155 matches found
PHP 4.5.0 - Unserialize Overflow (Metasploit)
PHP 4.5.0 - Unserialize Overflow Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ requir...
CVE-2006-1286
The CVE covers a local buffer overflow in the login dialog (dbisqlc.exe) of SQL Anywhere used with Symantec Ghost 8.0/8.2 (SGSS 1.0). Root cause: improper handling in the login dialog could allow a local user to read sensitive data from the database. Impact per sources: potential unauthorized inf...
CVE-2003-1286
The CVE-2003-1286 issue affects Sambar Server prior to 6.0 beta 6. An HTTP Proxy vulnerability arises when security.ini lacks a 127.0.0.1 proxydeny entry, allowing remote attackers to send proxy HTTP requests to the server’s administrative interface and external web servers by issuing a Connectio...
CVE-2005-1286
CVE-2005-1286 affects BitDefender 8 with an unquoted Windows search path when executing a process. The root cause is lack of quoting of the full pathname, enabling a local user to prevent BitDefender from starting by creating a malicious C:\program.exe. The NVD entry documents this local, high-co...
CVE-2004-1286
NapShare 1.2 is affected by a buffer overflow in the auto_filter_extern function of auto.c when the extern filter is enabled. This vulnerability could allow remote attackers to execute arbitrary code via a crafted gnutella response. The sources (NVD/CVE records) confirm the affected component and...
CVE-2004-1286
Buffer overflow in the autofilterextern function in auto.c for NapShare 1.2, with the extern filter enabled, allows remote attackers to execute arbitrary code via a crafted gnutella response...
CVE-2003-1286
HTTP Proxy in Sambar Server before 6.0 beta 6, when security.ini lacks a 127.0.0.1 proxydeny entry, allows remote attackers to send proxy HTTP requests to the Sambar Server's administrative interface and external web servers, by making a "Connection: keep-alive" request before the proxy requests...
CVE-2002-1259
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2002-1286. Reason: This candidate is a reservation duplicate of CVE-2002-1286. Notes: All CVE users should reference CVE-2002-1286 instead of this candidate. All references and descriptions in this candidate have been removed to...
CVE-2002-1259
CVE-2002-1259 is a reservation duplicate of CVE-2002-1286; there are no separate details for 1259. The connected records describe CVE-2002-1286: The Microsoft Java implementation in Internet Explorer allows remote attackers to steal cookies and execute script in a different security context via a...
CVE-2002-1286
The CVE-2002-1286 issue affects the Microsoft Java implementation used by Internet Explorer. The underlying vulnerability is improper parsing of URLs whose domain portion contains a colon, allowing a remote attacker to load a Java applet from a malicious site within the security context of the si...
CVE-2002-1286
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to steal cookies and execute script in a different security context via a URL that contains a colon in the domain portion, which is not properly parsed and loads an applet from a malicious site within the...
CVE-2001-1286
Ipswitch IMail 7.04 and earlier stores a user's session ID in a URL, which could allow remote attackers to hijack sessions by obtaining the URL, e.g. via an HTML email that causes the Referrer to be sent to a URL under the attacker's control...
CVE-2001-1286
Ipswitch IMail 7.04 and earlier stores a user’s session ID in a URL, enabling session hijacking if an attacker can obtain the URL (e.g., via an HTML email that causes the Referrer to reveal the URL under the attacker’s control). Affected product: Ipswitch IMail Web Interface. Root cause: session ...
CVE-1999-1286
The CVE-1999-1286 vulnerability affects SGI IRIX 6.2 and earlier with the addnetpr component. It allows local users to modify arbitrary files and potentially gain root access through a symlink attack on a temporary file. The description and sources provided corroborate a local-privilege-elevation...