Immunity Canvas: PHPQLADMIN_INCLUDE

Name| phpqladmininclude ---|--- CVE| CVE-2008-1067 Exploit Pack| CANVAS Description| phpQLAdmin 2.2.7 Remote File Include Notes| CVE Name: CVE-2008-1067 VENDOR: phpQLAdmin.com Repeatability: Infinite References: http://packetstormsecurity.org/filedesc/phpqladmin-rfi.txt.html CVE Url:...

CVE-2008-1067

CVE-2008-1067 affects phpQLAdmin 2.2.7 with Multiple PHP remote file inclusion vulnerabilities . An attacker can cause remote PHP code execution by supplying a URL in the _SESSION[path] parameter to the files ezmlm.php and tools/update_translations.php . The NVD entry lists a base score 6.8 (MEDI...

Debian Security Advisory DSA 1067-1 (kernel 2.4.16)

The remote host is missing an update to a kernel image announced via advisory DSA 1067-1. For details on the issues addressed in the missing update, please visit the referenced security advisories. OpenVAS Vulnerability Test $Id: deb10671.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description:...

CVE-2007-1067

The CVE-2007-1067 entry affects Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent is deployed), and the Meetinghouse AEGIS SecureConnect Client. The underlying issue is improper parsing of commands, enabling loc...

CVE-2006-1067

CVE-2006-1067 affects Linksys WRT54G routers versions 5 running VXWorks. The vulnerability allows remote attackers to trigger a denial-of-service by sending a malformed DCC SEND string to an IRC channel, causing an IRC connection reset. The issue may be related to masquerading code for NAT enviro...

CVE-2005-1067

CVE-2005-1067 describes a local privilege escalation in the Access_user Class prior to version 1.75, where an attacker can gain access as another user using the password “new.” The connected documents confirm this vulnerability but do not provide vendor/product specifics, affected versions beyond...

CVE-2003-1067

CVE-2003-1067 involves multiple buffer overflows in Solaris’ dbm_open (used by ndbm/dbm) and dbminit functions, affecting Solaris 2.6 through 9. The underlying flaw enables local users to gain root privileges via long arguments to Xsun or other programs that invoke these functions. The connected ...

CVE-2003-1067

Multiple buffer overflows in the 1 dbmopen function, as used in ndbm and dbm, and the 2 dbminit function in Solaris 2.6 through 9 allow local users to gain root privileges via long arguments to Xsun or other programs that use these functions...

CVE-2004-1067

Off-by-one error in the mysaslcanonuser function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attackers to execute arbitrary code via the username...

CVE-2004-1067

Off-by-one error in the mysaslcanonuser function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attackers to execute arbitrary code via the username...

CVE-2004-1067

CVE-2004-1067 affects Cyrus IMAP Server 2.2.9 and earlier due to an off-by-one error in mysasl_canon_user, causing a buffer overflow that could allow remote code execution via the username. Multiple connected advisories confirm the issue and indicate mitigation via updates; OpenVAS notes Cyrus IM...

CVE-2002-1067

Administrative web interface for IC9 Pocket Print Server Firmware 7.1.30 and 7.1.36f allows remote attackers to cause a denial of service reboot and reset via a long password, possibly due to a buffer overflow...

CVE-2002-1067

The CVE-2002-1067 entry concerns the IC9 Pocket Print Server Firmware (versions 7.1.30 and 7.1.36f). The vulnerability is a remote denial-of-service (reboot/reset) triggered by sending a long password, with the described root cause possibly a buffer overflow. The available connected documents con...

CVE-2002-1067

Administrative web interface for IC9 Pocket Print Server Firmware 7.1.30 and 7.1.36f allows remote attackers to cause a denial of service reboot and reset via a long password, possibly due to a buffer overflow...

CVE-2001-1067

AOLServer ParseAuth() buffer overflow: AOLServer 3.3.0 and earlier contain a vulnerability in which Decode()/ParseAuth() uses a fixed 256-byte buffer, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted HTTP request with an overly long Authorization head...

CVE-1999-1067

CVE-1999-1067 involves SGI MachineInfo CGI program, installed by default on some SGI web servers, that prints potentially sensitive system status information. The issue is a information-disclosure through the CGI output, enabling remote attackers to gather details about the host. The connected re...

CVE-1999-1067

SGI MachineInfo CGI program, installed by default on some web servers, prints potentially sensitive system status information, which could be used by remote attackers for information gathering activities...