117 matches found
CVE-2006-1107
CVE-2006-1107 concerns NMDeluxe prior to 1.0.1, where the vulnerable script is news.php. The root cause is an XSS flaw in the nick parameter due to insufficient input sanitization, allowing remote attackers to inject arbitrary web script or HTML. Documents across multiple sources confirm the affe...
[Full-disclosure] iDEFENSE Security Advisory 04.18.05: McAfee Internet Security Suite 2005 Insecure File Permission Vulnerability
McAfee Internet Security Suite 2005 Insecure File Permission Vulnerability iDEFENSE Security Advisory 04.18.05 http://www.idefense.com/application/poi/display?type=vulnerabilities April 18, 2005 I. BACKGROUND McAfee Internet Security Suite 2005 is a product used to protect a personal computer fro...
CVE-2005-1107
McAfee Internet Security Suite 2005 is affected by an insecure default file ACL vulnerability. According to iDEFENSE, the default ACL applied during installation allows non-Administrator users to modify installed files, enabling local privilege escalation to system level or to disable protection ...
CVE-2003-1107
Technical details about CVE-2003-1107 are not publicly provided in the supplied documents. Monitor for updates from official advisories or vendor advisories.
CVE-2003-1107
The DHTML capability in Microsoft Windows Media Player WMP 6.4, 7.0, 7.1, and 9 may run certain URL commands from a security zone that is less trusted than the current zone, which allows attackers to bypass intended access restrictions...
CVE-2004-1107
dispatch-conf in Portage 2.0.51-r2 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2004-1107
dispatch-conf in Portage 2.0.51-r2 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2002-1107
Affected software: Cisco VPN Client (2.x.x and 3.x before 3.5.2B). Issue: inadequate randomness in generated numbers. Impact: may enable spoofing or related attacks as described in CVE-2002-1107. Status in provided documents: no explicit exploit details or remediation version are listed; no addit...
CVE-2003-1107
The DHTML capability in Microsoft Windows Media Player WMP 6.4, 7.0, 7.1, and 9 may run certain URL commands from a security zone that is less trusted than the current zone, which allows attackers to bypass intended access restrictions...
CVE-2002-1107
Cisco Virtual Private Network VPN Client software 2.x.x, and 3.x before 3.5.2B, does not generate sufficiently random numbers, which may make it vulnerable to certain attacks such as spoofing...
CVE-2001-1107
CVE-2001-1107 affects SnapStream PVS 1.2a, where passwords are stored in plaintext in the SSD.ini file. This storage flaw could allow a remote attacker to gain privileges on the affected server. The available documents do not specify a patch or version that fixes the issue, nor provide exploit de...
CVE-1999-1108
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2001-1107
SnapStream PVS 1.2a stores its passwords in plaintext in the file SSD.ini, which could allow a remote attacker to gain privileges on the server...
CVE-2000-1107
Technical details are not publicly available in the provided documents. The CVE entry describes a denial of service in the identd server on SuSE Linux 6.x/7.0 triggered by a long request that accesses a NULL pointer.
CVE-2000-1107
in.identd ident server in SuSE Linux 6.x and 7.0 allows remote attackers to cause a denial of service via a long request, which causes the server to access a NULL pointer and crash...
CVE-1999-1108
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-1107. Reason: This candidate is a duplicate of CVE-1999-1107. Notes: All CVE users should reference CVE-1999-1107 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
