152 matches found
KLA10135 LPE vulnerability in DameWare
An unspecified vulnerability was found in DameWare products. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally. Original advisories DameWare bulletin Related products DameWare-Mini-Remote-Control DameWare-NT-Utilities CVE list...
CVE-2005-1088
The CVE-2005-1088 issue affects DameWare NT Utilities (v4.8 and earlier) and DameWare Mini Remote Control (v4.8 and earlier), describing a local privilege escalation. Multiple sources indicate an unspecified or local privilege-escalation vulnerability that allows an authenticated, non-administrat...
CVE-2003-1088
Cross-site scripting XSS vulnerability in index.php for Zorum 3.4 and 3.5 allows remote attackers to inject arbitrary web script or HTML via the method parameter...
CVE-2004-1088
Postfix server for Apple Mac OS X 10.3.6, when using CRAM-MD5, allows remote attackers to send mail without authentication by replaying authentication information...
CVE-2002-1088
The CVE-2002-1088 entry is about a buffer overflow in Novell GroupWise 6.0.1 Support Pack 1 that allows remote attackers to execute arbitrary code through a long RCPT TO command. Affected component: the GroupWise 6.0.1 SP1 environment; root cause described as a buffer overflow in handling RCPT TO...
CVE-2002-1088
Buffer overflow in Novell GroupWise 6.0.1 Support Pack 1 allows remote attackers to execute arbitrary code via a long RCPT TO command...
CVE-2001-1088
Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in my address book" option enabled, do not notify the user when the "Reply-To" address is different than the "From" address, which could allow an untrusted remote attacker to spoof...
CVE-1999-1088
Technical details about CVE-1999-1088 are not provided in the supplied documents. The entry notes a privilege escalation via the HP-UX chsh command (9.X–10.20), but no specifics on affected builds, exploit vectors, or fixes are given here. Monitor for updates.
CVE-2000-1088
The xpSetSQLSecurity function in Microsoft SQL Server 2000 and SQL Server Desktop Engine MSDE does not properly restrict the length of a buffer before calling the srvparaminfo function in the SQL Server API for Extended Stored Procedures XP, which allows an attacker to cause a denial of service o...
CVE-2000-1088
The xpSetSQLSecurity function in Microsoft SQL Server 2000 and SQL Server Desktop Engine MSDE does not properly restrict the length of a buffer before calling the srvparaminfo function in the SQL Server API for Extended Stored Procedures XP, which allows an attacker to cause a denial of service o...
