632 matches found
CVE-2004-1693
PHP remote file inclusion vulnerability in Function.php in Mambo 4.5 1.0.9 allows remote attackers to execute arbitrary PHP code by modifying the mosConfigabsolutepath parameter to reference a URL on a remote web server that contains the code...
Mambo 4.5 - Multiple Vulnerabilities
Mambo 4.5 - Multiple Vulnerabilities Mambo Multiple Vulnerabilities Vendor: Mambo Open Source Product: Mambo Version: = 4.5 Website: http://www.mamboserver.com/ BID: 9890 9891 Description: Mambo Open Source is the finest open source Web Content Management System available today. Mambo Open Source...
Mambo 4.5 Server - 'user.php' Script Unauthorized Access
source: https://www.securityfocus.com/bid/9193/info It has been reported that Mambo Server may be prone to an unauthorized access vulnerability that may allow an attacker to modify a user and/or an administrator's information such as password, email, name etc, after supplying a legitimate user id...
CVE-2002-0794
Technical details are not publicly available in the provided documents; monitor for updates on CVE-2002-0794 for any concrete affected versions, impact, or remediation.
CVE-2002-0414
Affected software: KAME-derived IPsec implementations on NetBSD 1.5.2, FreeBSD 4.5, and other OSes. Vulnerability: the implementation does not properly consult the Security Policy Database (SPD), which can allow a Security Gateway (SG) that does not use Encapsulating Security Payload (ESP) to for...
CVE-2002-0877
Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to read arbitrary files via a .. dot dot in the 1 LIST ls or 2 GET commands...
CVE-2002-0877
Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to read arbitrary files via a .. dot dot in the 1 LIST ls or 2 GET commands...
CVE-2002-0876
Web server for Shambala 4.5 allows remote attackers to cause a denial of service crash via a malformed HTTP request...
CVE-2002-0876
CVE-2002-0876 affects the Shambala Web Server (version 4.5). It allows remote attackers to cause a denial-of-service crash by sending a malformed HTTP request. Some OpenVAS/Nessus entries describe the DoS as triggered by specific malformed requests; remediation guidance in those scans suggests up...
CVE-2002-0877
CVE-2002-0877 describes a directory traversal vulnerability in the FTP server for Shambala 4.5. The flaw allows remote attackers to read arbitrary files by injecting .. (dot dot) into the LIST (ls) or GET commands. Public details in the provided sources confirm the vulnerability class (directory ...
CVE-2002-0763
The CVE-2002-0763 entry documents a vulnerability in the administration server of HP VirtualVault 4.5 on HP-UX 11.04. The issue permits remote web servers or privileged external processes to bypass access restrictions and establish connections to the HP VirtualVault server. Affected component is ...
CVE-2002-0518
The CVE-2002-0518 issue affects FreeBSD 4.5 and earlier, where the SYN cache (syncache) and SYN cookie (syncookie) handling can crash a remote host. The described vectors are: (1) a SYN packet accepted with syncookies that leads to a null pointer reference in the socket’s TCP options, and (2) kil...
Evolvable Shambala Server 4.5 - Web Server Denial of Service
Evolvable Shambala Server 4.5 - Web Server Denial of Service // source: https://www.securityfocus.com/bid/4897/info Shambala Server is a FTP, Web, and Chat server targeted for the Small Office/Home Office user. It has been reported that Shambala Server's web server may be prone to a denial of...
Security Advisory FreeBSD-SA-02:24.k5su
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:24.k5su Security Advisory The FreeBSD Project Topic: k5su utility does not honor wheel' group Category: kerberos5 Module: kerberos5/usr.bin/k5su Announced: 2002-05-20...
CVE-2001-1264
HP-UX 11.04 running VirtualVault Operating System (VVOS) 4.0/4.5 contains a privilege-escalation vulnerability in the /sbin/mkacct program (mkacct) that could allow unauthorized privileged access. The issue is documented under CVE-2001-1264 and is referenced by HP Security Bulletin #0161. Remedia...
Security Advisory FreeBSD-SA-02:20.syncache
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:20 Security Advisory FreeBSD, Inc. Topic: syncache/syncookies denial of service Category: core Module: net Announced: 2002-04-16 Credits: Alan Judge [email protected]...
CVE-1999-1262
Technical details about CVE-1999-1262 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2001-0758
Directory traversal vulnerability in Shambala 4.5 allows remote attackers to escape the FTP root directory via "CWD ..." command...
CVE-2001-0758
Summary: CVE-2001-0758 describes a directory traversal vulnerability in Shambala 4.5 that allows remote attackers to escape the FTP root directory using the CWD command. The connected documents corroborate this description, identifying the affected product as Shambala 4.5 and the attack vector as...