92 matches found
CVE-2008-2085
Multiple stack-based buffer overflows in the 1 getremoteipmedia and 2 getremoteipv6media functions in call.cpp in SIPp 3.1 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted SIP message...
CVE-2008-2085
Multiple stack-based buffer overflows in the 1 getremoteipmedia and 2 getremoteipv6media functions in call.cpp in SIPp 3.1 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted SIP message...
CVE-2008-2085
The CVE-2008-2085 vulnerability affects SIPp 3.1, specifically the get_remote_ip_media and get_remote_ipv6_media functions in call.cpp, where multiple stack-based buffer overflows can allow a remote attacker to crash the application and potentially execute arbitrary code via a crafted SIP message...
SuSE 10 Security Update : gzip (ZYPP Patch Number 2085)
This update fixes several security problems that can be exploited to compromise the system in conjunction with other programs while processing malformated archive files. CVE-2006-4334 / CVE-2006-4335 / CVE-2006-4336 / CVE-2006-4337 / CVE-2006-4338 %NASLMINLEVEL 70300 C Tenable Network Security,...
CVE-2007-2085
The CVE-2007-2085 issue affects the oe2edit CMS (oe2edit.cgi) and is due to a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the q parameter. Affected component is the oe2edit.cgi handler within oe2edit CMS. The NVD entry lists a b...
CVE-2006-2085
Affected software/components: SpeedProject Squeez (version 5.10 Build 4460) and SpeedCommander (versions 10.52 Build 4450 and 11.01 Build 4450). Vulnerability: Multiple buffer overflows in CxAce60.dll and CxAce60u.dll used by these products when processing ACE archives with a long filename. Root ...
KLA10338 ACE vulnerability in SpeedProject
Buffer overflows were found in SpeedProject products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed ACE file. Original advisories - Related products Speedproject-SpeedCommander Speedproject-Squeez...
CVE-2002-2085
Directory traversal vulnerability in page.cgi of WWWeBBB Forum 3.82 beta and earlier allows remote attackers to read arbitrary files via a .. dot dot in an HTTP request...
CVE-2002-2085
CVE-2002-2085 - WWWeBBB Forum : Affected product: WWWeBBB Forum prior to or including version 3.82 beta. Vulnerable component: page.cgi. Issue: directory traversal via a .. in an HTTP request allows reading arbitrary files. Exploitability: network attack; evidence shows impact as partial confiden...
CVE-2005-2085
The CVE-2005-2085 entry describes a buffer overflow in Inframail Advantage Server Edition (Infradig Systems) 6.0–6.7. The SMTP server is vulnerable to a DoS via an excessively long MAIL FROM field (and the FTP server via a long NLST argument), reported as enabling remote crash and, per Nessus ref...
CVE-2004-2085
Multiple cross-site scripting XSS vulnerabilities in Brad Fears phpCodeCabinet 0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via multiple parameters, including 1 the sid parameter to comments.php, 2 the cid, cf, or rfd parameters to category.php, or the cid paramet...