115 matches found
CVE-2007-1540
CVE-2007-1540: Directory traversal in am.pl affects SQL-Ledger 2.6.27 and earlier and LedgerSMB before 1.2.0. The login parameter can be manipulated with a .. sequence and trailing NULL (%00) to run arbitrary executables and bypass authentication. The issue was reportedly addressed in SQL-Ledger ...
Office Files (CVE-2006-1308; CVE-2006-1540; CVE-2006-3431; CVE-2007-0934; CVE-2007-0936)
...
SYMSA-2006-007: Microsoft Office Malformed String Parsing Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID : SYMSA-2006-007 Advisory Title: Microsoft Office Malformed String Parsing Vulnerability Author : Elia Florio / [email protected] Release Date :...
SYMSA-2006-007: Microsoft Office Malformed String Parsing Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID : SYMSA-2006-007 Advisory Title: Microsoft Office Malformed String Parsing Vulnerability Author : Elia Florio / [email protected] Release Date :...
MS06-038: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (917284)
The remote host is running a version of Microsoft Office that could allow arbitrary code to be run on this host. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have him open it with Microsoft Office. C Tenable Network Security, Inc...
CVE-2006-1540
Mode C: The CVE-2006-1540 issue affects Microsoft Office 2000, XP (2002), and 2003. It stems from a memory corruption vulnerability caused by malformed strings in Office Document files, enabling user‑assisted execution of arbitrary code and potential denial of service when opening crafted Excel, ...
CVE-2001-1540
CVE-2001-1540 affects IPRoute versions 0.973, 0.974, and 1.18. According to the connected sources, remote attackers can cause a denial of service by sending fragmented IP packets that split the TCP header. The information consistently describes a network-exposed DoS condition but does not provide...
CVE-2004-1540
ZyXEL Prestige 623, 650, and 652 HW Routers, and possibly other versions, with HTTP Remote Administration enabled, does not require a password to access rpFWUpload.html, which allows remote attackers to reset the router configuration file...
CVE-2004-1540
CVE-2004-1540 affects ZyXEL Prestige routers (623, 650, 652) where HTTP Remote Administration is enabled. The vulnerability exists because access to the page “/rpFWUpload.html” does not require authentication, enabling a remote attacker to reset the router configuration to its factory state. Docu...
CVE-2002-1540
The vulnerability CVE-2002-1540 affects Symantec Norton AntiVirus Corporate Edition 7.5.x (pre-7.5.1 Build 62) and 7.6.x (pre-7.6.1 Build 35a), where the client runs winhlp32 with elevated privileges, enabling local privilege escalation by using certain winhlp32 features. Impact is local privileg...
CVE-2003-1540
WF-Chat 1.0 Beta stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain authentication information via a direct request to 1 !pwds.txt and 2 !nicks.txt...
CVE-2002-1540
The client for Symantec Norton AntiVirus Corporate Edition 7.5.x before 7.5.1 Build 62 and 7.6.x before 7.6.1 Build 35a runs winhlp32 with raised privileges, which allows local users to gain privileges by using certain features of winhlp32...
CVE-1999-1540
CVE-1999-1540 affects Cactus Software Shell Lock, where weak encryption (trivial encoding) enables local attackers to decrypt and obtain the source code. According to NVD, the baseline impact is Partial confidentiality with no integrity or availability impact, and the exploit is local with low ov...