72 matches found
CVE-2008-1589
CVE-2008-1589 affects Safari on Apple iPhone/iPod touch prior to v2.0. The issue: when visiting a site with a self-signed or invalid certificate, pressing the menu button during the certificate prompt can cause the certificate acceptance on the next visit, enabling potential MITM or credential ex...
CVE-2008-1589
Safari on Apple iPhone before 2.0 and iPod touch before 2.0 misinterprets a menu button press as user confirmation for visiting a web site with a 1 self-signed or 2 invalid certificate, which makes it easier for remote attackers to spoof web sites...
CVE-1999-1589
CVE-1999-1589 concerns an unspecified vulnerability in the crontab component of IBM AIX 3.2 that allows local users to gain root privileges via unknown attack vectors. The available connected documents confirm the affected product (IBM AIX 3.2 crontab) and the impact (local root access) but do no...
CVE-2006-1589
The CVE-2006-1589 entry affects NetBSD 2.0 through 3.0, where the elf_load_file function is vulnerable. A local user can trigger a kernel crash (denial of service) by loading an ELF interpreter that lacks a PT_LOAD header, causing a null dereference. The available connected documents confirm the ...
CVE-2002-2194
CVE-2002-2194 is a duplicate of CVE-2002-1589. The connected CVE-2002-1589 describes Solaris 8 vulnerability where the 0x02 bit (TEST, KMF_DEADBEEF, or deadbeef) in kmem_flags enables local users to trigger a denial of service (system panic). No exploitation status or patch details are provided i...
CVE-2005-1589
The pktioctl function in the pktcdvd block device ioctl handler pktcdvd.c in Linux kernel 2.6.12-rc4 and earlier calls the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space and allows local users...
CVE-2005-1589
The CVE-2005-1589 issue affects the Linux kernel’s pktcdvd (and raw device) ioctl handler. In kernel 2.6.12-rc4 and earlier, pkt_ioctl in pktcdvd.c calls the wrong function when issuing an ioctl to the block device, which can leak kernel address space to user space. This local-privilege scenario ...
CVE-2005-1589
The pktioctl function in the pktcdvd block device ioctl handler pktcdvd.c in Linux kernel 2.6.12-rc4 and earlier calls the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space and allows local users...
CVE-2005-1264
Raw character devices raw.c in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space, a similar vulnerability to CVE-2005-1589...
CVE-2004-1589
CVE-2004-1589 documents a cross-site scripting (XSS) vulnerability in GoSmart Message Board (ASP). The flaw allows remote attackers to inject and execute scripts via (1) Category on Forum.asp or (2) MainMessageID on ReplyToQuestion.asp. Connected sources corroborate XSS presence and relate GoSmar...
CVE-2002-1589
CVE-2002-1589 corresponds to an unknown vulnerability in Solaris 8 where setting bit 0x02 (TEST / KMF_DEADBEEF) in the kmem_flags kernel parameter allows a local user to trigger a system panic (DoS). The Connected documents do not provide additional concrete technical details (no product/version ...