10089 matches found
CVE-2003-0405
CVE-2003-0405 affects Vignette StoryServer 5 and Vignette V/6. A flaw allows remote attackers to execute arbitrary TCL code by supplying crafted input: (1) an HTTP query or cookie processed in the NEEDS command, or (2) an HTTP Referrer processed in the VALID_PATHS command. Root cause: improper ha...
CVE-2003-0398
Affected products: Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, with the SSI EXEC feature enabled. Vulnerability: remote attackers could execute arbitrary code by providing a crafted text variable to a Vignette Application that is later displayed. Underlying cause/details are not expli...
CVE-2003-0415
CVE-2003-0415 affects Remote PC Access Server 2.2. The vulnerability allows a remote attacker to trigger a denial-of-service (crash) by sending packets to the server and having the server send them back to itself. The available description confirms the affected product and the general impact (ava...
CVE-2003-0406
CVE-2003-0406 concerns PalmVNC (1.40 and earlier) where passwords are stored in plaintext in the PalmVNCDB. This database is backed up to PCs with which the Palm is synchronized, potentially allowing attackers with local access to gain privileges on the target. The available documents specify the...
CVE-2003-0400
Vignette StoryServer and Vignette V/5 does not properly calculate the size of text variables, which causes Vignette to return unauthorized portions of memory, as demonstrated using the "--" string in a CookieName argument to the login template, referred to as a "memory leak" in some reports...
CVE-2003-0400
CVE-2003-0400 affects Vignette StoryServer and Vignette V/5; the vulnerability arises from miscalculating the size of text variables, causing Vignette to return unauthorized portions of memory. The issue is demonstrated via a CookieName argument to the login template using the "-->" string, de...
CVE-2003-0397
Buffer overflow in FastTrack FT network code, as used in Kazaa 2.0.2 and possibly other versions and products, allows remote attackers to execute arbitrary code via a packet containing a large list of supernodes, aka "Packet 0' death."...
CVE-2003-0404
CVE-2003-0404 affects Vignette StoryServer 4/5 and Vignette V/5 and V/6. Vulnerability: multiple Cross Site Scripting (XSS) via text variables, demonstrated through the errInfo parameter in the default login template. Impact: remote attackers can inject arbitrary HTML and script. Exploitation det...
CVE-2003-0404
Multiple Cross Site Scripting XSS vulnerabilities in Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, allow remote attackers to insert arbitrary HTML and script via text variables, as demonstrated using the errInfo parameter of the default login template...
CVE-2003-0411
CVE-2003-0411 affects Sun ONE Application Server 7.0 on Windows 2000/XP. A remote attacker can obtain JSP source code by requesting a file with the uppercase extension ".JSP" instead of ".jsp". The provided documents do not specify a patch version or remediation; exploitation details are not desc...
CVE-2003-0417
CVE-2003-0417 describes a directory traversal vulnerability in Son hServer 0.2 that allows a remote attacker to read arbitrary files using modified dot-dot sequences (".|."). The issue affects the server component of Son hServer and is triggered via crafted requests that bypass normal path checks...
CVE-2003-0407
Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 allows remote attackers to execute arbitrary code via a long connection string...
CVE-2003-0413
CVE-2003-0413 describes a cross-site scripting (XSS) vulnerability in the webapps-simple sample application used with Sun ONE Application Server 7.0 (Windows 2000/XP) or Sun Java System Web Server 6.1. The issue allows remote attackers to inject arbitrary web script/HTML via an HTTP request that ...
CVE-2003-0399
Vignette StoryServer 4 and 5, Vignette V/5, and possibly other versions allows remote attackers to perform unauthorized SELECT queries by setting the vgncreds cookie to an arbitrary value and directly accessing the save template...
CVE-2003-0408
Buffer overflow in Uptime Client UpClient 5.0b7, and possibly other versions, allows local users to gain privileges via a long -p argument...
CVE-2003-0399
CVE-2003-0399 affects Vignette StoryServer 4/5 and V/5 (and possibly other versions). The vulnerability allows remote attackers to perform unauthorized SELECT queries by setting the vgn_creds cookie to an arbitrary value and directly accessing the save template, indicating abuse of session/authen...
CVE-2003-0407
CVE-2003-0407 describes a buffer overflow in gbnserver of Gnome Batalla Naval 1.0.4 that allows remote attackers to execute arbitrary code via a long connection string. The issue is evidenced across multiple sources (NVD entry and related advisories) noting remote code execution prospects with a ...
CVE-2003-0416
CVE-2003-0416 affects Bandmin 1.4: the index.cgi component is vulnerable to cross-site scripting via (1) year or (2) month in showmonth, or (3) host in showhost. Root cause is improper handling of user-supplied input leading to arbitrary HTML/script insertion. Impact: potential theft of cookies o...
CVE-2003-0414
The installation of Sun ONE Application Server 7.0 for Windows 2000/XP creates a statefile with world-readable permissions, which allows local users to gain privileges by reading a plaintext password in the statefile...