89 matches found
Debian DSA-1609-1 : lighttpd - various
Several local/remote vulnerabilities have been discovered in lighttpd, a fast webserver with minimal memory footprint. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-0983 lighttpd 1.4.18, and possibly other versions before 1.5.0, does not properly...
CVE-2008-1609
CVE-2008-1609 affects JAF CMS 4.0 RC2. Connected sources describe a remote file inclusion vulnerability whereby input in the website parameter (to forum/main.php and forum/forum.php) and the main_dir parameter (to forum/forum.php) can be used to include arbitrary files, enabling arbitrary PHP exe...
CVE-2008-1609
creationtimestamp| type| source ---|---|--- 2008-03-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5317...
CVE-2007-1609
CVE-2007-1609 is a cross-site scripting (XSS) vulnerability in Oracle Application Server 10g (DMS), specifically in servlet/Spy of Dynamic Monitoring Services. Exploitation involves injecting arbitrary script/HTML via the table parameter. The description notes a possible relation to CVE-2002-0563...
CVE-2006-1609
Technical details for CVE-2006-1609 are not publicly available in the provided documents; monitor for updates.
CVE-2005-1609
CVE-2005-1609 describes an unknown vulnerability in Sun StorEdge 6130 Arrays (SE6130) with serials 0451AWF00G–0513AWF00J that could allow local users and remote attackers to delete data. The NVD entry provides a CVSS v2 base score of 7.5 (HIGH) with network attack vector and no authentication req...
CVE-2002-1609
CVE-2002-1609 describes a buffer overflow in HP Tru64 UNIX binmail affecting versions 5.1a, 5.1, 5.0a, 4.0g, and 4.0f, allowing local users to gain privileges. The connected documents confirm the affected product and the local-privilege-escalation impact but do not provide any remediation, patch ...
