Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-1772. Reason: This candidate is a duplicate of CVE-2010-1772. Notes: All CVE users should reference CVE-2010-1772 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2010-2303

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-1772. Reason: This candidate is a duplicate of CVE-2010-1772. Notes: All CVE users should reference CVE-2010-1772 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2010-2303

CVE-2010-2303 is rejected/not used; reference CVE-2010-1772 instead.

Cross site scripting

Cross-site scripting XSS vulnerability in A51 D.O.O. activeCollab 0.7.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-1772...

CVE-2009-1772

CVE-2009-1772 is an XSS vulnerability in activeCollab 2.1 Corporate where the re_route parameter in the login script allows remote attackers to inject arbitrary web script or HTML. The connected documents corroborate the vector as a login-script parameter, but do not provide additional exploitati...

Debian: Security Advisory (DSA-1772-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1772-1 (udev)

The remote host is missing an update to udev announced via advisory DSA 1772-1. OpenVAS Vulnerability Test $Id: deb17721.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1772-1 udev Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2008-1772

The CVE-2008-1772 entry concerns iScripts SocialWare, where passwords are stored in cleartext in the database. This creates an information disclosure risk because an attacker who can access the database could retrieve user credentials. The provided sources (NVD/NIST, CVE records) confirm the unde...

CVE-2007-1772

CVE-2007-1772 affects HP JetDirect print servers’ built‑in FTP server. The issue allows a remote attacker to trigger a denial of service (engine crash) by sending a RETR command with a long pathname, indicating a potential buffer condition in LIST/ NLIST/ RETR handling. HP’s advisories recommend ...

CentOS 3 / 4 : sharutils (CESA-2005:377)

An updated sharutils package is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The sharutils package contains a set of tools for encoding and decoding packages of files in binary or text format. A stack based overflow bug was found i...

CVE-2002-1772

CVE-2002-1772 affects Novell NetWare 5.0–5.1. Local users could obtain Domain Admin rights by logging into an NDS account (not in NT domain) with domain access rights and running the command “net use” on an NDS_ADM account, which allows entry with a null password. The NVD entry assigns a CVSS2 ba...

CVE-2005-1772

CVE-2005-1772 describes a buffer overflow in the client cd-key hash of Terminator 3: War of the Machines (versions 1.16 and earlier). The flaw can allow remote attackers to cause an application crash (denial of service) by sending a long client cd-key hash value. The provided documents do not inc...

RHEL 4 : sharutils (RHSA-2005:377)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:377 advisory. The sharutils package contains a set of tools for encoding and decoding packages of files in binary or text format. A stack based overflow bu...

CVE-2004-1772

Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument...

CVE-2002-1772

Novell Netware 5.0 through 5.1 may allow local users to gain "Domain Admin" rights by logging into a Novell Directory Services NDS account, and executing "net use" on an NDSADM account that is not in the NT domain but has domain access rights, which allows the user to enter a null password...