CVE-2009-1205

CVE-2009-1205 is a duplicate of CVE-2007-4475 (per its description). The connected records provide concrete details for CVE-2007-4475: a stack-based buffer overflow in SAP GUI’s EAI WebViewer3D ActiveX control (webviewer3d.dll) before SAP GUI 7.10 Patch Level 9. The vulnerability allows remote co...

CVE-2008-1383

The docert function in ssl-cert.eclass, when used by srccompile or srcinstall on Gentoo Linux, stores the SSL key in a binpkg, which allows local users to extract the key from the binpkg, and causes multiple systems that use this binpkg to have the same SSL key and certificate...

CVE-2007-6705

The WebSphere MQ XA 5.3 before FP13 and 6.0.x before 6.0.2.1 client for Windows, when running in an MTS or a COM+ environment, grants the PROCESSDUPHANDLE privilege to the Everyone group upon connection to a queue manager, which allows local users to duplicate an arbitrary handle and possibly...

CVE-2007-6590

CVE-2007-6590 is rejected/not used; duplicate of CVE-2008-2809; references removed.

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-6120. Reason: This candidate is a duplicate of CVE-2007-6120. Notes: All CVE users should reference CVE-2007-6120 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2007-6440

CVE-2007-6440 is rejected; use CVE-2007-6112 instead.

CVE-2007-4015

CVE-2007-4015 is a duplicate of CVE-2007-0011. The connected records describe Citrix Access Gateway (Citrix Advanced Access Control) web portal behavior that places a session ID in the URL, enabling context-dependent attackers to hijack sessions by reading residual information (referer log, brows...

CVE-2006-1538

The Enova X-Wall ASIC encrypts with a key obtained via Microwire from a serial EEPROM that stores the key in cleartext, which allows local users with physical access to obtain the key by reading and duplicating an EEPROM that is located on a hardware token, or by sniffing the Microwire bus...

[Full-disclosure] [HV-INFO] Enova hardware encryption: false sense of security

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Enova hardware encryption: False sense of security Classification: =============== Level: Informational ID: HEXVIEW200603281 URL: http://www.hexview.com/docs/20060328-1.txt Overview: ========= Enova Technology is a manufacturer of the X-Wall ASIC that...

CVE-2006-0390

CVE-2006-0390 is rejected and not used; refer to CVE-2005-4504.

crypt_blowfish cryptographic problem

Salt generation algorithm has high probability of salt duplication...

CVE-2002-2151

CVE-2002-2151 is a duplicate of CVE-2002-1651. The authoritative entry describes a Cross-site scripting (XSS) vulnerability in Verity Search97 that allows remote attackers to insert arbitrary web content and steal sensitive information from other clients, possibly due to certain error messages fr...

CVE-2004-2404

CVE-2004-2404 is a duplicate of CVE-2004-2347. Connected records show that the affected product is Leif M. Wright Web Blog (versions 1.1 and 1.1.5). The vulnerability is remote command execution via shell metacharacters (e.g., |) in the file parameter of ViewFile requests, indicating improper han...

samba 2.x call_trans2open() exploit

0day is fragile! one day it's your precious, next day its worthless ... anyways i put together this SAMBAExploit class in python which might be interesting for folks since it's reusable in many other stuff ... python cause; write once a heap, stack or fmt string exploit class and the rest is just...

Information leakage via key file duplication during nCipher import

generatekey utility creates temporary PEM file and fails to delete it...

CVE-1999-1056

Technical details about CVE-1999-1056 are not publicly available in the provided documents. Monitor for updates as new information may be released.

CVE-2000-0396

The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read source code for web scripts such as .ASP files...

CVE-2000-0396

The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read source code for web scripts such as .ASP files...

Pacific Software Carello 1.2.1 - File Duplication Source Disclosure

Pacific Software Carello 1.2.1 - File Duplication Source Disclosure source: https://www.securityfocus.com/bid/1245/info A remote user can gain read and write access on a target machine running Carello shopping cart software. First, a user may create a duplicate of a known file in a known director...

Pacific Software Carello 1.2.1 - File Duplication / Source Disclosure

source: https://www.securityfocus.com/bid/1245/info A remote user can gain read and write access on a target machine running Carello shopping cart software. First, a user may create a duplicate of a known file in a known directory on the target host through add.exe in /scripts/Carello. Accessing...