CVE-2007-2497

RealNetworks RealPlayer 10 Gold is vulnerable to a remote denial of service caused by processing a crafted .ra file that leads to memory consumption. The description notes this as a potential “memory leak” but does not provide root-cause details or a confirmed fix. Public references in the CVE en...

CVE-2004-2497

The CVE-2004-2497 entry describes an XSS in the error handler of Hitachi Web Page Generator and Web Page Generator Enterprise (version 4.01 and earlier) when using the default error template with debug mode ON. This allows remote attackers to inject arbitrary script/HTML via unknown attack vector...

CVE-2005-2497

CVE-2005-2497 is a duplicate of CAN-2005-2641; the candidate was reserved/referenced to CVE-2005-2641 and later removed content to prevent usage. Connected documents describe pam_ldap authentication bypass related to handling a new password policy control (CAN-2005-2641), not CVE-2005-2497 specif...

CVE-2005-2641

Unknown vulnerability in pamldap before 180 does not properly handle a new password policy control, which could allow attackers to gain privileges. NOTE: CVE-2005-2497 had also been assigned to this issue, but CVE-2005-2641 is the correct candidate...

CVE-2005-2641

The connected materials corroborate CVE-2005-2641 as a pam_ldap authentication bypass vulnerability: pam_ldap before version 1.8.0 does not properly handle a new password policy control, enabling an attacker to gain privileges by redirecting authentication to another server with different TLS req...