115 matches found
Debian DSA-1475-1 : gforge - missing input sanitising
Jose Ramon Palanco discovered that a cross site scripting vulnerability in GForge, a collaborative development tool, allows remote attackers to inject arbitrary web script or HTML in the context of a logged in user's session. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...
CVE-2003-1475
CVE-2003-1475 concerns Netbus 1.5–1.7, where more than one client can connect concurrently but only the first connection is prompted for authentication. This misbehavior allows remote attackers to gain access to the system. Documents do not provide specific exploit steps or affected product versi...
CVE-2007-1475
Multiple buffer overflows in the 1 ibaseconnect and 2 ibasepconnect functions in the interbase extension in PHP 4.4.6 and earlier allow context-dependent attackers to execute arbitrary code via a long argument...
CVE-2007-1475
CVE-2007-1475 affects the PHP interbase extension, specifically the ibase_connect and ibase_pconnect functions. Multiple buffer overflows in these functions allow context-dependent attackers to execute arbitrary code via a long argument in PHP 4.4.6 and earlier. The provided connected documents c...
CVE-2007-1475
Multiple buffer overflows in the 1 ibaseconnect and 2 ibasepconnect functions in the interbase extension in PHP 4.4.6 and earlier allow context-dependent attackers to execute arbitrary code via a long argument...
XMLHttpRequest Object security bypass in Opera Web Browser
Overview The Opera Web Browser fails to properly enforce security restrictions on the XMLHttpRequest Object. This may allow a remote, unauthenticated attacker to insert content from potentially malicious web sites. Description The XMLHttpRequest Object is a scripting object that provides routines...
CVE-2005-1475
The CVE-2005-1475 issue affects Opera 8.0 Final Build 1095 where the XMLHttpRequest object could bypass same-origin restrictions due to insufficient validation of server-side redirects, allowing a remote attacker to access resources on other domains and perform actions with the user’s privileges....
CVE-2001-1475
SSH before 2.0, when using RC4 and password authentication, is vulnerable to replaying messages until a new server key is generated. The affected component is the SSH protocol implementation prior to 2.0, with the underlying issue arising from RC4-based session handling that allows remote attacke...
CVE-2001-1475
SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new server key VK is generated...
CVE-2004-1475
CVE-2004-1475 affects xine-lib 1-rc2 through 1-rc5. The vulnerability comprises multiple buffer overflows: two stack-based overflows in the VCD disc label handling (vcd:// MRLs) and in subtitle parsing, plus a heap-based overflow in the DVD sub-picture decoder. These flaws can allow remote attack...
CVE-2004-1475
Multiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute arbitrary code via 1 long VideoCD vcd:// MRLs or 2 long subtitle lines...
CVE-2002-1475
Unknown vulnerability in the ARP component for HP Tru64 UNIX 4.0f, 4.0g, and 5.0a allows remote attackers to "take over packets destined for another host" and cause a denial of service...
CVE-2002-1475
HP Tru64 UNIX ARP component (versions 4.0f, 4.0g, 5.0a) is described as having an unknown vulnerability that allows remote attackers to take over packets destined for another host and cause a denial of service. The available sources do not provide concrete technical details such as root cause, sp...
CVE-1999-1475
CVE-1999-1475 covers ProFTPd 1.2 compiled with the mod_sqlpw module, where passwords are recorded in the wtmp log file. This allows a local user to read passwords (e.g., via the last command) and potentially obtain privileges. Root cause: unintended password exposure via wtmp logging. Exploitatio...