CVE-2007-1158

Directory traversal vulnerability in index.php in the Pagesetter 6.2.0 through 6.3.0 beta 5 module for PostNuke allows remote attackers to read arbitrary files via a .. dot dot in the id parameter...

NGS-traversal.txt

======= Summary ======= Today: 31 January 2007 Reference: NGS00402 Discover: Mark Litchfield Name: Oracle 10g R2 Enterprise Manager Directory Traversal Safe Name: Oracle 10g R2 Enterprise Manager Vendor: Oracle Systems Affected: Oracle 10g R2 Enterprise Manager Risk: Medium Status: Published...

Oracle 10g R2 Enterprise Manager Directory Traversal

======= Summary ======= Today: 31 January 2007 Reference: NGS00402 Discover: Mark Litchfield Name: Oracle 10g R2 Enterprise Manager Directory Traversal Safe Name: Oracle 10g R2 Enterprise Manager Vendor: Oracle Systems Affected: Oracle 10g R2 Enterprise Manager Risk: Medium Status: Published...

Debian DSA-1158-1 : streamripper - buffer overflow

Ulf Harnhammar from the Debian Security Audit Project discovered that streamripper, a utility to record online radio-streams, performs insufficient sanitising of data received from the streaming server, which might lead to buffer overflows and the execution of arbitrary code. %NASLMINLEVEL 70300 ...

CentOS 4 : Firefox (CESA-2005:383)

Updated firefox packages that fix various security bugs are now available. This update has been rated as having Important security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Vladimir V. Perepelitsa discovered a bug in the way Firefox handles...

CVE-2006-1158

CVE-2006-1158 affects Kerio MailServer prior to 6.1.3 Patch 1. An unauthenticated remote attacker can trigger a denial of service (application crash) by sending a crafted IMAP LOGIN command. The issue is caused by handling of certain malformed IMAP LOGIN inputs, leading to service disruption. Pub...

CVE-2003-1158

CVE-2003-1158 reports multiple buffer overflows in the FTP service of Plug and Play Web Server 1.0002c, allowing remote users to crash the server via long FTP commands (dir, ls, delete, mkdir, DELE, RMD, MKD). The provided documents do not specify exact vulnerable components, versions beyond the ...

CVE-2005-1158

CVE-2005-1158 affects Mozilla Firefox prior to 1.0.3. The issue arises from missing security checks that allow an attacker to inject arbitrary JavaScript into privileged pages by abusing the sidebar’s _search target. This could enable code execution within the context of the affected site, as des...

CVE-2004-1158

Konqueror 3.x up to 3.2.2-6, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window or tab whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka t...

CVE-2004-1158

Konqueror 3.x up to 3.2.2-6, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window or tab whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka t...

Fedora Core 3 : kdelibs-3.3.1-2.4.FC3 (2004-550)

Tue Dec 14 2004 Than Ngo 3.3.1-2.4.FC3 - apply the patch to fix Konqueror Window Injection Vulnerability 142510 CVE-2004-1158, Thanks to KDE security team - Fri Dec 10 2004 Than Ngo 3.3.1-2.3.FC3 - Security Advisory: plain text password exposure, 142487 thanks to KDE security team Note that...

CVE-2004-1158

CVE-2004-1158 affects Konqueror 3.x up to 3.2.2-6 (and possibly other versions). The vulnerability, described as a window-injection issue, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window or tab that resides in a different domain, demo...

CVE-2002-1158

CVE-2002-1158 affects the Canna server (up to version 3.5b2). The vulnerability is a buffer/heap overflow in the irw_through function, allowing a local attacker to execute arbitrary code with the privileges of the bin user. Public documentation in JVNDB confirms the issue and impact; Debian/DSA-2...

CVE-2002-1158

Buffer overflow in the irwthrough function for Canna 3.5b2 and earlier allows local users to execute arbitrary code as the bin user...

BeyondTrust Retina Scanner Detection

Binary data 1158.prm...

CVE-2002-1158

Buffer overflow in the irwthrough function for Canna 3.5b2 and earlier allows local users to execute arbitrary code as the bin user...

CVE-2001-1158

Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, acceptfw1rdp, which can allow remote attackers to bypass intended restrictions with forged RDP internal protocol headers to UDP port 259 of arbitrary hosts...

CVE-2001-1158

Affected software: Check Point VPN-1/FireWall-1 (version 4.0 and 4.1 per CERT) with the default macro accept_fw1_rdp in base.def. Vulnerability: A forged RDP header sent over UDP port 259 can bypass firewall restrictions, allowing traffic to arbitrary hosts. This is achieved by abusing RDP suppor...

CVE-1999-1158

CVE-1999-1158 describes a buffer overflow in Solaris PAM (versions 2.5.1/2.5) and unix_scheme (Solaris 2.3/2.4) that lets local users gain root privileges through programs that use these modules (e.g., passwd, yppasswd, nispasswd). The root cause is a buffer overflow in the affected modules, enab...

CVE-2001-1158

Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, acceptfw1rdp, which can allow remote attackers to bypass intended restrictions with forged RDP internal protocol headers to UDP port 259 of arbitrary hosts...