CVE-2009-1217

creationtimestamp| type| source ---|---|--- 2009-03-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8281...

Gentoo Security Advisory GLSA 200704-23 (capi4k-utils)

The remote host is missing updates announced in advisory GLSA 200704-23. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SOL8917 - Linux kernel vulnerability CVE-2007-1217

A flaw in the ISDN CAPI subsystem allows a remote user to cause a denial of service or potential remote access. Exploitation would require the attacker to be able to send arbitrary frames over the ISDN network to the vulnerable system. Information about this advisory is available at the following...

CVE-2008-1217

Unspecified vulnerability in nlnotes.dll in the client in IBM Lotus Notes 6.5, 7.0.x before 7.0.2 CCH, and 8.0.x before 8.0.1 allows remote attackers to execute arbitrary code via a crafted attachment in an e-mail message sent over SMTP, a variant of CVE-2007-6706...

CVE-2008-1217

The provided connected documents describe CVE-2007-6706 and CVE-2008-1217 as related, unspecified vulnerabilities affecting IBM Lotus Notes clients. Affected product: nlnotes.dll in the Lotus Notes client. Versions impacted include Notes 6.5, 7.0.x (before 7.0.2 CCH or 7.0.3), and 8.0.x (before 8...

Debian Security Advisory DSA 1217-1 (linux-ftpd)

The remote host is missing an update to linux-ftpd announced via advisory DSA 1217-1. Paul Szabo discovered that the netkit ftp server switches the user id too late, which may lead to the bypass of access restrictions when running on NFS. This update also adds return value checks to setuid calls,...

Moderate: kernel security and bugfix update

2.6.9-55.0.6.0.1 - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix for nfs open call taking longer issue Chuck Lever orabug 5580407 bz 219412 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon with rds Zach...

RHEL 2.1 : kernel (RHSA-2007:0672)

Updated kernel packages that fix a number of security issues are now available for Red Hat Enterprise Linux 2.1 32-bit architectures. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of th...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix a number of security issues are now available for Red Hat Enterprise Linux 2.1 32-bit architectures. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of th...

CVE-2007-1217

CVE-2007-1217 affects the ISDN CAPI subsystem in Linux kernel 2.6.9–2.6.20 and isdn4k-utils. A buffer overflow in capiutil.c’s bufprint function could allow a local user to crash the system and potentially gain privileges via a crafted CAPI packet. Exploitation requires ISDN frame access to the t...

Debian DSA-1217-1 : linux-ftpd - programming error

Paul Szabo discovered that the netkit ftp server switches the user id too late, which may lead to the bypass of access restrictions when running on NFS. This update also adds return value checks to setuid calls, which may fail in some PAM configurations. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2006-1217

DSPoll 1.1 is affected by SQL injection via the pollid parameter in include/results.php, include/topolls.php, and include/pollit.php. The root cause is improper sanitization of pollid, allowing remote attackers to execute arbitrary SQL commands. According to eVuln documentation, a PoC/Exploit exi...

Oracle 9i Application Server mod_plsql Directory Traversal Vulnerability - Active Check

In a default installation of Oracle 9i Application Server AS, it is possible to use the modplsql module to perform a directory traversal attack. SPDX-FileCopyrightText: 2002 Matt Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

CVE-2000-1217

Microsoft Windows 2000 before SP2, in a non-Windows 2000 domain using NTLM and with cached credentials, is vulnerable to Domain Account Lockout: local users can bypass lockout and make unlimited login attempts. Affected component is the account lockout mechanism; root cause relates to how local c...

CVE-2004-1217

Hosting Controller 6.1 Hotfix 1.4, and possibly other versions, allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter to 1 Statsbrowse.asp or 2 Generalbrowse.asp...

CVE-2004-1217

Hosting Controller 6.1 Hotfix 1.4, and possibly other versions, allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter to 1 Statsbrowse.asp or 2 Generalbrowse.asp...

CVE-2004-1217

CVE-2004-1217 affects Hosting Controller 6.1 Hotfix 1.4 (and possibly other versions). The vulnerability arises in the FilePath parameter passed to Statsbrowse.asp and Generalbrowse.asp, enabling remote attackers to view arbitrary directories on the affected server. Root cause is improper handlin...

CVE-1999-1217

Technical details about CVE-1999-1217 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2002-1217

Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code, read arbitrary files, or conduct other unauthorized activities via script that accesses the Document property, which bypasses and domain...

CVE-2002-1217

The CVE-2002-1217 entry describes a Cross-Frame scripting vulnerability in the WebBrowser control as used by Internet Explorer 5.5 and 6.0. The issue arises when script accesses the Document property, bypassing / domain restrictions, enabling remote attackers to execute arbitrary code, read arbit...