CVE-2005-0508

CVE-2005-0508 affects Batik’s Squiggle component prior to Batik 1.5.1. The vulnerability allows bypassing certain access controls via features of the Rhino JavaScript engine due to a script security issue. Root cause is tied to Rhino scripting security in Squiggle. Affected software is Batik (Squ...

CVE-2005-0241

The CVE-2005-0241 issue affects Squid 2.5-STABLE7 and earlier, where httpProcessReplyHeader does not properly set the debug context for oversized HTTP reply headers. This can lead to cache poisoning or bypassing access controls based on header size. Connected advisories (e.g., RHSA-2005:060/061) ...

[SECURITY] [DSA 667-1] New squid packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 667-1 [email protected] http://www.debian.org/security/ Martin Schulze February 4th, 2005 http://www.debian.org/security/faq -...

CVE-2004-0533

Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which allows remote authenticated users to delete arbitrary files on the server via a crafted delete request using the InfoView web client...

Cisco IOS ACL Bypass (Bug ID CSCdi36962)

Binary data 2199.prm...

Mandrake Linux Security Advisory : kernel (MDKSA-2004:066)

A number of vulnerabilities were discovered in the Linux kernel that are corrected with this update : Multiple vulnerabilities were found by the Sparse source checker that could allow local users to elevate privileges or gain access to kernel memory CVE-2004-0495. Missing Discretionary Access...

CVE-2004-1933

Citadel/UX 5.00 through 6.14 installs the database directory and files with world-read permissions, which could allow local users to bypass access controls and read unauthorized messages...

SquidGuard 1.x - NULL URL Character Unauthorized Access

SquidGuard 1.x - NULL URL Character Unauthorized Access source: https://www.securityfocus.com/bid/9919/info Reportedly SquidGuard is prone to a remote NULL URL character unauthorized access vulnerability. This issue is due to a failure of the application to properly filter out invalid URIs...

PT-2003-1462 · Apache +1 · Apache Httpd +1

Name of the Vulnerable Software and Affected Versions: PHP affected versions not specified Apache httpd 2.0 Description: The issue allows attackers to bypass intended access restrictions if PHP is running on a server that passes on all methods. This is because PHP treats unknown methods, such as...

Microsoft FrontPage Server Extensions SmartHTML Interpreter Denial Of Service Vulnerability

Description A denial of service vulnerability has been reported in the SmartHTML interpreter component of FrontPage Server Extensions that may be exploited by remote attackers. This issue could be exploited to deny availability of CPU resources on the system, potentially causing a denial of servi...

Microsoft FrontPage Server Extensions Remote Debug Buffer Overrun Vulnerability

Description Microsoft FrontPage Server Extensions are prone to a remotely exploitable buffer overrun vulnerability that is exposed via remote debugging functionality. It is possible to trigger this condition with a chunked-encoded HTTP POST request. This could be exploited to execute arbitrary co...

MTA Open Mail Relaying Allowed (thorough test)

Nessus has detected that the remote SMTP server is insufficiently protected against mail relaying. This issue allows any spammer to use your mail server to send their mail to the world, thus flooding your network bandwidth and possibly getting your mail server blacklisted. C Tenable Network...

FloosieTek FTGatePro 1.2 - WebAdmin Interface Information Disclosure

FloosieTek FTGatePro 1.2 - WebAdmin Interface Information Disclosure source: https://www.securityfocus.com/bid/8578/info A weakness has been reported in the FTGatePro WebAdmin Interface that could allow an unauthorized user to gain sensitive information. The problem is believed to occur due to...

FloosieTek FTGatePro 1.2 - WebAdmin Interface Information Disclosure

source: https://www.securityfocus.com/bid/8578/info A weakness has been reported in the FTGatePro WebAdmin Interface that could allow an unauthorized user to gain sensitive information. The problem is believed to occur due to insufficient access controls put in place by FTGatePro. As a result, an...

Oracle9i Application Server 9.0.2 - MOD_ORADAV Access Control

Oracle9i Application Server 9.0.2 - MODORADAV Access Control source: https://www.securityfocus.com/bid/14274/info The modoradav module for Oracle HTTP Server included in Oracle9i Application Server is prone to a vulnerability. This is related to access controls on the '/davpublic' and '/davportal...

CVE-2002-0943

MetaCart2.sql stores the user database under the web document root without access controls, which allows remote attackers to obtain sensitive information such as passwords and credit card numbers via a direct request for metacart.mdb...

CVE-2002-0943

MetaCart2.sql stores the user database under the web document root without access controls, which allows remote attackers to obtain sensitive information such as passwords and credit card numbers via a direct request for metacart.mdb...

CVE-2002-0943

CVE-2002-0943 describes a vulnerability where MetaCart2.sql stores the user database (metacart.mdb) under the web document root without access controls, enabling remote attackers to obtain sensitive information (passwords, credit card numbers) via direct request. The root cause is lack of access ...

PT-2002-1713

Name of the Vulnerable Software and Affected Versions Zope versions 2.4.0 through 2.5.1 Description The issue allows anonymous users and untrusted code to bypass access restrictions and call arbitrary methods of catalog indexes due to the ZCatalog plug-in index support capability. Recommendations...

CVE-2002-0045

slapd in OpenLDAP 2.0 through 2.0.19 allows local users, and anonymous users before 2.0.8, to conduct a "replace" action on access controls without any values, which causes OpenLDAP to delete non-mandatory attributes that would otherwise be protected by ACLs...