Crlf injection

Multiple CRLF injection vulnerabilities in the Universal Access component in IBM Curam Social Program Management SPM 6.0.5.5, when WebSphere Application Server is not used, allow remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecifie...

Microsoft Windows Data Access Component DLL Loading Arbitrary Code Execution Vulnerability

Description Microsoft Windows is prone to an arbitrary-code-execution vulnerability that affects the Data Access Component. Attackers can exploit this vulnerability to execute arbitrary code in the context of the user running the vulnerable application. Technologies Affected Avaya Aura Conferenci...

Design/Logic Flaw

Unspecified vulnerability in the COREid Access component in Oracle Application Server 7.0.4.4 has unknown impact and attack vectors, aka AS02...

CVE-2007-2121

Unspecified vulnerability in the COREid Access component in Oracle Application Server 7.0.4.4 has unknown impact and attack vectors, aka AS02...

MS06-014: Vulnerability in MDAC Could Allow Code Execution (911562)

The remote Microsoft Data Access Component MDAC server is vulnerable to a flaw that could allow a local administrator to elevate his privileges to the 'system' level, thus gaining the complete control over the remote system. Tenable Network Security, Inc. include"compat.inc"; if description...

MS02-040 / MS03-033: Unchecked buffer in MDAC Function (326573 / 823718)

The remote Microsoft Data Access Component MDAC server is vulnerable to a flaw that could allow an attacker to execute arbitrary code on this host, provided he can load and execute a database query on this server. C Tenable Network Security, Inc. MS03-033 supercedes MS02-040 Note: The fix for thi...

CVE-2001-1254

Web Access component for COM2001 Alexis 2.0 and 2.1 in InternetPBX sends username and voice mail passwords in the clear via a Java applet that sends the information to port 8888 of the server, which could allow remote attackers to steal the passwords via sniffing...

CVE-2001-1254

The CVE-2001-1254 entry describes a vulnerability in the Web Access component for COM2001 Alexis 2.0/2.1 in InternetPBX where username and voice mail passwords are transmitted in the clear via a Java applet that communicates to port 8888 on the server, allowing remote attackers to sniff credentia...

CVE-2001-1254

Web Access component for COM2001 Alexis 2.0 and 2.1 in InternetPBX sends username and voice mail passwords in the clear via a Java applet that sends the information to port 8888 of the server, which could allow remote attackers to steal the passwords via sniffing...

CVE-2001-0238

Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV requests...

EUVD-2001-0238

Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV requests...

CVE-2001-0238

Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV requests...

Security Bulletin MS01-022

---------------------------------------------------------------------- Title: WebDAV Service Provider Can Allow Scripts to Levy Requests as User Date: 18 April 2001 Software: Microsoft Data Access Component Internet Publishing Provider Impact: Web-based script could levy WebDAV requests on the...

Q329414: Security Update (MDAC 2.6)

This security update applies to a component of Windows known as the Microsoft Data Access Component MDAC. Please install now to help protect your Windows-based computer. For more information, read the associated Microsoft Security Bulletin at http://www.microsoft.com/security...

Q329414: Security Update (MDAC 2.5)

This security update applies to a component of Windows known as the Microsoft Data Access Component MDAC. Please install now to help protect your Windows-based computer. For more information, read the associated Microsoft Security Bulletin at http://www.microsoft.com/security...