Gentoo Security Advisory GLSA 200412-23 (zwiki)

The remote host is missing updates announced in advisory GLSA 200412-23. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-1075

The CVE-2008-1075 entry relates to an XSS vulnerability in Maian Cart 1.1, affecting index.php where an attacker can inject arbitrary script via the keywords parameter in a search command. Documents confirm the vulnerability and impact (remote script/HTML injection), but do not provide additional...

CVE-2007-1075

The CVE-2007-1075 entry concerns TurboFTP 5.30 Build 572. The vulnerability arises when a remote server sends a response containing a large number of newline characters, leading to CPU consumption and a denial of service. The affected component is the FTP server handling network responses; the un...

CVE-2006-1075

CVE-2006-1075 concerns a format string vulnerability in the visualization function of Jason Boettcher Liero Xtreme, affected in versions up to 0.62b. The flaw allows remote attackers to execute arbitrary code by supplying format string specifiers in three fields within a level (.lxl) file: nickna...

CVE-2003-1075

The CVE-2003-1075 entry concerns an unknown vulnerability in the Solaris in.ftpd FTP server (Solaris 2.6–9) that enables remote attackers to trigger a denial of service, causing a temporary FTP server hang and affecting other active-mode FTP clients. The available connected documents confirm the ...

CVE-2004-1075

Cross-site scripting XSS vulnerability in standarderrormessage.dtml for Zwiki after 0.10.0rc1 to 0.36.2 allows remote attackers to inject arbitrary HTML and web script via a malformed URL, which is not properly cleansed when generating an error message...

GLSA-200412-23 : Zwiki: XSS vulnerability

The remote host is affected by the vulnerability described in GLSA-200412-23 Zwiki: XSS vulnerability Due to improper input validation, Zwiki can be exploited to perform cross-site scripting attacks. Impact : By enticing a user to read a specially crafted wiki entry, an attacker can execute...

CVE-2004-1075

Summary: CVE-2004-1075 describes a cross-site scripting (XSS) vulnerability in Zwiki. In Zwiki versions after 0.10.0rc1 up to 0.36.2, an attacker can inject arbitrary HTML/script via a malformed URL, which is not properly cleansed when generating an error message. Connected advisories corroborate...

[Full-Disclosure] Directory Traversal in Accipiter Direct Server 6.0

Severity: High Title: Accipiter Direct Server Date: January 09, 2004 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== A security vulnerability has been found in Accipiter Direct...

accipiter.txt

Severity: High Title: Accipiter Direct Server Date: January 09, 2004 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== A security vulnerability has been found in Accipiter Direct...

CVE-2002-1075

Pegasus Mail vulnerability CVE-2002-1075 affects Pegasus Mail client versions prior to 4.02 (per connected Nessus entry). It is caused by a buffer overflow in the To/From header processing, allowing a remote attacker to trigger a denial of service and potentially execute arbitrary code. The secur...

CVE-2001-1075

The CVE-2001-1075 issue affects the poprelayd script in Cobalt RaQ3 servers prior to version 2.0. The root cause is an input/log injection in the POP login by user path that allows an attacker’s IP to be written into the maillog, effectively bypassing authentication for SMTP relaying. This enable...

CVE-2001-1075

poprelayd script before 2.0 in Cobalt RaQ3 servers allows remote attackers to bypass authentication for relaying by causing a "POP login by user" string that includes the attacker's IP address to be injected into the maillog log file...

CVE-1999-1075

inetd in AIX 4.1.5 assigns a dynamic port N for ttdbserver but also listens on port N-1 and does not pass control to ttdbserver. This enables a denial of service via a flood of connections to N-1 that are not properly closed by inetd. No exploits or remediation are provided in the supplied docume...

CVE-2000-1075

The provided data confirms CVE-2000-1075 affects iPlanet products: Certificate Management System 4.2 and Directory Server 4.12. The vulnerability is a directory traversal in the Agent, End Entity, or Administrator services that allows remote attackers to read arbitrary files on the server by send...

iPlanet Directory Server Traversal Arbitrary File Access

There is a bug in the remote iPlanet web server that allows a user to read arbitrary files on the remote host. To exploit this flaw, an attacker needs to prepend '/../../' to the file name to read. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10589; scriptversion...

CVE-2000-1075

Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read arbitrary files via a .. dot dot attack in the Agent, End Entity, or Administrator services...

CVE-1999-1075

inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver ToolTalk server, but also inadvertently listens on port N-1 without passing control to ttdbserver, which allows remote attackers to cause a denial of service via a large number of connections to port N-1, which are not...