CVE-2007-5639: Undefined Security Weakness

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets products allow remote attackers to cause a denial of service device hang via a flood of Mute and UnMute messages that have a spoofed source IP address for the Signaling Server...

CVE-2007-5636: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service application abort and possibly execute arbitrary code via a flood of invalid characters to the RTCP port 5678/udp that triggers a Windows error message, aka "extraneous messaging."...

CVE-2007-5638: Exposure of Sensitive Information to an Unauthorized Actor

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager BCM, and other product lines, use only 65536 different values in the 32-bit ID number field of an RUDP datagram, which makes it easier for remote attackers to...

CVE-2007-2050

CVE-2007-2050 describes multiple directory traversal vulnerabilities in header.php of RicarGBooK 1.2.1, allowing remote attackers to include and execute arbitrary local files via a .. in either a language cookie or the language parameter. According to NVD, the impact is partial confidentiality wi...

CVE-2007-2050

Multiple directory traversal vulnerabilities in header.php in RicarGBooK 1.2.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 a lang cookie or 2 the language parameter...

CVE-2006-2050

CVE-2006-2050 affects DCScripts DCForumLite 3.0 via SQL injection in dcboard.cgi (parameter az). Root cause: improper input handling allowing arbitrary SQL execution by remote attackers. Impact: potential data exposure or modification as described in the original vulnerability note. Connected rec...

CVE-2002-2050

CVE-2002-2050 affects the ModLogAn processor_web plugin (versions 0.5.0 through 0.7.11) where the splitby option enables a directory traversal via a .. in the hostname of a log entry. This can allow local users to overwrite arbitrary files. The available references do not provide exploit details,...

CVE-2005-2050

The CVE-2005-2050 entry concerns Tor, where a memory disclosure vulnerability in the exit server’s process space could allow remote attackers to read arbitrary memory and potentially obtain key information. The description indicates this affects Tor before version 0.1.0.10. The connected sources ...

CVE-2004-2050

CVE-2004-2050 concerns eSeSIX Thintune Thin Client firmware 2.4.38 and earlier. Local users can gain privileges by pressing CTRL-SHIFT-ALT-DEL and entering the hard-coded password maertsJ in lshell, enabling a local privilege escalation. OpenVAS notes a backdoor password (jstwo) in Thintune, indi...

CVE-2002-2050

Directory traversal vulnerability in processorweb plugin for ModLogAn 0.5.0 through 0.7.11, when used with the splitby option, allows local users to overwrite arbitrary files via a .. dot dot in the hostname of a log entry...