197 matches found
CVE-2008-1068
The CVE-2008-1068 entry describes multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 and earlier. The flaw allows an attacker to execute arbitrary PHP code by supplying a URL in the site_path parameter to template contents (Vert/index.php, Noir/index.php, Bleu/index.php...
Debian: Security Advisory (DSA-1082-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 1068-1 (fbi)
The remote host is missing an update to fbi announced via advisory DSA 1068-1. Jan Braun discovered that the fbgs script of fbi, an image viewer for the framebuffer environment, creates an directory in a predictable manner, which allows denial of service through symlink attacks. For the old stabl...
CVE-2005-1068
CVE-2005-1068 describes a Cross-site scripting (XSS) vulnerability in sCssBoard 1.11 and earlier. The issue allows remote attackers to execute arbitrary Javascript via [url] tags, indicating an input handling flaw that fails to sanitize or validate user-supplied URLs. The documents provide the af...
CVE-2003-1068
CVE-2003-1068 is a Solaris utmp_update buffer‑overflow vulnerability affecting Solaris 2.6–9 that can allow local users to gain root privileges. The connected OpenVAS entries reference the Solaris update 113650-02 for /usr/lib/utmp_update, indicating a patch is available. The CVE description note...
CVE-2004-1068
A "missing serialization" error in the unixdgramrecvmsg function in Linux 2.4.27 and earlier, and 2.6.x up to 2.6.9, allows local users to gain privileges via a race condition...
CVE-2004-1068
A "missing serialization" error in the unixdgramrecvmsg function in Linux 2.4.27 and earlier, and 2.6.x up to 2.6.9, allows local users to gain privileges via a race condition...
CVE-2004-1068
CVE-2004-1068 involves a missing serialization flaw in the unix_dgram_recvmsg path of Linux kernels 2.4.27 and earlier, and 2.6.x up to 2.6.9. The issue enables local users to potentially gain privileges due to a race condition. The description explicitly states the vulnerability is a local privi...
RPC iproutes Service In Use
Binary data 1068.prm...
CVE-2002-1068
The CVE-2002-1068 entry concerns the web server component of the D-Link DP-300 print server. Affected: DP-300’s web server. Vulnerability: remote attackers can cause a denial of service (hang) by sending a large HTTP POST request. Root cause details are not provided in the documents beyond this d...
CVE-2001-1068
CVE-2001-1068 affects qpopper 4.01 with PAM-based authentication on Red Hat systems. The issue is an information disclosure in authentication: when an invalid username is supplied, the system returns a different error message than for a valid username, enabling remote attackers to enumerate valid...
CVE-1999-1068
Oracle Webserver 2.1 is affected when serving PL/SQL stored procedures. A long HTTP GET request can trigger a denial-of-service by crashing the remote web server, via the cgi /ews-bin/fnord pathway. The vulnerability is documented in CVE-1999-1068 and is reflected in the Nessus plugin OWS_OVERFLO...
CVE-2001-1068
qpopper 4.01 with PAM based authentication on Red Hat systems generates different error messages when an invalid username is provided instead of a valid name, which allows remote attackers to determine valid usernames on the system...
CVE-2000-1068
The CVE-2000-1068 entry concerns Poll It 2.0: the pollit.cgi component is vulnerable to remote command execution via shell metacharacters supplied in the poll_options parameter. The underlying issue is improper handling of user-supplied input in that parameter, enabling an attacker to execute arb...
CVE-2000-1068
pollit.cgi in Poll It 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the polloptions parameter...
