159 matches found
CVE-2008-1269
cp06wifimnocifr.cgi in the admin panel on the Alice Gate 2 Plus Wi-Fi router does not verify authentication credentials, which allows remote attackers to disable Wi-Fi encryption via a certain request...
CVE-2008-1269
The CVE-2008-1269 entry concerns the Alice Gate 2 Plus Wi‑Fi router. Affects the admin panel via cp06_wifi_m_nocifr.cgi, where authentication credentials are not verified, allowing remote attackers to disable Wi‑Fi encryption through a specific request. The available documentation states the vuln...
Debian Security Advisory DSA 1269-1 (lookup-el)
The remote host is missing an update to lookup-el announced via advisory DSA 1269-1. Tatsuya Kinoshita discovered that Lookup, a search interface to electronic dictionaries on emacsen, creates a temporary file in an insecure fashion when the ndeb-binary feature is used, which allows a local...
Debian Security Advisory DSA 734-1 (gaim)
The remote host is missing an update to gaim announced via advisory DSA 734-1. Two denial of service problems have been discovered in Gaim, a multi-protocol instant messaging client. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-1269 A malformed Yaho...
CVE-2007-1269
GNUMail 1.1.2 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents GNUMail from visually distinguishing between signed and unsigned portions of OpenPGP messages with multiple components, which allows remote attackers to forge the contents of a message...
CentOS 3 / 4 : gaim (CESA-2005:518)
An updated gaim package that fixes two denial of service issues is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. Jacopo Ottaviani discovered a bug in the way Ga...
CVE-2006-1269
CVE-2006-1269 affects zoo 2.10 where a buffer overflow in parse.c (parse function) may allow a local user to execute arbitrary code via long filename command-line arguments during archive creation. Root cause: improper handling of long filenames. Impact: local code execution with the Zoo user’s p...
CVE-2003-1269
The provided documents describe CVE-2003-1269 as an HTTP 1.41e issue where a remote attacker can cause the web server to leak its root path in an error message by sending a long argument to a script. Concrete affected products, versions, root cause details, exploited components, and official miti...
[SECURITY] [DSA 734-1] New gaim packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 734-1 [email protected] http://www.debian.org/security/ Martin Schulze July 5th, 2005 http://www.debian.org/security/faq -...
RHEL 3 / 4 : gaim (RHSA-2005:518)
An updated gaim package that fixes two denial of service issues is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. Jacopo Ottaviani discovered a bug in the way Ga...
Mandrake Linux Security Advisory : gaim (MDKSA-2005:099)
More vulnerabilities have been discovered in the gaim IM client. The first is a remote crash with the Yahoo! protocol CVE-2005-1269 and the second is a remote DoS in the MSN protocol CVE-2005-1934. These problems have been corrected in gaim 1.3.1 which is provided with this update. %NASLMINLEVEL...
CVE-2005-1269
CVE-2005-1269 affects Gaim prior to 1.3.1. A remote attacker can cause an application crash by sending a Yahoo! message with a non-ASCII filename, resulting in a denial of service. The issue is confirmed in multiple advisories referencing Gaim in affected packages; remediation is to upgrade to ve...
CVE-2004-1269
CVE-2004-1269 affects CUPS 1.1.22 where the lppasswd path does not remove passwd.new when a file-size resource limit is hit during writing passwd.new, causing subsequent lppasswd invocations to fail. The vulnerability is documented across multiple advisories and issue trackers related to CUPS and...
RHEL 2.1 : unzip (RHSA-2002:138)
The unzip and tar utilities contain vulnerabilities which can allow arbitrary files to be overwritten during archive extraction. The unzip and tar utilities are used for dealing with archives, which are multiple files stored inside of a single file. A directory traversal vulnerability in unzip...
CVE-2003-1269
AN HTTP 1.41e allows remote attackers to obtain the root web server path via an HTTP request with a long argument to a script, which leaks the path in an error message...
CVE-2002-1269
CVE-2002-1269 affects the NetInfo Manager component in Mac OS X 10.2.2. The vulnerability is described as an unknown issue that allows local users to access restricted parts of the filesystem, implying partial confidentiality and partial integrity/availability impacts as per the NVD metrics (atta...
CVE-2001-1269
Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via filenames in the archive that begin with the '/' slash character...
CVE-2001-1269
CVE-2001-1269 affects Info-ZIP UnZip 5.42 and earlier. The vulnerability allows an attacker to overwrite arbitrary files during archive extraction by using filenames that begin with the slash character (/) in the ZIP archive. The issue is rooted in how the extractor handles archive filenames, ena...