8091 matches found
CVE-2004-1000
lintian 1.23 and earlier removes the working directory even if it was not created by lintian, which may allow local users to delete arbitrary files or directories via a symlink attack...
CVE-2004-1000
lintian 1.23 and earlier removes the working directory even if it was not created by lintian, which may allow local users to delete arbitrary files or directories via a symlink attack...
CVE-2004-1000
lintian 1.23 and earlier removes the working directory even if it was not created by lintian, which may allow local users to delete arbitrary files or directories via a symlink attack...
CVE-2004-0034
Multiple cross-site scripting XSS vulnerabilities in Phorum 3.4.5 and earlier allow remote attackers to inject arbitrary HTML or web script via 1 the phorumcheckxss function in common.php, 2 the EditError variable in profile.php, and 3 the Error variable in login.php...
CVE-2004-0029
CVE-2004-0029 affects Lotus Notes Domino 6.0.2 on Linux, where the notes.ini configuration file is installed with world-writable permissions. This enables local users to modify the Notes configuration and potentially gain privileges. The core vulnerability is the insecure file permissions of note...
CVE-2004-0014
Multiple buffer overflows in the nd WebDAV interface 0.8.2 and earlier allows remote web servers to execute arbitrary code via certain long strings...
CVE-2004-0030
CVE-2004-0030 describes a PHP remote file inclusion in PHPGEDVIEW 2.61 via PGV_BASE_DIRECTORY in functions.php, authentication_index.php, and config_gedcom.php, enabling remote code execution by referencing a URL on a remote server. Root cause: unsafely using a user-controllable base directory pa...
CVE-2004-0014
Multiple buffer overflows in the nd WebDAV interface 0.8.2 and earlier allows remote web servers to execute arbitrary code via certain long strings...
CVE-2004-0030
PHP remote file inclusion vulnerability in 1 functions.php, 2 authenticationindex.php, and 3 configgedcom.php for PHPGEDVIEW 2.61 allows remote attackers to execute arbitrary PHP code by modifying the PGVBASEDIRECTORY parameter to reference a URL on a remote web server that contains the code...
CVE-2004-0034
CVE-2004-0034 affects Phorum 3.4.5 and earlier with multiple XSS vulnerabilities. The issues allow remote attackers to inject arbitrary HTML or web script through (1) phorum_check_xss in common.php, (2) EditError in profile.php, and (3) Error in login.php. The NVD metric reports a CVSS v2 base sc...
CVE-2004-0037
The CVE-2004-0037 record concerns FirstClass Desktop Client 7.1. The vulnerability arises from hyperlinks embedded in FirstClass RTF messages, which allow a remote attacker to execute arbitrary commands on the affected client. Documented impact indicates arbitrary command execution with network a...
CVE-2004-0014
CVE-2004-0014 affects the nd WebDAV interface (nd 0.8.2 and earlier). The root cause is multiple buffer overflows triggered by long strings received from a remote WebDAV server, which could allow a remote attacker to execute arbitrary code. Public advisories reference the Debian security advisory...
CVE-2004-1786
PortalApp places user credentials under the web root with insufficient access control, which allows remote attackers to gain access to sensitive information via a direct request to 8275.mdb...
CVE-2004-1784
Buffer overflow in the web server of Webcam Watchdog 3.63 allows remote attackers to execute arbitrary code via a long HTTP GET request...
MyServer 0.4.3 / 0.7 Crafted Traversal Arbitrary File Access
This web server is running MyServer See the Nessus Scripts License for details Changes by Tenable: - Revised plugin title, added VDB refs, changed family 4/20/009 include"compat.inc"; ifdescription scriptid11851; scriptversion "1.16"; scriptcveid"CVE-2004-2516"; scriptbugtraqid11189;...
HTTP Reverse Proxy Detection (Deprecated)
This web server is reachable through a reverse HTTP proxy. Note: This plugin has been deprecated. @DEPRECATED@ C Tenable Network Security, Inc. HTTP/1.1 is defined by RFC 2068 Check for proxy on the way transparent or reverse?! include"compat.inc"; ifdescription scriptid11040; scriptversion "1.37...
DistCC Daemon - Command Execution (Metasploit)
DistCC Daemon - Command Execution Metasploit $Id: distccexec.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...
DistCC Daemon Command Execution
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
DistCC Daemon - Command Execution (Metasploit)
$Id: distccexec.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
