CVE-2003-1289

The CVE-2003-1289 issue affects the iBCS2 system call translator for statfs in NetBSD 1.5–1.5.3 and FreeBSD 4 (up to 4.8-RELEASE-p2) and 5 (up to 5.1-RELEASE-p1). The underlying flaw allows local users to read portions of kernel memory (memory disclosure) via a large length parameter that copies ...

Quake3 Arena 1.29 f/g DOS

It was possible to crash the Quake3 Arena daemon by sending a specially crafted login string. SPDX-FileCopyrightText: 2001 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2005-1289

CVE-2005-1289 affects E-Cart 2004 1.1 and earlier. The issue is in index.cgi where user-supplied parameters (art and possibly cat) allow shell metacharacters to be interpreted, enabling remote execution of arbitrary commands. This is a remote code execution vulnerability with network access and n...

CVE-2004-1289

Multiple buffer overflows in 1 the getline function in pcalutil.c and 2 the getholiday function in readfile.c for pcal 4.7.1 allow remote attackers to execute arbitrary code via a crafted calendar file...

CVE-2004-1289

CVE-2004-1289 affects pcal 4.7.1, where multiple buffer overflows in (1) getline in pcalutil.c and (2) get_holiday in readfile.c allow remote attackers to execute arbitrary code via a crafted calendar file. The vulnerability has a CVSS v2 base score of 10.0 (HIGH). Public advisories (e.g., Debian...

CVE-2002-1289

The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read restricted process memory, cause a denial of service crash, and possibly execute arbitrary code via the getNativeServices function, which creates an instance of the com.ms.awt.peer.INativeServices...

CVE-2002-1289

The CVE-2002-1289 entry concerns the Microsoft Java implementation used in Internet Explorer. The vulnerability arises in getNativeServices, which creates an instance of com.ms.awt.peer.INativeServices (INativeServices) and does not verify the memory addresses passed to its methods, allowing remo...

CVE-2001-1289

CVE-2001-1289 affects Quake 3 Arena 1.29f/g. A remote attacker can cause a denial of service (crash) by sending a malformed connection/login packet that begins with 0xFF characters, crashing the Quake3 Arena daemon. OpenVAS/NASL details indicate the affected service port 27960 and describe the at...

CVE-2001-1289

Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service crash via a malformed connection packet that begins with several char-255 characters...

CVE-1999-1289

ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of the public address (e.g., via NAT), potentially exposing sensitive information about the client or internal network configuration. The description does not specify affected vers...

CVE-2001-1289

Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service crash via a malformed connection packet that begins with several char-255 characters...

CVE-1999-1289

ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of the public address e.g. through NAT, which provides remote attackers with potentially sensitive information about the client or the internal network configuration...