CVE-2009-1618

CVE-2009-1618 affects Teraway LiveHelp 2.0. The vulnerability allows remote attackers to bypass authentication and gain administrative access by crafting a specific TWLHadmin cookie value: pwd=&lvl=1&usr=&alias=admin&userid=1. This is a cookie-based authentication bypass leading to administrative...

CVE-2009-1618

creationtimestamp| type| source ---|---|--- 2009-04-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8552...

Gentoo Security Advisory GLSA 200604-05 (doomsday)

The remote host is missing updates announced in advisory GLSA 200604-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Debian DSA-1618-1 : ruby1.9 - several vulnerabilities

Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may lead to denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-2662 Drew Yao discovered that multiple...

CVE-2008-1618

CVE-2008-1618 : Watchguard Firebox PPTP VPN (pre-10) may leak valid usernames during MS-CHAPv2 authentication due to distinct error codes for valid vs invalid usernames. The documented behavior enables an attacker to enumerate valid usernames, facilitating targeted password guessing and potential...

CVE-2008-1618

The PPTP VPN service in Watchguard Firebox before 10, when performing the MS-CHAPv2 authentication handshake, generates different error codes depending on whether the username is valid or invalid, which allows remote attackers to enumerate valid usernames...

CVE-2007-1618

ScriptMagix FAQ Builder 2.0 (and earlier) is affected by an SQL injection in index.php via the catid parameter. The root cause is improper handling of user-supplied data in the SQL query, allowing remote attackers to execute arbitrary SQL commands. Affected product/version set explicitly includes...

CVE-2006-1618

Format string vulnerability in the 1 Conmessage and 2 conPrintf functions in conmain.c in Doomsday engine 1.8.6 allows remote attackers to execute arbitrary code via format string specifiers in an argument to the JOIN command, and possibly other command arguments...

CVE-2006-1618

Doomsday engine 1.8.6 is affected by a format-string vulnerability in Con_message and conPrintf (in con_main.c). A remote attacker can cause arbitrary code execution by sending crafted strings (e.g., via the JOIN command or other arguments). The issue stems from incorrect handling of format speci...

CVE-2002-2135

CVE-2002-2135 is a duplicate of CVE-2002-1618. The connected CVE-2002-1618 describes a vulnerability in HP-UX JFS/JFS3.1 and OnlineJFS where the sticky bit is not properly enforced on JFS filesystems (HP-UX 10.20, 11.00, 11.04), potentially allowing attackers to bypass filesystem-restrictions. Th...

CVE-2005-1618

The CVE-2005-1618 entry describes a DoS in Yahoo! Messenger (YMSGR URL handler) for versions 5.x–6.0. A room login/join packet containing a colon and ampersand can cause Messenger to send a corrupted packet to the server, triggering a disconnect. Concrete impact is denial of service; exploitation...

CVE-2004-1618

CVE-2004-1618 affects Vypress Tonecast 1.3 and earlier. The vulnerability arises when processing a malformed mp2 stream, which can cause the application to crash and thus result in a denial of service. The core impact documented is a partial availability hit due to an application crash triggered ...

CVE-2004-1618

Vypress Tonecast 1.3 and earlier allows remote attackers to cause a denial of service application crash via a malformed mp2 stream...

CVE-2002-2135

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2002-1618. Reason: This candidate is a duplicate of CVE-2002-1618. Notes: All CVE users should reference CVE-2002-1618 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...