CVE-2012-1820

Summary of CVE-2012-1820 : In Quagga, the bgpd daemon (versions up to 0.99.20.1 and earlier) incorrectly processes the BGP ORF capability in OPEN messages, allowing a remote attacker with a configured BGP peer to trigger an assertion failure and crash bgpd, causing a denial of service. The root c...

CVE-2012-1820

The bgpcapabilityorf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service assertion failure and daemon exit by leveraging a BGP peering relationship and sending a malformed Outbound Route Filtering ORF capability TLV in an OPEN message...

RHEL 4 / 5 : pidgin (RHSA-2011:1820)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1820 advisory. - pidgin libpurple: Invalid UTF-8 string handling in OSCAR messages CVE-2011-4601 - pidgin: Multiple NULL pointer deference flaws by...

CVE-2011-1820

CVE-2011-1820 affects IBM Tivoli Directory Server (TDS) versions listed in the NVD entry (5.2 pre-5.2.0.5…, 6.0 pre-6.0.0.67, 6.1 pre-6.1.0.40, 6.2 pre-6.2.0.16, 6.3 pre-6.3.0.3). The vulnerability stems from improper handling of the ibm-auditAttributesOnGroupEvalOp logging setting for auditing o...

CVE-2010-1820

The CVE-2010-1820 issue affects Apple Mac OS X AFP Server (10.6.x up to 10.6.4). The vulnerability stems from improper error handling, allowing a remote attacker who knows a valid account name to bypass the password requirement for AFP shared-folder access. Affected product: Mac OS X AFP Server; ...

Mac OS X AFP Shared Folders Unauthenticated Access (Security Update 2010-006)

The remote host is running a version of Mac OS X 10.6 that does not have Security Update 2010-006 applied. This security update fixes an issue in AFP Server by which a remote attacker with knowledge of an account name on the affected system may be able to bypass the password validation and access...

Debian Security Advisory DSA 1820-1 (xulrunner)

The remote host is missing an update to xulrunner announced via advisory DSA 1820-1. OpenVAS Vulnerability Test $Id: deb18201.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1820-1 xulrunner Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2009-1820

CVE-2009-1820 describes a cross-site scripting (XSS) vulnerability in the 2daybiz Custom T-shirt Design Script, specifically in the file product.php. The flaw allows remote attackers to inject arbitrary web script or HTML via the id parameter. The provided references confirm the vulnerability des...

CVE-2008-1820

CVE-2008-1820 affects Oracle Database Data Pump: vulnerable in versions 9.2.0.8, 10.1.0.5, 10.2.0.3, and 11.1.0.6. The impact is unspecified with remote vectors related to KUPF$FILE_INT, and there are researcher claims of a buffer overflow in SYS.KUPF$FILE_INT.GET_FULL_FILENAME; no confirmation o...

CVE-2007-1820

CVE-2007-1820 affects Nortel Networks CallPilot and Meridian Mail voicemail systems when auto logon is enabled. A remote attacker can spoof Caller ID (CNID) to access, retrieve, or delete messages and reconfigure the mailbox. The vulnerability is documented with a high-severity CVSS v2 score (9.3...

CVE-2006-1820

CVE-2006-1820 affects MODx

CVE-2002-1820

register.php in Ultimate PHP Board UPB 1.0 and 1.0b uses an administrative account Admin with a capital "A," but allows a remote attacker to impersonate the administrator by registering an account name of admin with a lower case "a."...

CVE-2002-1820

The CVE-2002-1820 entry concerns Ultimate PHP Board (UPB) versions 1.0 and 1.0b where register.php uses an administrative account named Admin (capital A) but allows a remote attacker to impersonate the administrator by registering a user named admin (lowercase a). The root cause is inconsistent c...

CVE-2005-1820

Zeroboard zboard.php in versions 4.1pl2–4.1pl5 is affected by CVE-2005-1820: improper quoting in preg_replace allows remote attackers to execute arbitrary PHP code. Impact is remote code execution; no specific patch/version remediation is provided in the supplied documents. Exploitation details a...

CVE-2004-1820

PHP remote file inclusion vulnerability in displaycategory.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to execute arbitrary PHP code by modifying the basepath parameter to reference a URL on a remote web server that contains fileFunctions.php...

CVE-2002-1820

register.php in Ultimate PHP Board UPB 1.0 and 1.0b uses an administrative account Admin with a capital "A," but allows a remote attacker to impersonate the administrator by registering an account name of admin with a lower case "a."...