CVE-2008-1106

The CVE-2008-1106 issue affects Akamai Client Software (formerly Red Swoosh) up to version 3322. The management web server on loopback (9421/TCP) authenticates based on the HTTP Referer header, allowingCSRF via requests with no Referer or spoofed Referer to approved domains, enabling remote execu...

Akamai Technologies Security Advisory 2008-0003 (Akamai Client Software)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------- Akamai Technologies Security Advisory 2008-0003 Akamai ID: 2008-0003 Date: 2008/06/06 Product Name: Akamai Client Software formerly Red Swoosh Affected Versions: Up to and including 3322 Fixed...

Secunia Research: Akamai Red Swoosh Cross-Site Request Forgery

====================================================================== Secunia Research 06/06/2008 - Akamai Red Swoosh Cross-Site Request Forgery Vulnerabilities - ====================================================================== Table of Contents Affected...

Debian Security Advisory DSA 1106-1 (ppp)

The remote host is missing an update to ppp announced via advisory DSA 1106-1. Marcus Meissner discovered that the winbind plugin in pppd does not check whether a setuid call has been successful when trying to drop privileges, which may fail with some PAM configurations. The old stable distributi...

Debian Security Advisory DSA 642-1 (gallery)

The remote host is missing an update to gallery announced via advisory DSA 642-1. OpenVAS Vulnerability Test $Id: deb6421.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 642-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1106)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1106-1 : ppp - programming error

Marcus Meissner discovered that the winbind plugin in pppd does not check whether a setuid call has been successful when trying to drop privileges, which may fail with some PAM configurations. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

CVE-2006-1106

The CVE-2006-1106 issue concerns a Cross-site Scripting (XSS) vulnerability in Pixelpost versions 1.5 beta 1 and earlier. The vulnerability arises in the commenting path, where input fields (message, name, url, email) can be manipulated to inject arbitrary web script/HTML due to insufficient inpu...

CVE-2005-1106

The CVE-2005-1106 issue affects Apple QuickTime PictureViewer on Windows (6.5.2). A GIF image with the maximum depth start value can cause the application to crash, due to an integer overflow in GIF processing. This yields a denial of service; no explicit remediation is provided in the supplied d...

CVE-2003-1106

The CVE-2003-1106 entry describes a DoS condition in the SMTP service of Microsoft Windows 2000 prior to SP4. A remote attacker can crash or hang the service by sending an e-mail with a malformed FILETIME timestamp. The provided documents do not specify a patch or workaround; no exploit code or i...

CVE-2004-1106

Cross-site scripting XSS vulnerability in Gallery 1.4.4-pl3 and earlier allows remote attackers to execute arbitrary web script or HTML via "specially formed URLs," possibly via the include parameter in index.php...

CVE-2004-1106

Cross-site scripting XSS vulnerability in Gallery 1.4.4-pl3 and earlier allows remote attackers to execute arbitrary web script or HTML via "specially formed URLs," possibly via the include parameter in index.php...

GLSA-200411-10 : Gallery: XSS vulnerability

The remote host is affected by the vulnerability described in GLSA-200411-10 Gallery: XSS vulnerability Jim Paris has discovered a cross-site scripting vulnerability in Gallery. Impact : By sending a carefully crafted URL, an attacker can inject and execute script code in the victim's browser...

Gallery Unspecified HTML Injection

The remote web server has a version of Gallery that could allow an attacker to inject arbitrary HTML tags via unspecified vectors. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid15624; scriptversion"1.23";...

CVE-2002-1106

Cisco Virtual Private Network VPN Client software 2.x.x, and 3.x before 3.5.1C, does not properly verify that certificate DN fields match those of the certificate from the VPN Concentrator, which allows remote attackers to conduct man-in-the-middle attacks...

CVE-2003-1106

The SMTP service in Microsoft Windows 2000 before SP4 allows remote attackers to cause a denial of service crash or hang via an e-mail message with a malformed time stamp in the FILETIME attribute...

CVE-2001-1106

Technical details about CVE-2001-1106 are not publicly available in the provided connected documents. Monitor for updates; the inputs contain base descriptions but no additional technical specifics are provided here.

CVE-1999-1106

CVE-1999-1106 affects KDE’s kppp: a buffer overflow in the -c (account_name) argument parsing can allow a local user to gain root privileges. Affected component: kppp within KDE. Root cause: unchecked/buffer overrun when handling long account_name strings via the -c option. Impact: local privileg...

CVE-2001-1106

The default configuration of Sambar Server 5 and earlier uses a symmetric key that is compiled into the binary program for encrypting passwords, which could allow local users to break all user passwords by cracking the key or modifying a copy of the sambar program to call the decryption procedure...

CVE-2000-1106

Trend Micro InterScan VirusWall creates an Intscan share to the InterScan directory granting Full Control to the Everyone group, enabling attackers to modify VirusWall programs by altering permissions. The shared-access vulnerability is described in CVE-2000-1106 with a CVSS v2 base score of 4.6 ...