226 matches found
CVE-2008-4577
The ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive access rights, which allows attackers to bypass intended access restrictions...
CVE-2007-4577
CVE-2007-4577 affects Sophos Anti-Virus for Unix/Linux prior to 2.48.0. A malformed BZip file can trigger an infinite loop, causing the Engine to create multiple temporary files and leading to a denial-of-service condition. The issue is triggered during processing of compressed input (BZip) and a...
CVE-2006-4577
CVE-2006-4577 affects The Address Book 1.04e. It contains multiple cross-site scripting (XSS) vulnerabilities allowing an attacker to inject arbitrary scripts via: (1) email, (2) websites, (3) groupAddName in save.php; (4) errorMsg in index.php; (5) goTo and (6) search in search.php. CVSS v2 base...
CVE-2005-4577
Hitachi Business Logic - Container (BLC) vulnerabilities CVE-2005-4577: multiple XSS flaws in BLC versions P-2443-9114 (Windows, 01-00 to 02-06) and P-1M43-9111 (AIX, 01-01 to 02-00) allow remote attackers to inject arbitrary web script or HTML via an unspecified input form. The issue is cross-si...