106 matches found
CVE-2004-1437
Multiple buffer overflows in the digest authentication functionality in Pavuk 0.9.28-r2 and earlier allow remote attackers to execute arbitrary code...
CVE-2002-1437
Directory traversal vulnerability in the web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to read arbitrary files via an HTTP request containing "..%5c" URL-encoded dot-dot backslash sequences...
CVE-2002-1437
CVE-2002-1437 maps to a directory traversal vulnerability in the Novell NetWare web handler for Perl 5.003 on NetWare 5.1/6, exploitable via an HTTP request containing URL-encoded dot-dot backslash (..%5c) to read arbitrary files. Connected sources also reference related issues in the NetWare HTT...
CVE-2003-1437
BEA WebLogic Express and WebLogic Server 7.0 and 7.0.0.1, stores passwords in plaintext when a keystore is used to store a private key or trust certificate authorities, which allows local users to gain access...
CVE-1999-1437
The vulnerability CVE-1999-1437 affects ePerl 2.2.12, where an attacker can supply a full pathname to bar.phtml to read arbitrary files on the server and may be able to execute certain commands. This is a remote issue with potential impacts to confidentiality and integrity. The description consis...
CVE-2001-1437
easyScripts easyNews 1.5 allows remote attackers to obtain the full path of the web root via a view request with a non-integer news message id field, which leaks the path in a PHP error message when the script times out...