CVE-2012-1338

Cisco IOS on Catalyst 3560/3750 switches (versions 15.0 and 15.1) is vulnerable to a denial of service when a remote, authenticated attacker rapidly sends web authentication requests, triggering a crash/reload due to improper handling of web authentication. The issue is documented as Bug CSCts886...

Ubuntu: Security Advisory (USN-1338-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-1338

XnView on Windows is affected by an untrusted search path vulnerability in versions prior to 1.98.1. The flaw arises when loading executables via the Open containing folder path, allowing a local user to gain privileges by placing a Trojan horse .exe in a target folder. Impact: local privilege es...

CVE-2010-1338

SQL injection vulnerability in tsother.php in the Teamsite Hack plugin 3.0 and earlier for WoltLab Burning Board allows remote attackers to execute arbitrary SQL commands via the userid parameter in a modboard action...

CVE-2010-1338

CVE-2010-1338 affects the WoltLab Burning Board’s Teamsite Hack plugin (versions 3.0 and earlier) via ts_other.php. The vulnerability is a SQL injection in the modboard action, exploitable through the userid parameter, allowing remote attackers to execute arbitrary SQL commands. Documented impact...

CVE-2010-1338

SQL injection vulnerability in tsother.php in the Teamsite Hack plugin 3.0 and earlier for WoltLab Burning Board allows remote attackers to execute arbitrary SQL commands via the userid parameter in a modboard action...

CVE-2010-1338

creationtimestamp| type| source ---|---|--- 2010-03-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11824...

[SECURITY] [DSA 1800-1] New Linux 2.6.26 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1800-1 [email protected] http://www.debian.org/security/ dann frazier May 15, 2009 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

DSA-1800-1 linux-2.6 user-mode-linux - several vulnerabilities

Bulletin has no description...

BELL-CVE-2009-1338 CVE-2009-1338 does not affect BellSoft software

Bulletin has no description...

CVE-2009-1338

The CVE-2009-1338 issue is confirmed in the Linux kernel prior to 2.6.28, where the kill_something_info() function in kernel/signal.c did not respect PID namespaces when handling signals directed to PID -1. This allowed a local attacker to bypass namespace isolation and send signals to processes ...

CVE-2008-1338

CVE-2008-1338 concerns the Perforce Server (p4s.exe) in versions 2007.3/143793 and earlier. A remote attacker can trigger a denial of service (daemon crash) by issuing a server-DiffFile command with an integer value in a certain range, which causes a loop that exhausts memory. The available sourc...

CVE-2003-1338

The CVE-2003-1338 entry documents a CRLF injection vulnerability in Aprelium Abyss Web Server

CVE-2007-1338

CVE-2007-1338 affects Apple AirPort Extreme via the AirPort utility. The default configuration creates an IPv6 tunnel but does not enable the Block incoming IPv6 connections setting, which may allow remote attackers to bypass intended access restrictions by establishing IPv6 sessions that would h...

MailEnable Webmail Malformed Encoded Quoted-printable Email DoS (CVE-2006-1338)

The remote host is running MailEnable, a commercial mail server for Windows. According to its banner, using the webmail service bundled with the version of MailEnable Enterprise Edition on the remote host to view specially-formatted quoted-printable messages reportedly can result in 100% CPU...

CVE-2006-1338

CVE-2006-1338 affects MailEnable Webmail in Professional Edition before 1.73 and Enterprise Edition before 1.21. The vulnerability allows remote attackers to cause a denial of service through CPU consumption by handling specially crafted quoted-printable emails in the webmail interface (vectors a...

CVE-2005-1338

CVE-2005-1338 affects Mac OS X 10.3.9. When using an LDAP server that does not implement ldap_extended_operation, initial LDAP passwords for new accounts may be stored in plaintext. The Red Hat security entry confirms the same description. The available documents do not specify affected subcompon...

CVE-2004-1338

The triggers in Oracle 9i and 10g allow local users to gain privileges by using a sequence of partially privileged actions: using CCBKAPPLROWTRIG or EXECCBKFNDML to add arbitrary functions to the SDOCMTDBKFNTABLE and SDOCMTCBKDMLTABLE, then performing a DELETE on the SDOTXNIDXINSERTS table, which...

CVE-2004-1338

CVE-2004-1338 affects Oracle 9i and 10g. The flaw lets local users escalate privileges by abusing CCBKAPPLROWTRIG or EXEC_CBK_FN_DML to seed arbitrary functions into SDO_CMT_DBK_FN_TABLE and SDO_CMT_CBK_DML_TABLE, then deleting from SDO_TXN_IDX_INSERTS to trigger SDO_CMT_CBK_TRIG, which executes ...

CVE-2004-1338

The triggers in Oracle 9i and 10g allow local users to gain privileges by using a sequence of partially privileged actions: using CCBKAPPLROWTRIG or EXECCBKFNDML to add arbitrary functions to the SDOCMTDBKFNTABLE and SDOCMTCBKDMLTABLE, then performing a DELETE on the SDOTXNIDXINSERTS table, which...