124 matches found
CVE-2007-1693
The CVE-2007-1693 issue affects Yet Another Telephony Engine (Yate) before version 1.2.0. The SIP channel module reads the Call-Info header and uses the header’s purpose parameter to set caller_info_uri; a programming error causes a NULL dereference when the purpose param is missing, allowing rem...
CVE-2006-1693
GlobalSCAPE Secure FTP Server (gsftps) is affected up to version 3.1.4 Build 01.10.2006. The vulnerability allows remote attackers to trigger a denial-of-service (application crash) by sending a lengthy parameter to an unspecified custom command, due to an unspecified root-cause in the handling o...
CVE-2004-1693
CVE-2004-1693 affects Mambo 4.5 (1.0.9) via Function.php. The vulnerability arises from a PHP remote file inclusion: by setting mosConfig_absolute_path to reference a URL on a remote server that contains code, an attacker can execute arbitrary PHP on the affected system. This is a remote code exe...
CVE-2004-1693
PHP remote file inclusion vulnerability in Function.php in Mambo 4.5 1.0.9 allows remote attackers to execute arbitrary PHP code by modifying the mosConfigabsolutepath parameter to reference a URL on a remote web server that contains the code...