134 matches found
CVE-2011-3327
CVE-2011-3327 : Quagga bgpd before 0.99.19 contains a heap-based buffer overflow in the function ecommunity_ecom2str within bgp_ecommunity.c. A crafted BGP UPDATE message over IPv4 can cause a daemon crash (DoS) or potentially allow remote code execution. Affected: Quagga/bgpd; vulnerable version...
CVE-2011-3327
Heap-based buffer overflow in the ecommunityecom2str function in bgpecommunity.c in bgpd in Quagga before 0.99.19 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code by sending a crafted BGP UPDATE message over IPv4...
Multiple Quagga remote component vulnerabilities
Overview Quagga contains five remote component vulnerabilities due to issues when handling BGP, OSPF, and OSPFv3 packets. Description CERT-FI reports:Quagga is an open source routing software that can handle various routing protocols such as RIP, BGP and OSPF. Five vulnerabilities have been found...
quagga -- multiple vulnerabilities
CERT-FI reports: Five vulnerabilities have been found in the BGP, OSPF, and OSPFv3 components of Quagga. The vulnerabilities allow an attacker to cause a denial of service or potentially to execute his own code by sending a specially modified packets to an affected server. Routing messages are...
Microsoft IE Anchor元素信息泄露漏洞（MS10-071）
BUGTRAQ ID: 43704 CVE ID: CVE-2010-3327 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 Internet Explorer没有正确地处理Anchor元素导致了信息泄露漏洞。在用户操作期间粘贴和编辑内容时如果没有移除Anchor元素就会出现这种行为，可能泄露本应删除的个人可识别信息。 Microsoft Internet Explorer 8.0 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 厂商补丁： Microsoft...
CVE-2010-3327
CVE-2010-3327 – Anchor Element Information Disclosure Vulnerability : Affected software is Internet Explorer 6–8. The issue stems from the Anchor element not being removed during paste/edit operations, potentially exposing deleted content to page visitors. The vulnerability is an information-disc...
CVE-2009-3327
CVE-2009-3327 relates to multiple SQL injection flaws in WX-Guestbook 1.1.208. The vulnerabilities allow remote attackers to execute arbitrary SQL commands via (1) the QUERY parameter to search.php and (2) the USERNAME parameter to login.php. The issue is confirmed in multiple documents (NVD, CVE...
CVE-2009-3327
creationtimestamp| type| source ---|---|--- 2009-09-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9730...
CVE-2008-3327
CVE-2008-3327 affects Moodle 1.6.5. When PHP display_errors is enabled, a direct request to blog/blogpage.php or course/report/stats/report.php can disclose the installation path in an error message. The connected documents confirm the affected software and the precise endpoints involved, but do ...
CVE-2007-3327
httpsv.exe in HTTP Server 1.6.2 allows remote attackers to obtain sensitive information script source code via a URI with a trailing %20 encoded space...
CVE-2007-3327
CVE-2007-3327 affects the HTTP Server 1.6.2 component where httpsv.exe incorrectly handles a URI ending with an encoded space (%20), leading to an information disclosure that allows remote attackers to obtain sensitive data such as script source code. The vulnerability is triggered by a crafted r...
CVE-2006-3327
The CVE-2006-3327 entry describes a Cross-site scripting (XSS) vulnerability in the Custom dating biz dating script 1.0. The affected components are profile/mini.php (sn20_special_cases parameter, “Special Cases”), profile/photo_create.php (tyxx01_album_name parameter, “Album Name”), and admin/us...
CVE-2005-3327
CVE-2005-3327 affects Network Appliance Data ONTAP 7.0 and earlier. A modified iSCSI client can bypass authentication by skipping the Security (Start) mode required by the Login Negotiation protocol and operating in Operational mode without proving identity, exposing partial confidentiality, inte...