CVE-2008-3319

CVE-2008-3319 affects Maian Links 3.1 and earlier. The vulnerability is an authentication bypass in admin/index.php caused by accepting an arbitrary links_cookie cookie, permitting remote attackers to bypass login and gain administrative access. The description from multiple sources confirms the ...

CVE-2008-3319

admin/index.php in Maian Links 3.1 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary linkscookie cookie...

CVE-2007-3319

The CVE-2007-3319 entry concerns the Avaya 4602SW IP Phone (Model 4602D02A) with SIP firmware 2.2.2 and earlier, which does not use the cnonce parameter in the Authorization header of SIP requests during MD5 digest authentication. This omission allows remote attackers to perform man-in-the-middle...

CVE-2006-3319

The CVE-2006-3319 entry corresponds to a Cross-site scripting (XSS) vulnerability in the rss/index.php file of PHP iCalendar 2.22 and earlier. The underlying issue is an injection of arbitrary web script/HTML via the cal parameter, allowing remote attackers to execute injected scripts in victims’...

Mac OS X Multiple Vulnerabilities (Security Update 2006-001)

The remote host is running Apple Mac OS X, but lacks Security Update 2006-001. This security update contains fixes for the following applications : apachemodphp automount Bom Directory Services iChat IPSec LaunchServices LibSystem loginwindow Mail rsync Safari Syndication C Tenable Network...

CVE-2005-3319

The CVE-2005-3319 description applies to PHP 5.x before 5.1.0 final and PHP 4.4 before 4.4.1 final, specifically via the apache2handler SAPI (sapi_apache2.c) in the Apache module (mod_php). It allows a denial of service (segmentation fault) by manipulating the session.save_path option in a .htacc...