Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5 and 5.29.51 software, allows remote attackers to perform certain configuration changes as administrators...

CVE-2007-4388

The provided connected documents confirm a vulnerability in 2wire 1701HG and 2071 Gateway routers running software 5.29.51 (and possibly 3.17.5), where a blank password is set by default. This implies potential unauthorized access to router management/settings if default credentials are not chang...

CVE-2007-4387

CVE-2007-4387 affects 2Wire routers (1701HG, 2071) with software versions 3.17.5/5.29.51. The flaw is a cross-site request forgery on the /xslt page that allows an attacker to perform configuration changes as an administrator. Related public material (PacketStorm, Metasploit module) confirms a CS...

VMSA-2007-0005:Updated Service Console packages (XFree86, UP and SMP kernels, Kerberos libraries) resolve security issues.

VMSA-2007-0005 Updated Service Console packages XFree86, UP and SMP kernels, Kerberos libraries resolve security issues. VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2007-0005 VMware Security AdvisorySynopsis: Updated Service Console packages XFree86, UP and SMP kernels,...

CVE-2007-2071

Open-gorotto 2.0a (2006-02-08, 2006-03-19, 2006-04-07 editions) contains multiple cross-site scripting (XSS) vulnerabilities disclosed for several pages under pub/modules (including d/_top.html, a/_access.html, ci/, f/ directories). The flaws allow remote attackers to inject arbitrary scripts via...

VMSA-2006-0008 - VMware ESX Server 2.0.2 Upgrade Patch 2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2006-0008 Synopsis: VMware ESX Server 2.0.2 Upgrade Patch 2 Patch URL: http://www.vmware.com/download/esx/esx-202-200610-patch.html...

CVE-2006-2071

CVE-2006-2071 affects Linux kernels 2.4.x and 2.6.x up to 2.6.16. It arises from a flaw in the mprotect handling that allowed a local user to grant write permission to a read-only attachment of a shared memory segment, bypassing IPC permissions and enabling modification of the attachment. Reporte...

Code injection

madviseremove in Linux kernel 2.6.16 up to 2.6.16.6 does not follow file and mmap restrictions, which allows local users to bypass IPC permissions and replace portions of readonly tmpfs files with zeroes, aka the MADVREMOVE vulnerability. NOTE: this description was originally written in a way tha...

Solaris 10 (sparc) : 121012-03

SunOS 5.10: traceroute patch. Date this patch was last updated by Sun : Feb/16/10 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrando...

Solaris 10 (x86) : 121013-03

SunOS 5.10x86: traceroute patch. Date this patch was last updated by Sun : Feb/16/10 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

CVE-2005-2071

CVE-2005-2071 affects Sun Solaris 10 on x86 where traceroute can allow a local user to run arbitrary code with PRIV_NET_RAWACCESS by supplying a large number of -g arguments or a malformed -s argument with a trailing dot. Connected advisories document patches: Solaris 10 (x86) 121013-03 and Solar...

CVE-2005-2071

traceroute in Sun Solaris 10 on x86 systems allows local users to execute arbitrary code with PRIVNETRAWACCESS privileges via 1 a large number of -g arguments or 2 a malformed -s argument with a trailing . dot...

CVE-2004-2071

Macallan Mail Solution 2.8.4.6 Build 260, and possibly earlier versions, allows remote attackers to bypass authentication in the web interface via an HTTP GET request with two slashes "//" after the server name...

CVE-2002-2071

Compaq Tru64 4.0 d allows remote attackers to cause a denial of service in 1 telnet, 2 FTP, 3 ypbind, 4 rpc.lockd, 5 snmp, 6 ttdbserverd, and possibly other services via a TCP SYN scan, as demonstrated using nmap...

CVE-2020-2071

...

CVE-2020-2071

CVE-2020-2071 is rejected/not used per the Initial Description.