Debian Security Advisory DSA 1100-1 (wv2)

The remote host is missing an update to wv2 announced via advisory DSA 1100-1. A boundary checking error has been discovered in wv2, a library for accessing Microsoft Word documents, which can lead to an integer overflow induced by processing word files. The old stable distribution woody does not...

CVE-2007-1100

Directory traversal vulnerability in download.php in Ahmet Sacan Pickle before 20070301 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2007-1100

CVE-2007-1100 describes a directory traversal vulnerability in the Proj. Ahmet Sacan’s Pickle project (before 20070301). The flaw resides in download.php, where an attacker can supply a crafted file parameter containing ".." to cause arbitrary local file disclosure. Affected component: Pickle (Ah...

HP Multiple Products PML Driver Local Privilege Escalation

HP Multiple Products PML Driver Local Privilege Escalation By Sowhat of Nevis Labs 2007.01.08 http://www.nevisnetworks.com http://secway.org/advisory/AD20070108.txt Vendor Hewlett-Packard Products Affected HP All-In-One products HP PSC 700 series HP PSC 900 series HP PSC 1100 series HP PSC 1200...

Debian DSA-1100-1 : wv2 - integer overflow

A boundary checking error has been discovered in wv2, a library for accessing Microsoft Word documents, which can lead to an integer overflow induced by processing word files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

CVE-2006-1100

CVE-2006-1100 concerns a buffer overflow in the sgetstr function in shared/cube.h of Sauerbraten (Cube engine) before and including 2006-02-28. The vulnerability can be triggered by long input streams, potentially allowing a remote attacker to execute arbitrary code with the privileges of the run...

CVE-2002-2133

CVE-2002-2133 describes a vulnerability in Telindus 1100 ADSL router firmware 6.0.x where weak encryption is used for UDP session traffic. This weakness could allow remote attackers to gain unauthorized access by sniffing and decrypting the administrative password. Documents do not provide remedi...

CVE-2002-2133: Undefined Security Weakness

Telindus 1100 ASDL router running firmware 6.0.x uses weak encryption for UDP session traffic, which allows remote attackers to gain unauthorized access by sniffing and decrypting the administrative password...

CVE-2002-1968: Undefined Security Weakness

Com21 DOXport 1100 series cable modem running firmware 2.1.1.106, and possibly other versions before 2.1.1.108.003, downloads a DOCSIS configuration file from a TFTP server running on the internal network, which allows local users to modify configuration of the modem via a malicious TFTP server...

GLSA-200504-10 : Gld: Remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200504-10 Gld: Remote execution of arbitrary code dong-hun discovered several buffer overflows in server.c, as well as several format string vulnerabilities in cnf.c. Impact : An attacker could exploit this vulnerability to execut...

CVE-2005-1100

Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon GLD 1.3 and 1.4 allows remote attackers to execute arbitrary code via format string specifiers in data that is passed directly to syslog...

CVE-2005-1100

CVE-2005-1100 affects Greylisting daemon (GLD) 1.3 and 1.4. The vulnerability is a format-string bug in the ErrorLog function (cnf.c) that allows remote code execution via data passed to syslog. Linked advisories (GLSA 200504-10) describe remote arbitrary-code execution due to format-string issue...

CVE-2003-1100

CVE-2003-1100 concerns multiple cross-site scripting (XSS) vulnerabilities in Hummingbird CyberDOCS versions 3.5.1, 3.9, and 4.0. The underlying issue is improper handling of user-supplied input leading to injection of arbitrary web script or HTML via certain vectors. Impact is remote exploitatio...

CVE-2003-1100

Multiple cross-site scripting XSS vulnerabilities in Hummingbird CyberDOCS 3.5.1, 3.9, and 4.0 allow remote attackers to inject arbitrary web script or HTML via certain vectors...

CVE-2004-1100

The CVE-2004-1100 entry documents a cross-site scripting (XSS) flaw in MailPost 5.1.1sv (and possibly earlier versions) where, when debug mode is enabled, an attacker can inject arbitrary web script or HTML via the append parameter. The data here do not include a published fix or patch within the...

CVE-2002-1100

CVE-2002-1100 affects Cisco VPN 3000 Concentrator versions 2.2.x and 3.x prior to 3.5.3. The vulnerability allows remote attackers to trigger a denial of service (crash) by sending an excessively long username or password to the HTML login interface. The issue is evidenced by the NVD description ...

CVE-2002-1100

Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to cause a denial of service crash via a long 1 username or 2 password to the HTML login interface...

CVE-2002-0949

Telindus 1100 series ADSL routers are affected by CVE-2002-0949. A remote attacker can send a crafted UDP packet to port 9833, triggering a reply that exposes the router’s password and other sensitive information in cleartext. The available documents do not specify affected models, firmware versi...

CVE-2002-0949: Undefined Security Weakness

Telindus 1100 series ADSL router allows remote attackers to gain privileges to the device via a certain packet to UDP port 9833, which generates a reply that includes the router's password and other sensitive information in cleartext...

CVE-2001-1100

CVE-2001-1100 affects W3Mail 1.0.2 (and possibly other CGI programs). The issue allows remote attackers to execute arbitrary commands via shell metacharacters in any field of the ‘Compose Message’ page. This is a remote command execution vulnerability with network scope and low complexity, but no...