CVE-2011-1582

CVE-2011-1582 affects Apache Tomcat 7.0.12 and 7.0.13, where the first request to a servlet is processed without enforcing security constraints configured via annotations, allowing bypass of access restrictions via HTTP requests. The issue is a consequence of an incomplete fix for CVE-2011-1088, ...

[SECURITY] CVE-2011-1582 Apache Tomcat security constraint bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2011-1582 Apache Tomcat security constraint bypass Severity: Important Vendor: The Apache Software Foundation Versions Affected: - - Tomcat 7.0.12-7.0.13 - - Earlier versions are not affected Description: An error in the fixes for...

Fixed in Apache Tomcat 7.0.14

Important: Security constraint bypass CVE-2011-1582 An error in the fixes for CVE-2011-1088/CVE-2011-1183 meant that security constraints configured via annotations were ignored on the first request to a Servlet. Subsequent requests were secured correctly. This was fixed in revision 1100832. This...

CVE-2009-1582

CVE-2009-1582 affects Million Dollar Text Links 1.0. The vulnerability allows a remote attacker to bypass access restrictions by directly requesting admin.home.php after visiting admin.php, enabling privilege escalation. The root cause is improper access control around admin.home.php. Public refe...

CVE-2009-1582

creationtimestamp| type| source ---|---|--- 2009-05-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8605...

CVE-2008-1582

Apple QuickTime before 7.5 contains a memory corruption vulnerability in handling AAC-encoded media, allowing remote attackers to crash the player and potentially execute arbitrary code by opening a crafted AAC file. This CVE (CVE-2008-1582) is part of a set of related issues affecting QuickTime

Debian DSA-1582-1 : peercast - buffer overflow

Nico Golde discovered that PeerCast, a P2P audio and video streaming server, is vulnerable to a buffer overflow in the HTTP Basic Authentication code, allowing a remote attacker to crash PeerCast or execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

CVE-2001-1582

This CVE describes a buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8. The flaw lets local users execute arbitrary code by passing a long LDAP_OPTIONS environment variable to a privileged program that uses libsldap. Connected sources (Red Hat, CVE listing, NVD) corr...

CVE-2007-1582

The CVE-2007-1582 issue affects PHP core before 4.4.7/5.2.2 and involves the GD extension. The resource system in PHP 4.0.0–4.4.6 and 5.0.0–5.2.1 can be exploited by context-dependent attackers to execute arbitrary code by interrupting certain functions in the GD (ext/gd) extension (and unspecifi...

CVE-2006-1582

CVE-2006-1582 describes a cross-site scripting (XSS) vulnerability in Blank'N'Berg 0.2, exploitable via the _path parameter in index.php. The root cause is an injection of arbitrary web script/HTML, potentially stemming from a directory traversal-related issue noted in the description. Affected s...

CVE-2005-1582

The CVE-2005-1582 entry concerns a Cross-site scripting (XSS) vulnerability in index.php of 1Two News 1.0. The vulnerability permits remote injection of arbitrary web script or HTML via the query/POST parameters nom, email, siteweb, or commentaire. The NVD listing documents a MEDIUM impact score ...

CVE-2005-1582

Cross-site scripting XSS vulnerability in index.php for 1Two News 1.0 allows remote attackers to inject arbitrary web script or HTML via the 1 nom, 2 email, 3 siteweb, or 4 commentaire variables...

CVE-1999-1582

The CVE-1999-1582 entry concerns the Cisco PIX firewall and a behavior of the established command. According to the description, this built-in functionality can allow connections from a single host to arbitrary ports of a target host if an alternative conduit has already been permitted, which may...

CVE-2004-1582

CVE-2004-1582 affects BlackBoard Internet Newsboard System (BBBoard) 1.5.1. The vulnerability is a PHP remote file inclusion in the libpath parameter (typoed as libpach) that allows an attacker to include a URL on a remote server containing _more.php via checkdb.inc.php, enabling arbitrary PHP co...

CVE-2002-1582

compose.cgi in Mailreader.com 2.3.30 and 2.3.31, when using Sendmail as the Mail Transfer Agent, allows remote attackers to execute arbitrary commands via shell metacharacters in the RealEmail configuration variable, which is used to call Sendmail in network.cgi...

CVE-2002-1582

CVE-2002-1582 concerns Mailreader.com. The vulnerability exists in compose.cgi for Mailreader.com versions 2.3.30 and 2.3.31 when Sendmail is the MTA, where remote attackers can execute arbitrary shell commands via metacharacters in the RealEmail configuration variable used to invoke Sendmail in ...

CVE-2002-1582

compose.cgi in Mailreader.com 2.3.30 and 2.3.31, when using Sendmail as the Mail Transfer Agent, allows remote attackers to execute arbitrary commands via shell metacharacters in the RealEmail configuration variable, which is used to call Sendmail in network.cgi...

CVE-2001-1582

Buffer overflow in the LDAP naming services library libsldap in Sun Solaris 8 allows local users to execute arbitrary code via a long LDAPOPTIONS environment variable to a privileged program that uses libsldap...