CVE-2009-1998

CVE-2009-1998 affects Oracle Communications Order and Service Management in Oracle Industry Applications versions 2.8.0, 6.2.0, 6.3.0 and 6.3.1. The vulnerability is described as an unspecified issue that allows remote authenticated users to affect confidentiality and integrity via unknown vector...

Solaris 5.4 (sparc) : 104551-04

CDE 1.0.1: dtpad patch. Date this patch was last updated by Sun : Dec/16/98 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Fedora Update for ghostscript FEDORA-2008-1998

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Gentoo Security Advisory GLSA 200609-03 (openttd)

The remote host is missing updates announced in advisory GLSA 200609-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-1998

CVE-2008-1998 affects IBM DB2 prior to FP16 on 8.x, prior to FP4a on 9.1, and prior to FP1 on 9.5 (Windows). The NNSTAT (SYSPROC.NNSTAT) procedure can be abused by remote authenticated users to overwrite arbitrary files via the log file parameter. No explicit exploit details or in-the-wild status...

CVE-2008-1998

The NNSTAT aka SYSPROC.NNSTAT procedure in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 on Windows allows remote authenticated users to overwrite arbitrary files via the log file parameter...

CVE-2007-1998

The CVE-2007-1998 entry concerns HIOX Guest Book (HGB) 4.0. Affected component: the Email field in gb.php. Root cause: direct static code injection that allows remote attackers to inject PHP code, resulting in code execution. Exploitability: described as a remote issue via a direct request; no ex...

Solaris 2.6 (sparc) : 105490-07

. Date this patch was last updated by Sun : Dec/23/98 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Solaris 5.6 (x86) : 107036-01

Solstice Enterprise Agent 1.0.1 x86: SNMP DMI. Date this patch was last updated by Sun : Nov/16/98 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 2.6 (sparc) : 105710-01

The remote host is missing Sun Security Patch number 105710-01 Sun WebServer 1.0: Security and Performance international Patch. Date this patch was last updated by Sun : Wed Dec 09 17:00:00 MST 1998 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@...

CVE-2006-1998

OpenTTD 0.4.7 and earlier is vulnerable to a local denial-of-service due to a flaw in error handling for command packets; sending a large invalid error number can trigger an application exit. The issue affects OpenTTD server components when handling certain errors, allowing a local attacker to ca...

CVE-2002-1998

CVE-2002-1998 describes a buffer overflow in rpc.cmsd on SCO UnixWare 7.1.1 and Open UNIX 8.0.0 that allows remote attackers to execute arbitrary commands via a long parameter to rtable_create (procedure 21). Multiple sources (NVD, Red Hat advisory, CVE records) corroborate this description and t...

CVE-2005-1998

CVE-2005-1998 is a directory traversal vulnerability affecting McGallery 1.1, where the lang parameter can be exploited with .. to read arbitrary files from the server. The commonly cited references (NVD, CVE List, CVE.org) confirm the issue and the affected product/version, but the materials do ...

CVE-2004-1998

CVE-2004-1998 affects Php-Nuke (Downloads module) versions 6.x–7.2. The issue stems from an invalid show parameter to modules.php, which causes a PHP error message that reveals the full filesystem path, enabling information disclosure. Impact is limited to confidentiality (full path exposure); ex...

HP-UX PHSS_16649 : s700_800 11.00 Receiver Services October 1998 Patch

s700800 11.00 Receiver Services October 1998 Patch : The SharedX program recserv is vulnerable to a denial of service attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS16649. The text itself is...

CVE-2002-1998

Buffer overflow in rpc.cmsd in SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows remote attackers to execute arbitrary commands via a long parameter to rtablecreate procedure 21...

iis-GET-DoS.txt

Date: Mon, 21 Dec 1998 15:56:44 -0600 From: Rattle Reply-To: Bugtraq List To: [email protected] Subject: Microsoft Security Bulletin MS98-019 fwd Another IIS DoS attack? Of course! ... . Nick Levay . [email protected] . "There are two major products that come out of Berkeley: LSD and UNIX. . W...

msie4.width.000.txt

Jim Paris http://home.jtan.com/jim/bugs/ie/width.html Internet Explorer 4.x "width=000..." bug Some versions of Microsoft Internet Explorer will crash when given a long "width=" or "height=" string in an image tag under the correct circumstances. In most cases, IE will stop parsing the "width="...

CVE-2024-1998

CVE-2024-1998 is a reservation/duplicate of CVE-2024-1795 and should be treated as such; the active vulnerability is CVE-2024-1795 for HUSKY – Products Filter Professional for WooCommerce (WordPress). The issue is an authenticated SQL Injection via the name parameter in the woof shortcode in all ...