88 matches found
CVE-2005-1288
The vulnerability CVE-2005-1288 affects ACS Blog 0.8 through 1.1.3, where attackers can gain administrator privileges by manipulating the value of the in cookie. Affected component: login/authentication flow (inc_login_check.asp). Root cause: insecure cookie handling that allows privilege escalat...
CVE-2004-1288
The CVE-2004-1288 issue affects o3read 0.0.3, where the parse_html function in o3read.c copies an unbounded number of bytes into a 1024-byte t[] array. This buffer overflow can allow remote attackers to execute arbitrary code via a crafted SXW file. The vulnerability is documented in Gentoo GLSA ...
CVE-2002-1288
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to determine the current directory of the Internet Explorer process via the getAbsolutePath method in a File call...
CVE-2002-1288
CVE-2002-1288 affects the Microsoft Java implementation used in Internet Explorer. The vulnerability arises when a getAbsolutePath() call on a File() object enables remote attackers to determine the current directory of the Internet Explorer process. This is a information-disclosure issue. The pr...
CVE-2001-1288
Windows 2000 and Windows NT allows local users to cause a denial of service reboot by executing a command at the command prompt and pressing the F7 and enter keys several times while the command is executing, possibly related to an exception handling error in csrss.exe...
CVE-1999-1288
CVE-1999-1288 concerns Samba 1.9.18, which ships with a prototype application wsmbconf installed with incorrect permissions (including setgid). This config allows local users to read/write files and, due to bugs in wsmbconf, may enable privilege elevation. The OpenVAS entry reiterates an elevate-...
CVE-1999-1288
Samba 1.9.18 inadvertently includes a prototype application, wsmbconf, which is installed with incorrect permissions including the setgid bit, which allows local users to read and write files and possibly gain privileges via bugs in the program...
CVE-2001-1288
Windows 2000 and Windows NT allows local users to cause a denial of service reboot by executing a command at the command prompt and pressing the F7 and enter keys several times while the command is executing, possibly related to an exception handling error in csrss.exe...