71 matches found
CVE-2009-2062
Apple Safari before 3.2.2 processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying this CONNECT response to specify a 302 redirect to an arbitrary https web site...
CVE-2009-2062
CVE-2009-2062 concerns Apple Safari prior to 3.2.2. The issue: when handling an HTTPS site, Safari processes a 3xx HTTP CONNECT response before SSL handshake completes, allowing a man‑in‑the‑middle attacker to modify the response to redirect to an arbitrary HTTPS site. This can enable arbitrary w...
CVE-2008-2062
CVE-2008-2062 (CISCO CUCM RIS Data Collector) affects the Real-Time Information Server Data Collector component in Cisco Unified Communications Manager (CUCM) prior to 4.2(3)SR4 and 4.3 prior to 4.3(2)SR1. The issue is an authentication bypass: by connecting directly to the RIS Data Collector por...
SuSE 10 Security Update : xorg-x11-server (ZYPP Patch Number 2062)
This update fixes an integer overflow vulnerability when rendering CID-keyed fonts. CVE-2006-3739 / CVE-2006-3740 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
CVE-2007-2062
CVE-2007-2062 involves a stack-based buffer overflow in VCDGear 3.55 and 3.56 BETA. The vulnerability allows user-assisted remote attackers to execute arbitrary code by providing a long FILE argument inside a CUE file. The root cause is a overflow in processing the FILE field, enabling code execu...
CVE-2002-2062
CVE-2002-2062 affects Internet Explorer 5.5/6.0 on Windows 2000 via the ftp.htt component when the user has “Enable folder view for FTP sites” and “Enable Web content in folders” enabled. The vulnerability is a cross-site scripting (XSS) issue where an attacker can inject arbitrary web script/HTM...
CVE-2002-2062
Cross-site scripting XSS vulnerability in ftp.htt in Internet Explorer 5.5 and 6.0, when running on Windows 2000 with "Enable folder view for FTP sites" and "Enable Web content in folders" selected, allows remote attackers to inject arbitrary web script or HTML via the hostname portion of an FTP...
CVE-2005-2062
CVE-2005-2062 affects ActiveBuyAndSell 6.2. Multiple SQL injection vulnerabilities allow remote attackers to execute arbitrary SQL commands via the catid parameter to (1) default.asp or (2) buyersend.asp, (3) Administrator ID field in admin.asp, E-mail field in (4) advertiserstart.asp or (5) buye...
CVE-2004-2062
CVE-2004-2062 affects AntiBoard ( antiboard.php ) ≤ 0.7.2. The vulnerability is a SQL injection in parameters (thread_id, parent_id, mode) that allows remote attackers to execute arbitrary SQL through the affected page. The vulnerability and affected component are documented in multiple sources (...