Ubuntu 9.10 / 10.04 LTS / 10.10 : openjdk-6 vulnerabilities (USN-1079-1)

It was discovered that untrusted Java applets could create domain name resolution cache entries, allowing an attacker to manipulate name resolution within the JVM. CVE-2010-4448 It was discovered that the Java launcher did not did not properly setup the LDLIBRARYPATH environment variable. A local...

CVE-2010-1079

CVE-2010-1079 : The vulnerability affects Sawmill prior to 7.2.18 and is described as a Cross-site Scripting (XSS) flaw. The root cause is an XSS condition that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. No explicit exploitation steps, affected product...

CVE-2010-1079

Cross-site scripting XSS vulnerability in Sawmill before 7.2.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-1079

CVE-2009-1079 applies to Sun Java System Identity Manager (IdM) 7.0 through 8.0. The vulnerability is described as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via unspecified vectors (Bug IDs 19659, 19660, 19683). The affected softw...

Gentoo Security Advisory GLSA 200412-09 (ncpfs)

The remote host is missing updates announced in advisory GLSA 200412-09. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-1079

CVE-2008-1079 affects Beehive Software SendFile.NET. The outboxWriteUnsent function in FTPThread.class within SendFile.jar uses hard-coded credentials for an FTP server, allowing remote attackers to gain privileges. The provided documents do not specify a patch or workaround; exploitation details...

Debian Security Advisory DSA 1079-1 (mysql-dfsg)

The remote host is missing an update to mysql-dfsg announced via advisory DSA 1079-1. OpenVAS Vulnerability Test $Id: deb10791.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1079-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1079-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-1079

CVE-2007-1079 describes a stack-based buffer overflow in Rhino Software, Inc. FTP Voyager (versions 14.0.0.3 and earlier) during server response handling to a CWD command. A long response can overflow the stack when the user aborts the command, enabling a remote attacker to trigger a crash (DoS)....

CVE-2006-1079

htpasswd, as used in Acme thttpd 2.25b and possibly other products such as Apache, might allow local users to gain privileges via shell metacharacters in a command line argument, which is used in a call to the system function. NOTE: since htpasswd is normally installed as a non-setuid program, an...

CVE-2006-1079

CVE-2006-1079 concerns the htpasswd utility used by Acme thttpd (notably 2.25b) where local users can escalate privileges through shell metacharacters passed as command-line arguments to system(). Several sourced entries indicate this vulnerability exists in htpasswd and note the issue may be exp...

CVE-2005-1079

The CVE-2005-1079 entry describes a SQL injection in zOOm Media Gallery 2.1.2 through the catid parameter in index.php, allowing remote attackers to execute arbitrary SQL commands. Affected software: zOOm Media Gallery 2.1.2 (index.php vulnerability in catid). Root cause: unsafely concatenated us...

CVE-2003-1079

Unknown vulnerability in UDP RPC for Solaris 2.5.1 through 9 for SPARC, and 2.5.1 through 8 for x86, allows remote attackers to cause a denial of service memory consumption via certain arguments in RPC calls that cause large amounts of memory to be allocated...

CVE-2003-1079

The CVE-2003-1079 entry concerns a vulnerability in UDP RPC used by Solaris (SPARC: 2.5.1–9; x86: 2.5.1–8). The underlying issue is that certain RPC call arguments can cause excessive memory allocation, enabling remote attackers to trigger a denial of service via memory consumption. The descripti...

CVE-2004-1079

Buffer overflow in 1 ncplogin and 2 ncpmap in nwclient.c for ncpfs 2.2.4, and possibly other versions, may allow local users to gain privileges via a long -T option...

CVE-2004-1079

CVE-2004-1079 is a buffer overflow in nwfs components (ncplogin and ncpmap) of ncpfs 2.2.4 (and possibly earlier/other versions) that may allow a local attacker to gain privileges via a long -T option. The vulnerability is rooted in nwclient.c; it affects the SUID-root utilities ncplogin and ncpm...

CVE-2002-1079

Affects Abyss Web Server 1.0.3. Directory traversal allows remote read of arbitrary files via ..\ in HTTP GET requests; impact is partial confidentiality of data. No explicit remediation details are provided in the connected documents.

CVE-2003-1079

Unknown vulnerability in UDP RPC for Solaris 2.5.1 through 9 for SPARC, and 2.5.1 through 8 for x86, allows remote attackers to cause a denial of service memory consumption via certain arguments in RPC calls that cause large amounts of memory to be allocated...

CVE-2002-1079

Directory traversal vulnerability in Abyss Web Server 1.0.3 allows remote attackers to read arbitrary files via ..\ dot-dot backslash sequences in an HTTP GET request...

CVE-2001-1079

CVE-2001-1079 concerns the creation of keyfile directories with world-writable permissions in PSSP 3.2 with DCE 3.1 authentication on AIX. The underlying issue is that a local user can exploit these permissions to delete key files, leading to a denial of service. The description specifies the aff...