CVE-2006-1331

CVE-2006-1331 describes multiple cross-site scripting (XSS) vulnerabilities in Noah's Classifieds 1.3 and earlier, exploitable via the index.php parameters (1) method or (2) list. Root cause is inadequate input handling/validation in these parameters, enabling remote attackers to inject arbitrary...

CVE-2005-1331

CVE-2005-1331 concerns the AppleScript Editor in Mac OS X 10.3.9, where AppleScript: URI handling fails to display the intended code, potentially allowing a remote attacker to persuade the user to run malicious code via URI characters like NULL or control characters. The connected sources corrobo...

CVE-2004-1331

The execCommand method in Microsoft Internet Explorer 6.0 SP2 allows remote attackers to bypass the "File Download - Security Warning" dialog and save arbitrary files with arbitrary extensions via the SaveAs command...

CVE-2004-1331

Microsoft Internet Explorer 6.0 SP2 contains a vulnerability in the execCommand API where a SaveAs operation can bypass the File Download - Security Warning dialog, allowing remote attackers to save arbitrary files with arbitrary extensions on the target system. The CPAI advisory describes exploi...

CVE-2004-1331

The execCommand method in Microsoft Internet Explorer 6.0 SP2 allows remote attackers to bypass the "File Download - Security Warning" dialog and save arbitrary files with arbitrary extensions via the SaveAs command...

Debian DSA-059-1 : man-db - symlink attack

Luki R. reported a bug in man-db: it did not handle nested calls ofdropeffectiveprivs and regaineffectiveprivs correctly which would cause it to regain privileges too early. This could be abused to make man create files as user man. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Qualcomm Eudora Mail Client Detection

Binary data 1331.prm...

CVE-2003-1331

Stack-based buffer overflow in the mysqlrealconnect function in the MySql client library libmysqlclient 4.0.13 and earlier allows local users to execute arbitrary code via a long socket name, a different vulnerability than CVE-2001-1453...

CVE-2001-1331

mandb in the man-db package before 2.3.16-3 allows local users to overwrite arbitrary files via the command line options 1 -u or 2 -c, which do not drop privileges and follow symlinks...

CVE-2001-1331

CVE-2001-1331 affects the man-db package’s mandb tool. The vulnerability exists in mandb before version 2.3.16-3, where invoking mandb with -u or -c does not drop privileges and does not drop file-system symlinks, enabling local users to overwrite arbitrary files. Impact is local, potentially ena...

CVE-1999-1331

netcfg 2.16-1 in Red Hat Linux 4.2 allows the Ethernet interface to be controlled by users on reboot when an option is set, which allows local users to cause a denial of service by shutting down the interface...

CVE-1999-1331

Affected software: netcfg 2.16-1 on Red Hat Linux 4.2. Vulnerability: Local users can control the Ethernet interface on reboot when a specific option is set, enabling a denial of service by shutting down the interface. Root cause/trigger: The description indicates the interface control occurs at ...

CVE-1999-1331

netcfg 2.16-1 in Red Hat Linux 4.2 allows the Ethernet interface to be controlled by users on reboot when an option is set, which allows local users to cause a denial of service by shutting down the interface...