CVE-2009-1178

Unspecified vulnerability in the server in IBM Tivoli Storage Manager TSM 5.3.x before 5.3.2 and 6.x before 6.1 has unknown impact and attack vectors related to the "admin command line."...

CVE-2008-1178

Summary (supported facts): Centreon versions 1.4.2.3 and earlier are affected by two directory-traversal vulnerabilities: (1) CVE-2008-1119 in include/doc/get_image.php via the img parameter, and (2) CVE-2008-1178 in include/doc/index.php via the page parameter. In both cases, unsanitized user in...

Debian: Security Advisory (DSA-1178-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-1178

WebAPP before 0.9.9.5 does not check access in certain contexts related to 1 Calendar Administration, 2 Instant Messages Administration, and 3 the Image Uploader, which has unknown impact and attack vectors...

CVE-2007-1178

The CVE-2007-1178 entry concerns WebAPP prior to version 0.9.9.5, where access checks are not performed in specific contexts: (1) Calendar Administration, (2) Instant Messages Administration, and (3) the Image Uploader. The initial description states the impact and attack vectors are unknown. The...

CVE-2006-1178

The vulnerability CVE-2006-1178 affects Tamarack MMSd prior to version 7.992, where the product fails to properly handle malformed RFC1006 (OSI over TCP/IP) packets. This can allow a remote, unauthenticated attacker to cause a denial of service (crash) on affected devices. The issue has been addr...

CVE-2003-1178

Eval injection vulnerability in comments.php in Advanced Poll 2.0.2 allows remote attackers to execute arbitrary PHP code via the 1 id, 2 templateset, or 3 action parameter...

CVE-2003-1178

CVE-2003-1178 affects Advanced Poll 2.0.2. It exposes a vulnerability in comments.php where the (1) id, (2) template_set, or (3) action parameter can cause evaluated PHP code to run, allowing remote code execution. Impact is consistent with arbitrary PHP execution (no authentication required as p...

CVE-2002-1178

The CVE-2002-1178 entry concerns a directory traversal vulnerability in the Jetty HTTP server’s CGIServlet (affected: Jetty CGIServlet prior to 4.1.0). An attacker can craft requests to the cgi-bin directory using ..\ sequences to trigger arbitrary command execution. The provided documents identi...

CVE-2002-1178

Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execute arbitrary commands via ..\ dot-dot backslash sequences in an HTTP request to the cgi-bin directory...

CVE-2002-1178

Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execute arbitrary commands via ..\ dot-dot backslash sequences in an HTTP request to the cgi-bin directory...

CVE-2001-1178

Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment variable...

CVE-2001-1178

CVE-2001-1178 (xman) is a local privilege-escalation vulnerability caused by a buffer overflow triggered by a long MANPATH environment variable. Affected component: xman. Root cause: insufficient bounds checking on MANPATH leading to overflow. Impact: local users may gain privileges; exploitation...

CVE-1999-1178

CVE-1999-1178 affects Sambar Server 4.1 beta. A remote attacker can trigger an information-disclosure vulnerability by requesting the CGI script dumpenv.pl, which reveals sensitive server configuration data. The issue is a non-authenticated, network-accessible exposure with partial confidentialit...

CVE-2000-1178

The CVE covers the joe text editor, where on abnormal exit it follows symbolic links when creating the rescue file DEADJOE, enabling local attackers to append/overwrite files of other users’ sessions. The core issue is unsafe handling of DEADJOE links during crash/exit, allowing symlink abuse to ...