156 matches found
CVE-2005-1118
CVE-2005-1118 describes a cross-site scripting (XSS) vulnerability in IISWebAgentIF.dll of the RSA Authentication Agent for Web 5.2. The flaw allows remote attackers to inject arbitrary web script or HTML via the postdata parameter. The CVE entry lists the affected product as RSA Authentication A...
CVE-2003-1118
CVE-2003-1118 describes a buffer overflow in the SETI@home client (3.03 and other versions) that allows a remote attacker to cause a denial of service (client crash) and execute arbitrary code. The attack relies on a spoofed server response containing a long string followed by a newline character...
CVE-2004-1118
Buffer overflow in the WodFtpDLX.ocx WeOnlyDo! ActiveX component before 2.3.2.97, as used by CoffeeCup Direct FTP 6.2.0.62 and CoffeeCup Free FTP 3.0.0.10, and possibly other applications, allows remote attackers to execute arbitrary code via a long filename...
CVE-2004-1118
Buffer overflow in the WodFtpDLX.ocx WeOnlyDo! ActiveX component before 2.3.2.97, as used by CoffeeCup Direct FTP 6.2.0.62 and CoffeeCup Free FTP 3.0.0.10, and possibly other applications, allows remote attackers to execute arbitrary code via a long filename...
CVE-2004-1118
CVE-2004-1118 affects the WodFtpDLX.ocx (WeOnlyDo!) ActiveX control before version 2.3.2.97, used by CoffeeCup Direct FTP 6.2.0.62 and CoffeeCup Free FTP 3.0.0.10 (and possibly other apps). A buffer overflow in the ActiveX component allows remote code execution via a long filename. Exploitation d...
CVE-2002-1118
TNS Listener in Oracle Net Services for Oracle 9i 9.2.x and 9.0.x, and Oracle 8i 8.1.x, allows remote attackers to cause a denial of service hang or crash via a SERVICECURLOAD command...
CVE-2002-1118
Oracle TNS Listener (Oracle Net Services) on Oracle 8i (8.1.x), 9i (9.0.x, 9.2.x) is vulnerable to a remote DoS via the SERVICE_CURLOAD command. Exploitation can cause the listener to hang or crash. Oracle has released patches (Oracle Security Alert #42, Rev1); Rapid7 advisory R7-0006 documents t...
CVE-2002-1118
TNS Listener in Oracle Net Services for Oracle 9i 9.2.x and 9.0.x, and Oracle 8i 8.1.x, allows remote attackers to cause a denial of service hang or crash via a SERVICECURLOAD command...
CVE-2001-1118
CVE-2001-1118 affects Roxen Web platform (Roxen 2.0 prior to 2.0.92 and Roxen 2.1 prior to 2.1.264). The issue is a failure to properly decode UTF-8, Mac, and ISO-2202 encoded URLs, enabling a remote attacker to execute arbitrary commands or view arbitrary files via an encoded URL. Affected compo...
CVE-2001-1118
A module in Roxen 2.0 before 2.0.92, and 2.1 before 2.1.264, does not properly decode UTF-8, Mac and ISO-2202 encoded URLs, which could allow a remote attacker to execute arbitrary commands or view arbitrary files via an encoded URL...
CVE-1999-1118
ndd in Solaris 2.6 allows local users to cause a denial of service by modifying certain TCP/IP parameters...
CVE-1999-1118
CVE-1999-1118 affects Solaris 2.6: local users can cause a denial of service by modifying certain TCP/IP parameters via ndd. The available sources describe the vulnerability and its impact as a local attack with partial availability impact, but no remediation patch/version is provided in the supp...
CVE-2001-1118
A module in Roxen 2.0 before 2.0.92, and 2.1 before 2.1.264, does not properly decode UTF-8, Mac and ISO-2202 encoded URLs, which could allow a remote attacker to execute arbitrary commands or view arbitrary files via an encoded URL...
CVE-2000-1118
24Link 1.06 web server allows remote attackers to bypass access restrictions by prepending strings such as "/+/" or "/." to the HTTP GET request...
CVE-2000-1118
CVE-2000-1118 affects 24Link 1.06 web server. An attacker can bypass access restrictions by prepending a path like "/+"/"." to the HTTP GET, causing unauthorized access. Root cause: improper handling of path prefixes in request parsing. Impact per CVSS: PARTIAL confidentiality, integrity, and ava...