Apple iTunes < 9.2 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 9.2. It is, therefore, affected by multiple vulnerabilities : - A heap-based buffer overflow vulnerability exists in the handling of images with an embedded ColorSync profile. By using a specially crafted image, a remote attacker...

CVE-2010-1398

Removed by vendor...

CVE-2010-1398

CVE-2010-1398 : WebKit in Safari before 5.0 on Mac OS X 10.5–10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly perform ordered list insertions due to the insertion of an unspecified element into an editable container and access of an uninitialized element. This can allow remote...

CVE-2008-1398

CVE-2008-1398 describes an SQL injection in AuraCMS 2.0–2.2.1 via the X-Forwarded-For HTTP header (HTTP_X_FORWARDED_FOR environment variable) that allows remote execution of arbitrary SQL commands. Affected component is online.php; root cause is improper handling/validation of the header value in...

CVE-2008-1398

creationtimestamp| type| source ---|---|--- 2008-03-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5256...

Debian Security Advisory DSA 1398-1 (perdition)

The remote host is missing an update to perdition announced via advisory DSA 1398-1. OpenVAS Vulnerability Test $Id: deb13981.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1398-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 047-1 (various kernel packages)

The remote host is missing an update to various kernel packages announced via advisory DSA 047-1. OpenVAS Vulnerability Test $Id: deb0471.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 047-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian DSA-1398-1 : perdition - format string error

Bernhard Mueller of SEC Consult has discovered a format string vulnerability in perdition, an IMAP proxy. This vulnerability could allow an unauthenticated remote user to run arbitrary code on the perdition server by providing a specially formatted IMAP tag. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2007-1398

The CVE-2007-1398 entry concerns the frag3 preprocessor in Snort relevant to inline mode on Linux without ip_conntrack. Affected versions include Snort 2.6.1.1, 2.6.1.2, and 2.7.0 beta. The underlying issue is a denial-of-service caused by certain UDP packets generated via send_morefrag_packet an...

CVE-2006-1398

The CVE-2006-1398 entry describes a Cross-site scripting (XSS) vulnerability in G-Book 1.0, specifically in guestbook.php where the g_message parameter can be exploited by remote attackers to inject arbitrary web script or HTML. The vulnerability is caused by inadequate sanitization of input, all...

CVE-2005-1398

PHPCart vulnerability CVE-2005-1398 affects PHPCart 3.2 (and note: 3.4–4.6.4 later reported) where remote attackers can alter price information by modifying (1) price or (2) postage parameters. The NVD entry lists a CVSS v2 base score of 5.0 (Medium) with network access, no authentication, and pa...

CVE-2004-1398

Format string vulnerability in prelink.c in kextload in Apple OS X, as used by TDIXSupport in Roxio Toast Titanium and possibly other products, allows local users to execute arbitrary code via format string specifiers in the extension argument...

CVE-2004-1398

CVE-2004-1398 describes a format string vulnerability in prelink.c within kextload on Apple OS X, used by TDIXSupport in Roxio Toast Titanium and possibly other products. The underlying issue arises from format string specifiers in the extension argument, enabling local users to execute arbitrary...

CVE-2004-1398

Format string vulnerability in prelink.c in kextload in Apple OS X, as used by TDIXSupport in Roxio Toast Titanium and possibly other products, allows local users to execute arbitrary code via format string specifiers in the extension argument...

Cisco IOS ICMP Redirect Message Spoofing Remote DoS (CSCdx92043)

Sending bogus ICMP redirect packets, a malicious user can either disrupt or intercept communication from a router. This vulnerability is documented with the CISCO bug ID CSCdx92043 C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11379; scriptversion"1.22";...

CVE-2002-1398

Buffer overflow in the date parser for PostgreSQL before 7.2.2 allows attackers to cause a denial of service and possibly execute arbitrary code via a long date string, aka a vulnerability "in handling long datetime input."...

CVE-2002-1398

CVE-2002-1398 describes a buffer overflow in the PostgreSQL date parser before 7.2.2. The issue allows denial of service and potentially arbitrary code execution when processing a long date string, i.e., a vulnerability in handling long datetime input. Multiple connected advisories (Red Hat RHSA-...

CVE-2002-1398

Buffer overflow in the date parser for PostgreSQL before 7.2.2 allows attackers to cause a denial of service and possibly execute arbitrary code via a long date string, aka a vulnerability "in handling long datetime input."...

CVE-2001-1398

The CVE-2001-1398 issue affects the Linux kernel prior to 2.2.19, arising from the masquerading code where packet length checks were lax, potentially enabling kernel memory writes via the CPIA driver off-by-one bug. Confirmed in multiple advisories (Mandrake MDKSA-2001:037 and Debian/Debian DSA-0...

CVE-1999-1398

Vulnerability in xfsdump in SGI IRIX may allow local users to obtain root privileges via the bck.log log file, possibly via a symlink attack...