CVE-2008-1113

CVE-2008-1113 affects Cisco Unified Wireless IP Phone 7921 when using PEAP: the device does not validate server certificates, enabling remote wireless access points to capture hashed passwords and perform MITM attacks. The description is consistent across NVD and Red Hat/other references. The con...

Debian Security Advisory DSA 153-1 (mantis)

The remote host is missing an update to mantis announced via advisory DSA 153-1. OpenVAS Vulnerability Test $Id: deb1531.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 153-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1113-1 (zope2.7)

The remote host is missing an update to zope2.7 announced via advisory DSA 1113-1. It was discovered that the Zope web application server allows read access to arbitrary pages on the server, if a user has the privilege to edit restructured text pages. OpenVAS Vulnerability Test $Id: deb11131.nasl...

CVE-2006-1113

CVE-2006-1113 : Concrete details from connected sources indicate a SQL injection vulnerability in Loudblog’s podcast.php before version 0.42, where the attacker can manipulate the id parameter to execute arbitrary SQL commands remotely. Affected software: Loudblog (podcast.php). Root cause: impro...

CVE-2005-1113

CVE-2005-1113 corresponds to multiple cross-site scripting (XSS) flaws in PhpBB Plus 1.52 and earlier. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the bsid parameter to groupcp.php, index.php, portal.php, viewforum.php, or viewtopic.php; or via the c para...

CVE-2003-1113

The Session Initiation Protocol SIP implementation in IPTel SIP Express Router 0.8.9 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite...

CVE-2003-1113

The SIP vulnerability CVE-2003-1113 affects IPTel SIP Express Router (SER) 0.8.9 and earlier. Remote attackers can craft INVITE messages to trigger a denial of service and possibly execute arbitrary code, as demonstrated by the OUSPG PROTOS c07-sip test suite. The provided documents do not includ...

DEBIAN-CVE-2004-1113

SQL injection vulnerability in SQLgrey Postfix greylisting service before 1.2.0 allows remote attackers to execute arbitrary SQL commands via the 1 sender or 2 recipient e-mail addresses...

CVE-2004-1113

CVE-2004-1113 affects the SQLgrey Postfix greylisting service, specifically versions before 1.2.0. The vulnerability is a SQL injection in which an attacker can cause arbitrary SQL commands to be executed via the (1) sender and (2) recipient e‑mail addresses. The root cause is untrusted input bei...

CVE-2002-1113

summarygraphfunctions.php in Mantis 0.17.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the gjpgraphpath parameter to reference the location of the PHP code...

CVE-2002-1113

CVE-2002-1113 affects Mantis Control/issue tracker: summary_graph_functions.php in Mantis ≤ 0.17.3 allows remote code execution by altering g_jpgraph_path to point to PHP code. The root cause is the g_jpgraph_path parameter not being validated, enabling an attacker to reference arbitrary PHP as c...

CVE-2001-1113

TrollFTPD 1.26 and earlier is affected by a buffer overflow vulnerability that allows local users to execute arbitrary code by creating a series of deeply nested directories with long names and then running a recursive (ls -R) command. The vulnerability is due to overly long path handling and occ...

CVE-2001-1113

Buffer overflow in TrollFTPD 1.26 and earlier allows local users to execute arbitrary code by creating a series of deeply nested directories with long names, then running the ls -R recursive command...

CVE-1999-1113

Affected software: Eudora Internet Mail Server (EIMS) for Mac OS, 2.01 and earlier (pop3/poppassd service). Vuln: buffer overflow in the poppassd USER handling (long USER after USER command on port 106) allows remote disruption of service; OpenVAS notes potential remote code execution, Nessus con...

CVE-1999-1113

Buffer overflow in Eudora Internet Mail Server EIMS 2.01 and earlier on MacOS systems allows remote attackers to cause a denial of service via a long USER command to port 106...

CVE-2000-1113

Buffer overflow in Microsoft Windows Media Player allows remote attackers to execute arbitrary commands via a malformed Active Stream Redirector .ASX file, aka the ".ASX Buffer Overrun" vulnerability...