CVE-2009-1535

CVE-2009-1535 corresponds to the IIS WebDAV Unicode authentication bypass vulnerability affecting IIS 5.1/6.0. The issue permits remote bypass of URI-based protections and can allow listing, reading, creation, or modification of files by injecting a Unicode sequence (notably %c0%af) into the URI,...

CVE-2009-1676

DO NOT USE THIS CANDIDATE NUMBER; CVE-2009-1676 is rejected and should refer to CVE-2009-1535.

Microsoft IIS WebDAV Unicode Request Directory Security Bypass

IIS 6.0 does not properly sanitize WebDAV requests. It is possible to access protected resources by inserting a Unicode / %c0%af in the URL. Depending on the remote server configuration, protected resources may be browsed, read and/or modified. C Tenable Network Security, Inc. include"compat.inc"...

Debian DSA-1535-1 : iceweasel - several vulnerabilities

This shares a lot of text with dsa-1532.wml, dsa-1534.wml, dsa-1574.wml Several remote vulnerabilities have been discovered in the Iceweasel web browser, an unbranded version of the Firefox browser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-48...

CVE-2008-1535

creationtimestamp| type| source ---|---|--- 2008-03-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5297...

CVE-2003-1535

Justice Guestbook 1.3 contains a path disclosure vulnerability: a direct request to cfooter.php3 leaks the full installation path in an error message. The affected component is the Justice Guestbook CGI (cfooter.php3) and the root cause is improper handling of error messages that reveal filesyste...

CVE-2007-1535

CVE-2007-1535 (Microsoft Windows Vista) concerns the Teredo IPv6 transition technology. The provided documents show that Windows Vista establishes a Teredo address without explicit user action when the system connects to the Internet, contrary to published guidance that Teredo is inactive without...

CVE-2001-1535

CVE-2001-1535 concerns Slashcode 2.0, where new accounts are created with an 8-character random password. The flaw can let local attackers obtain session IDs from cookies and use a brute‑force attack to gain unauthorized access. This impacts confidentiality, integrity, and availability on affecte...

CVE-2004-1535

The CVE-2004-1535 issue affects the Cash Mod for phpBB, where admin_cash.php is vulnerable to remote file inclusion via the phpbb_root_path parameter, allowing an attacker to instruct the server to include PHP code from a remote URL and execute arbitrary code. This results in remote code executio...

CVE-2004-1535

PHP remote file inclusion vulnerability in admincash.php for the Cash Mod module for phpBB allows remote attackers to execute arbitrary PHP code by modifying the phpbbrootpath parameter to reference a URL on a remote web server that contains the code...

CVE-2003-1535

Justice Guestbook 1.3 allows remote attackers to obtain the full installation path via a direct request to cfooter.php3, which leaks the path in an error message...

CVE-2002-1535

Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2 allows remote attackers to identify IP addresses of hosts on the internal network via a CONNECT request, which generates different error messages if the host is present...

CVE-2002-1535

CVE-2002-1535 affects Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2. An attacker can discover internal host IP addresses by sending a CONNECT request and observing differing error messages depending on host presence, implying partial disclosure of internal topology. Th...

CVE-2002-1535

Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2 allows remote attackers to identify IP addresses of hosts on the internal network via a CONNECT request, which generates different error messages if the host is present...

CVE-1999-1535

CVE-1999-1535 describes a buffer overflow in Persits Software AspUpload.dll (AspUpload before 1.4.0.2). This flaw enables remote attackers to cause a denial of service and potentially execute arbitrary commands via a long HTTP request argument. Affected component is AspUpload.dll; root cause is a...

CVE-1999-1535

Buffer overflow in AspUpload.dll in Persits Software AspUpload before 1.4.0.2 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument in the HTTP request...

CVE-2001-1535

Slashcode 2.0 creates new accounts with an 8-character random password, which could allow local users to obtain session ID's from cookies and gain unauthorized access via a brute force attack...

CVE-1999-1535

Buffer overflow in AspUpload.dll in Persits Software AspUpload before 1.4.0.2 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument in the HTTP request...