77 matches found
Debian DSA-1449-1 : loop-aes-utils - programming error
It was discovered that loop-aes-utils, tools for mounting and manipulating filesystems, didn't drop privileged user and group permissions in the correct order in the mount and umount commands. This could potentially allow a local user to gain additional privileges. %NASLMINLEVEL 70300 C Tenable...
CVE-2003-1449
Affected product: Aladdin Knowledge Systems eSafe Gateway 3.5.126.0. Issue: CVP data stream incomplete validation allows remote attackers to bypass virus protection. Root cause: CVP data is not checked in full. Impact (per sources): partial confidentiality, integrity, and availability; CVSS v2 ba...
CVE-2007-1449
CVE-2007-1449 affects PHP-Nuke 8.0 and earlier. A directory-traversal flaw in mainfile.php allows remote attackers to read arbitrary files by supplying ".." in the lang parameter, enabling partial confidentiality impact. Root cause: insufficient input validation in the lang parameter. The connect...
CVE-2006-1449
CVE-2006-1449 describes an integer overflow in Mail for Apple Mac OS X 10.3.9 and 10.4.6, enabling remote attackers to execute arbitrary code via a crafted MacMIME-encapsulated attachment. The description specifies the vulnerable component (Mail) and affected OS versions, and indicates remote cod...
Mac OS X Multiple Vulnerabilities (Security Update 2006-003)
The remote host is running Apple Mac OS X, but lacks Security Update 2006-003. This security update contains fixes for the following applications : AppKit ImageIO BOM CFNetwork ClamAV Mac OS X Server only CoreFoundation CoreGraphics Finder FTPServer Flash Player KeyCHain LaunchServices libcurl Ma...
CVE-2005-1449
CVE-2005-1449 refers to an unknown vulnerability in serendipity_config_local.inc.php affecting Serendipity prior to 0.8. The connected documents consistently state the impact is unknown and do not provide concrete technical details, affected versions beyond “before 0.8,” or remediation steps. No ...
CVE-2005-1449
Unknown vulnerability in serendipityconfiglocal.inc.php for Serendipity before 0.8 has unknown impact...
CVE-2001-1449
The CVE-2001-1449 issue affects Apache
CVE-2004-1449
Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7 allows remote attackers to determine the location of files on a user's hard drive by obscuring a file upload control and tricking the user into dragging text into that control...
CVE-2004-1449
CVE-2004-1449 affects Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7. The root cause is a user interaction trap where a malicious site obscures a file upload control and tricks the user into dragging text into it, enabling an attacker to determine the location of files on the ...
CVE-2003-1449
Aladdin Knowlege Systems eSafe Gateway 3.5.126.0 does not check the entire stream of Content Vectoring Protocol CVP data, which allows remote attackers to bypass virus protection...
CVE-2002-1449
CVE-2002-1449 affects eUpload 1.0, where the password.txt file is stored in plaintext under the web document root. This plaintext password file enables remote attackers to overwrite arbitrary files by reading password.txt. The available documents specify the vulnerability and impact but do not pr...
CVE-2002-1449
eUpload 1.0 stores the password.txt password file in plaintext under the web document root, which allows remote attackers to overwrite arbitrary files by reading password.txt...
CVE-2001-1449
The default installation of Apache before 1.3.19 on Mandrake Linux 7.1 through 8.0 and Linux Corporate Server 1.0.1 allows remote attackers to list the directory index of arbitrary web directories...
CVE-1999-1449
SunOS 4.1.4 on a Sparc 20 machine allows local users to cause a denial of service kernel panic by reading from the /dev/tcx0 TCX device...
CVE-1999-1449
CVE-1999-1449 affects SunOS 4.1.4 on a SPARC/Sparc 20. The vulnerability is triggered by reading from the /dev/tcx0 TCX device, leading to a kernel panic (denial of service). The available data specifies a local attack vector with low ease of exploitation and partial impact to availability, and t...