99 matches found
Immunity Canvas: MS08_049
Name| ms08049 ---|--- CVE| CVE-2008-1457 Exploit Pack| CANVAS Description| EventSystem Service Overflow Notes| CVE Name: CVE-2008-1457 VENDOR: Microsoft Notes: Due to the fact that the svchost.exe instance where the EventSystem service is running is DEP protected, and that all loaded DLLs have GS...
CVE-2008-1457
CVE-2008-1457 describes a remote code execution vulnerability in the Microsoft Windows Event System. The flaw occurs when creating per-user subscriptions, allowing an attacker with valid logon credentials to craft a subscription request that could run arbitrary code with system privileges. Affect...
Debian: Security Advisory (DSA-1457-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-1457-1 : dovecot - programming error
It was discovered that Dovecot, a POP3 and IMAP server, only when used Remark: 'base' refers to a variable?! and should not contain something as base = %r! with LDAP authentication and 'base' contains variables, could allow a user to log in to the account of another user with the same password...
CVE-2003-1457
Auerswald COMsuite CTI ControlCenter 3.1 creates a default user account “runasositron” with an easily guessable password, enabling local or remote access for attackers. The connected sources corroborate the existence of the default account and access impact; exploitation details, affected version...
CVE-2007-1457
CVE-2007-1457 describes a buffer overflow in the urarlib_get function of Christian Scheurer’s UniquE RAR File Library (unrarlib/URARFileLib) v0.4. An attacker can cause arbitrary code execution by passing a long filename, rarfile, or libpassword to urarlib_get. The entry notes arbitrary code exec...
CentOS 3 / 4 : ethereal (CESA-2005:427)
Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ethereal package is a program for monitoring network traffic. A number of security flaws have been...
CVE-2006-1457
Safari on Apple Mac OS X 10.4.6, when "Open safe' files after downloading" is enabled, will automatically expand archives, which could allow remote attackers to overwrite arbitrary files via an archive that contains a symlink...
CVE-2006-1457
Safari on Mac OS X 10.4.6 is affected. When "Open 'safe' files after downloading" is enabled, archives are expanded automatically, which could allow a remote attacker to overwrite arbitrary files via an archive containing a symlink. Impact is the ability to write arbitrary files on the vulnerable...
Mac OS X Multiple Vulnerabilities (Security Update 2006-003)
The remote host is running Apple Mac OS X, but lacks Security Update 2006-003. This security update contains fixes for the following applications : AppKit ImageIO BOM CFNetwork ClamAV Mac OS X Server only CoreFoundation CoreGraphics Finder FTPServer Flash Player KeyCHain LaunchServices libcurl Ma...
CVE-2005-1457
CVE-2005-1457 involves multiple vulnerabilities in Ethereal prior to version 0.10.11, specifically in the dissectors for AIM, LDAP, FibreChannel, GSM_MAP, SRVLOC, and NTLMSSP. The issues allow remote attackers to cause a denial of service (crash). The typical impact is a network-remote crash, wit...
CVE-2001-1457
CVE-2001-1457 concerns buffer overflow in CrazyWWWBoard 2000p4 and 2000LEp5. The underlying issue is a vulnerability in handling a long HTTP_USER_AGENT CGI environment variable, allowing a remote attacker to potentially execute arbitrary code. Affected software is CrazyWWWBoard 2000 series (p4 an...
CVE-2004-1457
The Virtual Private Network VPN capability in Novell Bordermanager 3.8 allows remote attackers to cause a denial of service ABEND in IKE.NLM via a malformed IKE packet, as sent by the Striker ISAKMP Protocol Test Suite...
CVE-2004-1457
The CVE-2004-1457 description indicates a vulnerability in the VPN capability of Novell Bordermanager 3.8, where remote attackers can cause a denial-of-service (ABEND in IKE.NLM) by sending a malformed IKE packet, as tested by the Striker ISAKMP Protocol Test Suite. The available sources specify ...
CVE-2003-1457
Auerswald COMsuite CTI ControlCenter 3.1 creates a default "runasositron" user account with an easily guessable password, which allows local users or remote attackers to gain access...
CVE-2002-1457
CVE-2002-1457 targets L-Forum 2.40. It describes a SQL injection in search.php via the search parameter that could allow remote attackers to execute arbitrary SQL statements. The connected documents confirm the affected software (L-Forum 2.40) and the vulnerable component (search.php) with the un...
CVE-2001-1457
Buffer overflow in CrazyWWWBoard 2000p4 and 2000LEp5 allows remote attackers to execute arbitrary code via a long HTTPUSERAGENT CGI environment variable...
CVE-1999-1457
The CVE-1999-1457 issue affects the thttpd HTTP server prior to version 2.04-31. The vulnerability is a buffer overflow in the tdate_parse function triggered by a long date string, enabling remote attackers to execute arbitrary commands. Impact is described as allowing arbitrary command execution...