163 matches found
CVE-2007-1061
CVE-2007-1061 involves a SQL injection in PHP-Nuke (index.php) for PHP-Nuke 8.0 Final and earlier when the HTTP Referers block is enabled. The vulnerability allows remote attackers to inject SQL via the HTTP_REFERER header (Referer). CVSS metrics from NVD indicate a base score of 6.8 (MEDIUM) wit...
CVE-2006-1061
CVE-2006-1061 is a heap-based buffer overflow in curl/libcurl (versions 7.15.0–7.15.2) triggered by very long TFTP URLs. A remote attacker could exploit this via a tftp:// URL with a valid hostname and long path to execute arbitrary commands. Public docs reference vendor advisories (Gentoo GLSA, ...
CVE-2005-1061
The secure script in LogWatch before 2.6-2 allows attackers to prevent LogWatch from detecting malicious activity via certain strings in the secure file that are later used as part of a regular expression, which causes the parser to crash, aka "logwatch log processing regular expression DoS."...
CVE-2005-1061
The secure script in LogWatch before 2.6-2 allows attackers to prevent LogWatch from detecting malicious activity via certain strings in the secure file that are later used as part of a regular expression, which causes the parser to crash, aka "logwatch log processing regular expression DoS."...
logwatch security update
CentOS Errata and Security Advisory CESA-2005:364-01 An updated logwatch package that fixes a denial of service issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. LogWatch is a customizable log analysis system. LogWatch...
Moderate: Red Hat Security Advisory: logwatch security update
An updated logwatch package that fixes a denial of service issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. LogWatch is a customizable log analysis system. LogWatch parses through your system's logs for a given period of...
RHEL 2.1 : logwatch (RHSA-2005:364)
An updated logwatch package that fixes a denial of service issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. LogWatch is a customizable log analysis system. LogWatch parses through your system's logs for a given period of...
CVE-2003-1061
The CVE-2003-1061 entry describes a race condition in Solaris kernels (versions 2.6–9) that can allow local users to trigger a denial of service (kernel panic) via the namefs function, pipe handling, and certain STREAMS routines. OpenVAS tests point to a Solaris update for /usr/kernel/fs/namefs (...
CVE-2003-1061
Race condition in Solaris 2.6 through 9 allows local users to cause a denial of service kernel panic, as demonstrated via the namefs function, pipe, and certain STREAMS routines...
CVE-2004-1061
Cross-site scripting XSS vulnerability in Bugzilla before 2.18, including 2.16.x before 2.16.11, allows remote attackers to inject arbitrary HTML and web script via forced error messages, as demonstrated using the action parameter...
CVE-2004-1061
Cross-site scripting XSS vulnerability in Bugzilla before 2.18, including 2.16.x before 2.16.11, allows remote attackers to inject arbitrary HTML and web script via forced error messages, as demonstrated using the action parameter...
CVE-2003-1061
Race condition in Solaris 2.6 through 9 allows local users to cause a denial of service kernel panic, as demonstrated via the namefs function, pipe, and certain STREAMS routines...
CVE-2002-1061
Multiple buffer overflows in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allow remote attackers to cause a denial of service and possibly execute arbitrary code via 1 an HTTP GET request with a long major version number, 2 an HTTP GET request to the HTTP proxy on port 3128...
CVE-2002-1061
Multiple buffer overflows in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allow remote attackers to cause a denial of service and possibly execute arbitrary code via 1 an HTTP GET request with a long major version number, 2 an HTTP GET request to the HTTP proxy on port 3128...
CVE-2002-1061
The CVE-2002-1061 entry concerns multiple buffer overflows in Jana Server (JanaServer) 2.x up to 2.2.1 and 1.4.6 and earlier. The root cause is improper handling of excessively long values in protocol responses/requests, notably: (1) long HTTP major version in an HTTP GET, (2) long major version ...
CVE-2001-1061
Technical details about CVE-2001-1061 are not provided in the supplied documents. The available descriptions are high-level; no product/version/impact/exploit details are included here. Monitor for updates from official advisories.
CVE-1999-1061
CVE-1999-1061 affects HP LaserJet printers with JetDirect network cards configured for TCP/IP. The vulnerability allows unauthenticated remote access to the printer, enabling an attacker to change the printer’s IP address or disable logging. Public details from OpenVAS/Nessus describe an unauthen...
CVE-2001-1061
Vulnerability in lsmcode in unknown versions of AIX, possibly related to a usage error...
CVE-2000-1061
CVE-2000-1061 involves the Microsoft Virtual Machine (VM) in Internet Explorer 4.x–5.x, where an unsigned applet can create and use ActiveX controls. This enables a remote attacker to bypass IE security settings and execute arbitrary commands via a malicious web page or email. The underlying issu...