1431 matches found
CVE-2006-1344
Cross-site scripting XSS vulnerability in VeriSign haydn.exe, as used in Managed PKI MPKI 6.0, allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the VHTMLFILE parameter...
CVE-2006-1344: Undefined Security Weakness
Cross-site scripting XSS vulnerability in VeriSign haydn.exe, as used in Managed PKI MPKI 6.0, allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the VHTMLFILE parameter...
Multipl NCP Secure Communications VPN / PKI client security vulnerabilities
Local buffer overflows and privilege escalations, remote DoS...
CVE-2003-1005
CVE-2003-1005 affects Mac OS X 10.2.8 and 10.3.2 PKI functionality. The vulnerability allows remote attackers to cause a denial of service (service crash) by sending malformed ASN.1 sequences. Exploitation is indicated as network-based with low complexity and no authentication required, resulting...
CVE-2003-1005
The PKI functionality in Mac OS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service service crash via malformed ASN.1 sequences...
CVE-2003-1005: Undefined Security Weakness
The PKI functionality in Mac OS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service service crash via malformed ASN.1 sequences...
Cain & Abel sniffer buffer overflow
Heap buffer overflow on oversized PKI ID parameter...
Firewall-1 usernames detection
PKI aggressive mode replies are different for existing and non-existing usernames...
CVE-2000-0741
CVE-2000-0741 refers to a format-string vulnerability in the NAI Net Tools PKI Server’s web server component (strong.exe), version 1.0 before HotFix 3. The issue occurs when user-supplied data is passed to the server’s logging routines via a URL (notably with a .XUDA extension), enabling remote c...
CVE-2000-0740
Buffer overflow in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary commands via a long URL in the HTTPS port...
CVE-2000-0739
CVE-2000-0739 concerns the NAI Net Tools PKI Server 1.0. The vulnerability is a directory traversal in the strong.exe web server component that processes enrollment HTTPS requests, allowing a remote attacker to read arbitrary files via a .. path. The issue is present before HotFix 3. This is a re...
CVE-2000-0740: Undefined Security Weakness
Buffer overflow in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary commands via a long URL in the HTTPS port...
CVE-2000-0741: Undefined Security Weakness
Format string vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary code via format strings in a URL with a .XUDA extension...
CVE-2000-0739: Undefined Security Weakness
Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to read arbitrary files via a .. dot dot attack in an HTTPS request to the enrollment server...
CVE-2000-0529
Net Tools PKI Server allows remote attackers to cause a denial of service via a long HTTP request...
CVE-2000-0529
CVE-2000-0529 affects Net Tools PKI Server. The vulnerability permits remote denial-of-service via an excessively long HTTP request. The provided documents do not specify the exact root cause, affected versions, or remediation steps. Exploitation status or in-the-wild details are not stated in th...
CVE-2000-0528
The CVE-2000-0528 entry concerns the Net Tools PKI Server. The issue is that when XUDA template files do not contain absolute pathnames for other files, access is not properly restricted, potentially allowing remote attackers to access restricted resources. The provided documents do not include e...
CVE-2000-0528
Net Tools PKI Server does not properly restrict access to remote attackers when the XUDA template files do not contain absolute pathnames for other files...
CVE-2000-0528: Undefined Security Weakness
Net Tools PKI Server does not properly restrict access to remote attackers when the XUDA template files do not contain absolute pathnames for other files...