CVE-2007-3950

CVE-2007-3950 affects lighttpd 1.4.15 on 32‑bit platforms. The issue is caused by incompatible format specifiers in debugging messages within the modules (mod_scgi, mod_fastcgi, mod_webdav), allowing remote attackers to cause a denial of service (daemon crash). The connected documents indicate th...

CVE-2007-3950

lighttpd 1.4.15, when run on 32 bit platforms, allows remote attackers to cause a denial of service daemon crash via unspecified vectors involving the use of incompatible format specifiers in certain debugging messages in the 1 modscgi, 2 modfastcgi, and 3 modwebdav modules...

Horde < 3.1.4 NLS.php new_lang Parameter XSS

Binary data 3950.prm...

CVE-2006-3950

SQL injection vulnerability in x-statistics.php in X-Scripts X-Statistics 1.20 allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header...

CVE-2006-3950

SQL injection vulnerability in x-statistics.php in X-Scripts X-Statistics 1.20 allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header...

CVE-2005-3950

CVE-2005-3950 affects NuFW’s nuauth component: versions 1.0.x prior to 1.0.16 and the 1.1 line are susceptible to a denial-of-service via malformed packets sent by authenticated users over the network. The issue is mitigated by applying the vendor fix (NuFW 1.0.16 and later / 1.1 line as applicab...