CVE-2004-1155

Internet Explorer 5.01 through 6 allows remote attackers to spoof arbitrary web sites by injecting content from one window into another window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection"...

CVE-2004-1155

The CVE-2004-1155 entry describes a window-injection flaw in multiple browsers where a malicious site can replace content in a popup window opened from a trusted site by referencing the popup’s known name across domains. Connected advisories (CPAI-2004-205) explain that the vulnerability arises f...

Mandrake Linux Security Advisory : kon2 (MDKSA-2003:064)

A vulnerability was discovered in kon2, a Kanji emulator for the console. A buffer overflow in the command line parsing can be exploited, leading to local users being able to gain root privileges. These updated packages provide a fix for this vulnerability. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2003-1155

X-CD-Roast 0.98 alpha10 through alpha14 allows local users to overwrite arbitrary files via a symlink attack on an unknown file...

CVE-2002-1155

Buffer overflow in KON kon2 0.3.9b and earlier allows local users to execute arbitrary code via a long -Coding command line argument...

CVE-2002-1155

CVE-2002-1155 describes a buffer overflow in KON kon2 (versions up to 0.3.9b) that allows a local user to execute arbitrary code via a long -Coding command line argument. The vulnerability affects the command line parsing in KON2 and can lead to root-privelege escalation. Public references includ...

CVE-2001-1155

TCP Wrappers tcpwrappers in FreeBSD 4.1.1 through 4.3 with the PARANOID ACL option enabled does not properly check the result of a reverse DNS lookup, which could allow remote attackers to bypass intended access restrictions via DNS spoofing...

CVE-1999-1155

CVE-1999-1155 affects the LakeWeb Mail List CGI script, where remote attackers can execute arbitrary commands by injecting shell metacharacters into the recipient email address. The description specifies a remote command execution risk with network access and no authentication. No explicit patch ...

CVE-2000-1155

RHDaemon in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service via long HTTP request...

CVE-2000-1155

The CVE-2000-1155 entry affects the RHDaemon component of the RobinHood 1.1 web server running on BeOS R5 Pro and earlier. The root cause is a crafted, long HTTP request that can cause a denial of service. Public details across connected sources confirm the affected product/version and the vulner...