175 matches found
CVE-2006-1071
The CVE-2006-1071 entry concerns DVguestbook 1.2.2. An XSS flaw exists in index.php through the page parameter, allowing remote attackers to inject arbitrary web script or HTML. The NVD entry assigns a base CVSS v2 score of 4.3 (MEDIUM) with Network attack vector, Medium attack complexity, no pri...
CVE-2005-1071
CVE-2005-1071 describes an SQL injection in the file banner.inc.php of JPortal Web Portal 2.3.1 . The vulnerability is exploitable via the haslo parameter, allowing remote attackers to execute arbitrary SQL commands. Affected component: banner.inc.php within JPortal Web Portal 2.3.1. Root cause d...
Multiple Products Malformed GIF Image File Handling Buffer Overflow (CVE-2005-0243; CVE-2005-0399; CVE-2007-1071)
...
CVE-2003-1071
The CVE-2003-1071 issue affects the Solaris wall daemon (rpc.walld) on Solaris 2.6–9. Local users can craft messages to logged-on users that appear to come from arbitrary UIDs by closing stderr before executing wall and supplying a spoofed From header. The attack is local and requires no authenti...
CVE-2003-1071
rpc.walld wall daemon for Solaris 2.6 through 9 allows local users to send messages to logged on users that appear to come from arbitrary user IDs by closing stderr before executing wall, then supplying a spoofed from header...
CVE-2004-1071
The binfmtelf loader binfmtelf.c in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly handle a failed call to the mmap function, which causes an incorrect mapped image and may allow local users to execute arbitrary code...
CVE-2004-1071
The binfmtelf loader binfmtelf.c in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly handle a failed call to the mmap function, which causes an incorrect mapped image and may allow local users to execute arbitrary code...
CVE-2004-1071
The CVE-2004-1071 issue affects the Linux kernel’s binfmt_elf loader (binfmt_elf.c) in kernels 2.4.x up to 2.4.27 and 2.6.x up to 2.6.8. A failed mmap is not handled correctly, leading to an incorrectly mapped image and potential local code execution by unauthorized users. The connected SUSE advi...
CVE-2003-1130
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2003-1071. Reason: This candidate is a duplicate of CVE-2003-1071. Notes: All CVE users should reference CVE-2003-1071 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2003-1071
rpc.walld wall daemon for Solaris 2.6 through 9 allows local users to send messages to logged on users that appear to come from arbitrary user IDs by closing stderr before executing wall, then supplying a spoofed from header...
CVE-2002-1071
CVE-2002-1071 affects ZyXEL Prestige 642R. A remote attacker can cause denial of service on Telnet, FTP, and DHCP services by sending a TCP packet with both SYN and ACK flags set. The description in the sources confirms the crash vector but does not provide specific patch versions or remediation ...
CVE-1999-1071
CVE-1999-1071 affects Excite for Web Servers (EWS) 1.1. The Architext.conf authentication file is installed with world-writable permissions, allowing local users to modify the file and gain access to Excite accounts. Root cause: insecure file permissions on the authentication file. Impact: confid...
CVE-2000-1071
Technical details (affected product, root cause, impact, and fix) are not publicly available in the provided documents. Monitor official CVE records and vendor advisories for updates.