569 matches found
CVE-2008-2404
CVE-2008-2404 affects Sun Java System Active Server Pages (ASP) Server prior to 4.0.3. The issue is a stack-based buffer overflow in the request handling code that allows remote code execution via an unspecified string field. Exploitation is described as possible from the web context, with no aut...
CVE-2002-2404
The CVE-2002-2404 issue affects IISPop email server versions 1.161 and 1.181. The root cause is a buffer overflow in the POP3 handling logic that can be triggered by a long request to the POP3 port (TCP 110). This results in a remote denial of service (crash). The available documents do not provi...
CVE-2007-2404
CVE-2007-2404: CRLF injection vulnerability in CFNetwork on Mac OS X 10.3.9/10.4.10 prior to 20070731 allows remote attackers to inject arbitrary HTTP headers and perform HTTP response splitting; note this can enable XSS. Affected component: CFNetwork. Root cause: CRLF sequence handling in HTTP r...
Mac OS X Multiple Vulnerabilities (Security Update 2007-007)
The remote host is running a version of Mac OS X 10.4 or 10.3 which does not have the security update 2007-007 applied. This update contains several security fixes for the following programs : - bzip2 - CFNetwork - CoreAudio - cscope - gnuzip - iChat - Kerberos - mDNSResponder - PDFKit - PHP -...
CVE-2006-2404
CVE-2006-2404 is a directory-traversal vulnerability in the RadScripts RadLance Gold 7.0 package, specifically in popup.php. The underlying issue allows an unauthenticated attacker to read arbitrary files by providing a ".." sequence in the read parameter, enabling unauthorized access to local fi...
CVE-2004-2404
CVE-2004-2404 is a duplicate of CVE-2004-2347. Connected records show that the affected product is Leif M. Wright Web Blog (versions 1.1 and 1.1.5). The vulnerability is remote command execution via shell metacharacters (e.g., |) in the file parameter of ViewFile requests, indicating improper han...
CVE-2005-2404
Sendcard 3.2.3 is affected: sendcard.php?id is vulnerable to SQL injection due to insufficient input sanitization. Remote attackers could execute arbitrary SQL commands, with CVSS base impact of Partial confidentiality, integrity, and availability (AV:N/AC:L/Au:N/C:P/I:P/A:P). This result is supp...
