CVE-2006-1431

The CVE-2006-1431 entry documents a Cross-site scripting (XSS) vulnerability in the fusionZONE couponZONE 4.2 product, specifically in local.cfm. The vulnerability allows remote attackers to inject arbitrary web script or HTML via URL-encoded parameters (1) srchfor and (2) srchby. The NVD descrip...

RHEL 4 : gnutls (RHSA-2005:430)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:430 advisory. The GnuTLS library implements Secure Sockets Layer SSL v3 and Transport Layer Security TLS v1 protocols. A denial of service bug was found in the GnuT...

gnutls security update

CentOS Errata and Security Advisory CESA-2005:430 Updated GnuTLS packages that fix a remote denial of service vulnerability are available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GnuTLS library...

Moderate: Red Hat Security Advisory: gnutls security update

Updated GnuTLS packages that fix a remote denial of service vulnerability are available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GnuTLS library implements Secure Sockets Layer SSL v3 and Transport Laye...

CVE-2005-1431

The CVE-2005-1431 issue affects GnuTLS: record packet parsing bug in GnuTLS 1.2 before 1.2.3 and 1.0 before 1.0.25 can allow a remote attacker to cause a denial-of-service via crafted TLS handshakes (padding bytes in gnutils_cipher.c). The vulnerability is rated CVSS v2 base 5.0 (Network attack, ...

CVE-2001-1431

CVE-2001-1431 affects Nokia Firewall Appliances (IPSO 3.3/3.4 and VPN-1/Firewall-1 4.1 SP3/4/5) when SYN Defender is in Active Gateway mode. The third packet of the TCP three-way handshake is not rewritten to use the NAT IP address, allowing remote attackers to gain sensitive information. Exploit...

CVE-2004-1431

CVE-2004-1431 affects FormMail.php 5.0 (and possibly other versions) and allows remote attackers to read arbitrary files by supplying a full pathname in the ar_file parameter (auto-reply). This impacts confidentiality (partial) without affecting integrity or availability per the provided metrics....

CVE-2004-1431

FormMail.php 5.0, and possibly other versions, allows remote attackers to read arbitrary files via a full pathname in the arfile auto-reply parameter...

CVE-1999-1431

ZAK in Appstation mode allows users to bypass the "Run only allowed apps" policy by starting Explorer from Office 97 applications such as Word, installing software into the TEMP directory, and changing the name to that for an allowed application, such as Winword.exe...

CVE-2002-1431

Belkin F5D5230-4 4-Port Cable/DSL Gateway Router 1.20.000 modifies the source IP address of internal packets to that of the router's external interface when forwarding a request from an internal host to an internal web server, which allows remote attackers to hide which host is being used to acce...

CVE-2001-1431

Nokia Firewall Appliances running IPSO 3.3 and VPN-1/FireWall-1 4.1 Service Pack 3, IPSO 3.4 and VPN-1/FireWall-1 4.1 Service Pack 4, and IPSO 3.4 or IPSO 3.4.1 and VPN-1/FireWall-1 4.1 Service Pack 5, when SYN Defender is configured in Active Gateway mode, does not properly rewrite the third...

CVE-1999-1431

ZAK in Appstation mode allows users to bypass the "Run only allowed apps" policy by starting Explorer from Office 97 applications such as Word, installing software into the TEMP directory, and changing the name to that for an allowed application, such as Winword.exe...

CVE-1999-1431

CVE-1999-1431 describes a local bypass in ZAK Appstation: an attacker can launch Explorer from Office 97 applications (e.g., Word), install software into the TEMP directory, and rename it to an allowed executable such as Winword.exe to bypass the Run only allowed apps policy. CVSS v2 is base 4.6 ...