CVE-2002-1640

Affected software: Oracle Configurator. Vulnerable versions: before 11.5.7.17.32 and 11.5.6.16.53. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML. Affected components: Text Features in the DHTML UI and the test parameter ...

Oracle Configurator discloses version and host information via "test" argument passed to servlet

Overview A servlet component of Oracle Configurator may post sensitive version and host information to any Web user that makes a crafted request to the server. Description Oracle Configurator is an Internet application used to configure Oracle Application and Database Servers. If a user sends a...

CVE-2002-1639

Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to obtain sensitive information via a request to the oracle.apps.cz.servlet.UiServlet servlet with the test parameter set to "version" or "host"...

CVE-2002-1640

Multiple cross-site scripting XSS vulnerabilities in Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to inject arbitrary web script or HTML via 1 Text Features in the DHTML UI or 2 the test parameter to the oracle.apps.cz.servlet.UiServlet servlet...

CVE-1999-1443

CVE-1999-1443 relates to Micah Software Full Armor Network Configurator and Zero Administration. Local attackers with physical access can bypass desktop protection via (1) initiating CTRL+ALT+DEL and terminating the process with Task Manager, (2) booting from an alternate disk, or (3) interruptin...

CVE-1999-1443

Micah Software Full Armor Network Configurator and Zero Administration allow local users with physical access to bypass the desktop protection by 1 using and kill the process using the task manager, 2 booting the system from a separate disk, or 3 interrupting certain processes that execute while...

CVE-1999-0943

CVE-1999-0943 affects OpenLink 3.2’s Web Configurator. The vulnerability is a buffer overflow triggered by a long GET request, allowing remote attackers to gain privileges. Exploitation is described as network-based with low complexity and no authentication, with potential for remote code executi...

CVE-1999-0060

CVE-1999-0060 affects Ascend MAX and Pipeline routers. A malformed UDP/packet to the discard port (used by the Java Configurator tool) can trigger a denial-of-service, with observed impact described as router crashes/reboots and degraded availability. The issue is documented across multiple sourc...

CVE-1999-0060

Attackers can cause a denial of service in Ascend MAX and Pipeline routers with a malformed packet to the discard port, which is used by the Java Configurator tool...

PT-1998-1018 · Ascend +1 · Ascend Max +2

Name of the Vulnerable Software and Affected Versions: Ascend MAX and Pipeline routers affected versions not specified Description: The issue allows attackers to cause a denial of service with a malformed packet to the discard port, which is used by the Java Configurator tool. Recommendations: At...