CVE-2011-1051

Integer overflow in the COFF/EPOC/EXPLOAD input file loaders in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to memory allocation...

CVE-2011-1051

Hex-Rays IDA Pro versions 5.7 and 6.0 are affected by CVE-2011-1051 due to an integer overflow in the COFF/EPOC/EXPLOAD input file loaders. The NVD entry notes unknown impact, while OpenVAS and other feeds corroborate multiple vulnerabilities in IDA Pro. Remediation in practice is to update to a ...

Ubuntu 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : hplip vulnerability (USN-1051-1)

Sebastian Krahmer discovered that HPLIP incorrectly handled certain long SNMP responses. A remote attacker could send malicious SNMP replies to certain HPLIP tools and cause them to crash or possibly execute arbitrary code. Note that Tenable Network Security has extracted the preceding descriptio...

CVE-2010-1051

CVE-2010-1051 affects AudiStat 1.3 and describes multiple SQL injection vulnerabilities in index.php exploitable via the year and month parameters, enabling remote execution of arbitrary SQL. The CVSSv2 base score is 7.5 (HIGH) with network attack vector and no authentication. Public details are ...

CVE-2010-1051

Multiple SQL injection vulnerabilities in index.php in AudiStat 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 year and 2 month parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-1051

CVE-2009-1051 affects FubarForum 1.6 and earlier. The issue is improper access control: sensitive data is stored under the web root, enabling remote attackers to download a database containing user credentials via a direct request for user.tsv. The provided documents confirm the vulnerable compon...

FreeBSD Ports: sudo

The remote host is missing an update to the system as announced in the referenced advisory. VID bdd1537b-354c-11d9-a9e7-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Immunity Canvas: PHPPROFILES_INCLUDE

Name| phpprofilesinclude ---|--- CVE| CVE-2008-1051 Exploit Pack| CANVAS Description| phpProfiles Remote File Include Notes| CVE Name: CVE-2008-1051 VENDOR: phpprofiles.com Repeatability: Infinite References: http://www.securityfocus.com/bid/27952 CVE Url:...

CVE-2008-1051

CVE-2008-1051 affects phpProfiles 4.5.2 BETA, with a PHP remote file inclusion in include/body_comm.inc.php that allows an attacker to execute arbitrary PHP code via a URL in the content parameter. This is a remote code execution vulnerability exploitable over the network. The NVD entry lists a C...

Debian: Security Advisory (DSA-1051-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1051-1 (mozilla-thunderbird)

The remote host is missing an update to mozilla-thunderbird announced via advisory DSA 1051-1. For details on the issues addressed by the missing update, please visit the referenced security advisories. OpenVAS Vulnerability Test $Id: deb10511.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description...

Debian Security Advisory DSA 254-1 (traceroute-nanog)

The remote host is missing an update to traceroute-nanog announced via advisory DSA 254-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2006-1051

The CVE-2006-1051 entry concerns the Akarru Social BookMarking Engine prior to version 0.4.3.4, where a SQL injection vulnerability in the akarru.lib/users.php path allows remote attackers to execute arbitrary SQL commands via unknown attack vectors, potentially involving the username parameter. ...

CVE-2005-1051

CVE-2005-1051 affects PunBB 1.2.4: a SQL injection in profile.php via the id parameter in the change_email action. The vulnerability requires an authenticated remote user and allows arbitrary SQL execution, with reported potential for modification of database queries and administrative access. Do...

CVE-2004-1051

sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "" style environment variables to create functions that have the same name as any program within the bash script that is called without using the program's full pathname...

CVE-2004-1051

sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "" style environment variables to create functions that have the same name as any program within the bash script that is called without using the program's full pathname...

CVE-2004-1051

sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "" style environment variables to create functions that have the same name as any program within the bash script that is called without using the program's full pathname...

Debian DSA-596-2 : sudo - missing input sanitising

Liam Helmer noticed that sudo, a program that provides limited super user privileges to specific users, does not clean the environment sufficiently. Bash functions and the CDPATH variable are still passed through to the program running as privileged user, leaving possibilities to overload system...

CVE-2004-1051

Technical details about CVE-2004-1051 are not publicly available in the provided documents. Monitor for updates as new information may be published.

CVE-2004-1051

sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "" style environment variables to create functions that have the same name as any program within the bash script that is called without using the program's full pathname...