulnerability allows remote denial of service when a URL containing a long sequence of "." characters is processed. The available sources describe the impact as a DoS, but do not provide concrete exploitation details, affected versio...
CVE-1999-1049
ARCserve NT agents use weak encryption XOR for passwords, which allows remote attackers to sniff the authentication request to port 6050 and decrypt the password...
CVE-2024-1420
CVE-2024-1420 is rejected and not used; please use CVE-2024-1049 instead.
Office 2013 1049
Office 2013 1049...