117 matches found
CVE-2008-1078
CVE-2008-1078 affects the expn component of am-utils (and related net-fs usage) on Gentoo, rPath Linux, and other distros. The issue is an insecure temporary-file handling in expn that allows a local user to perform a symlink attack on expn[PID], enabling overwriting of arbitrary files. This vuln...
Integer overflow
Integer overflow in eXtremail 2.1.1 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long USER command containing "%s" sequences to the pop3 port 110/tcp, which are expanded to "%%s" before being used in the memmove function, possibly du...
CVE-2007-5467
Integer overflow in eXtremail 2.1.1 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long USER command containing "%s" sequences to the pop3 port 110/tcp, which are expanded to "%%s" before being used in the memmove function, possibly du...
Debian DSA-1078-1 : tiff - out-of-bounds read
Andrey Kiselev discovered a problem in the TIFF library that may allow an attacker with a specially crafted TIFF image with Yr/Yg/Yb values that exceed the YCR/YCG/YCB values to crash the library and hence the surrounding application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
CVE-2006-1078
Concrete details found: CVE-2006-1078 concerns multiple buffer overflows in the htpasswd utility used by Acme thttpd 2.25b. The vulnerabilities allow a local attacker to gain or escalate privileges via (1) a long command-line argument and (2) a long line in a file. The advisory notes htpasswd is ...
CVE-2004-1078
CVE-2004-1078 refers to a stack-based buffer overflow in the Citrix Program Neighborhood Agent client for Win32 (versions 8.00.24737 and earlier) and the Citrix MetaFrame Presentation Server client for WinCE (before 8.33). The vulnerability is triggered by a crafted long cached icon filename in t...
CVE-2005-1078
CVE-2005-1078 affects XAMPP 1.4.x with multiple default or null passwords. The underlying issue is default credentials in the XAMPP installation, allowing an attacker to gain privileges (attack vector: network; authentication: none; impact: partial confidentiality, integrity, and availability). T...
CVE-2005-1078
XAMPP 1.4.x has multiple default or null passwords, which allows attackers to gain privileges...
CVE-2003-1078
The CVE-2003-1078 entry concerns the FTP client for Solaris 2.6, 7, and 8. When the debug (-d) flag is enabled, the client displays the user password on the screen during login, revealing the password in cleartext. The available documents confirm the affected software and the login-password expos...
CVE-2003-1078
The FTP client for Solaris 2.6, 7, and 8 with the debug -d flag enabled displays the user password on the screen during login...
CVE-2003-1078
The FTP client for Solaris 2.6, 7, and 8 with the debug -d flag enabled displays the user password on the screen during login...
CVE-2002-1078
Affects Abyss Web Server 1.0.3. The vulnerability allows remote attackers to trigger directory listing by sending an HTTP GET request that ends with a large sequence of / characters. The underlying cause is not detailed in the provided documents beyond the request construction; the impact is expo...
CVE-2001-1078
CVE-2001-1078 affects eXtremail 1.1.9 and earlier. The vulnerability is a format-string issue in the flog function that can be exploited remotely to gain root privileges by supplying format specifiers through SMTP commands (HELO, EHLO, MAIL FROM, RCPT TO) and via POP3 commands after authenticatio...
CVE-1999-1078
The CVE applies to Ipswitch WS_FTP Pro (6.0) where passwords are stored with weak encryption in initialization files. This enables a remote attacker to decrypt stored passwords and potentially gain privileges. OpenVAS and Nessus entries corroborate weak stored password issues in WS_FTP Pro/Client...
CVE-2000-1078
ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" character...
CVE-2000-1078
CVE-2000-1078 affects the ICQ Web Front HTTPd. A remote attacker can cause a denial of service by requesting a URL that contains a "?" character. The CVE is corroborated by NVD: ICQ Web Front HTTPd denial of service via a URL with a question mark. Nessus mentions a specific DoS payload involving ...
