121 matches found
CVE-2008-1055
Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and WebMail 3.1s and earlier, allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via format string specifiers in the page parameter...
CVE-2008-1055
CVE-2008-1055 describes a format string vulnerability in NetWin SurgeMail’s webmail.exe components (versions 38k4 and earlier; beta 39a) and WebMail 3.1s and earlier. The flaw, triggered via the page parameter, can cause a denial of service (daemon crash) and may allow arbitrary code execution by...
Debian Security Advisory DSA 1055-1 (mozilla-firefox)
The remote host is missing an update to mozilla-firefox announced via advisory DSA 1055-1. Martijn Wargers and Nick Mott described crashes of Mozilla due to the use of a deleted controller context. In theory this could be abused to execute malicious code. Since Mozilla and Firefox share the same...
Debian: Security Advisory (DSA-1055-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2007-1055
CVE-2007-1055 is an XSS vulnerability in MediaWiki’s AJAX features (index.php) affecting MediaWiki 1.9.x before 1.9.0rc2 and 1.8.2 and earlier. The issue allows remote attackers to inject arbitrary script/HTML via the rs parameter. It is noted as possibly a duplicate of CVE-2007-0177. The connect...
CVE-2006-1055
CVE-2006-1055: The Linux kernel
CVE-2005-1055
CVE-2005-1055 (TowerBlog): TowerBlog 0.6 and earlier stores the login data file under the web root, enabling remote access to the file via a direct request to the _dat/login path. This exposes MD5 checksums of usernames and passwords, constituting a partial confidentiality impact. The connected r...
CVE-2004-1055
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 2.6.0-pl2 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the PmaAbsoluteUri parameter, 2 the zerorows parameter in readdump.php, 3 the confirm form, or 4 an error message generated by the internal...
CVE-2003-1055
The CVE-2003-1055 issue affects Sun Solaris 8 and 9 via the nss_ldap.so.1 library. The vulnerability is a buffer overflow caused by a long hostname used in an LDAP lookup, which can allow local users to gain root access. The connected records corroborate Solaris versions and the nss_ldap.so.1 com...
CVE-2003-1055
Buffer overflow in the nssldap.so.1 library for Sun Solaris 8 and 9 may allow local users to gain root access via a long hostname in an LDAP lookup...
CVE-2004-1055
CVE-2004-1055 covers multiple XSS vulnerabilities in phpMyAdmin 2.6.0-pl2 and earlier. The flaws allow remote attackers to inject arbitrary script/html via (1) PmaAbsoluteUri, (2) the zero_rows parameter in read_dump.php, (3) the confirm form, or (4) an error message generated by the internal php...
CVE-2004-1055
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 2.6.0-pl2 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the PmaAbsoluteUri parameter, 2 the zerorows parameter in readdump.php, 3 the confirm form, or 4 an error message generated by the internal...
CVE-2001-1055
The CVE-2001-1055 entry affects the Microsoft Windows network stack . The vulnerability allows a remote attacker to exhaust CPU resources by sending a flood of malformed ARP request packets with random source IP and MAC addresses, resulting in denial of service . The effect is described as CPU co...
CVE-2002-1055
Buffer overflow in administrative web server for Brother NC-3100h printer allows remote attackers to cause a denial of service via a long password...
CVE-2002-1055
CVE-2002-1055 concerns a buffer overflow in the administrative web server of the Brother NC-3100h printer. The vulnerability can be triggered remotely over the network by sending a long password, leading to denial of service; no authentication is required. The available documents do not provide e...
CVE-1999-1055
CVE-1999-1055 (Microsoft Excel 97) vulnerabilities allow a malicious workbook to run arbitrary commands via the CALL worksheet function without warning. Affects Excel 97; root cause: worksheet functions can execute a malicious DLL. According to NVD, the issue has a base score of 7.5 (HIGH) with N...
CVE-2000-1055
Buffer overflow in CiscoSecure ACS Server 2.42 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large TACACS+ packet...
CVE-2000-1055
CVE-2000-1055 corresponds to a buffer overflow in CiscoSecure ACS Server 2.4(2) and earlier. The vulnerability can be triggered by processing a large TACACS+ packet, enabling remote attackers to cause a denial of service and potentially execute arbitrary commands. The linked sources (NVD, CVE rec...
