9283 matches found
CVE-2003-0051
CVE-2003-0051 affects Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1, where parse_xml.cgi can reveal the server installation’s physical path via a NULL file parameter. The issue enables remote access to sensitive path information and is part of a set of re...
CVE-2003-0050
The parse_xml.cgi component in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 is vulnerable to remote code execution. The root cause is a metacharacter injection flaw that allows remote attackers to execute arbitrary commands, potentially with root privile...
CVE-2003-0055
Buffer overflow in the MP3 broadcasting module of Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via a long filename...
CVE-2003-0050: Undefined Security Weakness
parsexml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via shell metacharacters...
CVE-2003-0053: Undefined Security Weakness
Cross-site scripting XSS vulnerability in parsexml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to insert arbitrary script via the filename parameter, which is inserted into an error message...
CVE-2002-1147: Undefined Security Weakness
The HTTP administration interface for HP Procurve 4000M Switch firmware before C.09.16, with stacking features and remote administration enabled, does not authenticate requests to reset the device, which allows remote attackers to cause a denial of service via a direct request to the devicereset...
CVE-2003-0051: Undefined Security Weakness
parsexml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to obtain the physical path of the server's installation path via a NULL file parameter...
CVE-2003-0054: Undefined Security Weakness
Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute certain code via a request to port 7070 with the script in an argument to the rtsp DESCRIBE method, which is inserted into a log file and executed when the log is viewed usin...
CVE-2004-0190: Undefined Security Weakness
Symantec FireWall/VPN Appliance model 200 records a cleartext password for the password administration page, which may be cached on the administrator's local system or in a proxy, which allows attackers to steal the password and gain privileges...
CVE-2004-0049: Undefined Security Weakness
Helix Universal Server/Proxy 9 and Mobile Server 10 allow remote attackers to cause a denial of service via certain HTTP POST messages to the Administration System port...
CVE-2003-0055: Undefined Security Weakness
Buffer overflow in the MP3 broadcasting module of Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via a long filename...
CVE-2003-0052: Undefined Security Weakness
parsexml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to list arbitrary directories...
CVE-2002-1267: Undefined Security Weakness
Mac OS X 10.2.2 allows remote attackers to cause a denial of service by accessing the CUPS Printing Web Administration utility, aka "CUPS Printing Web Administration is Remotely Accessible."...
CVE-2002-0395: Undefined Security Weakness
The TFTP server for Red-M 1050 Bluetooth Access Point can not be disabled and makes it easier for remote attackers to crack the administration password via brute force methods...
D-Link DI-624/NetworkEverywhere NR041 crossite scripting
Information from DFHCP request is shown on web administration page without filtering...
Axis Network Camera 2.x And Video Server 1-3 - Directory Traversal
Axis Network Camera 2.x And Video Server 1-3 - Directory Traversal source: https://www.securityfocus.com/bid/11011/info A directory-traversal vulnerability in HTTP POST requests. This attack is demonstrated by an anonymous user calling protected administration scripts. This bypasses authenticatio...
Axis Network Camera 2.x And Video Server 1-3 - Directory Traversal
source: https://www.securityfocus.com/bid/11011/info A directory-traversal vulnerability in HTTP POST requests. This attack is demonstrated by an anonymous user calling protected administration scripts. This bypasses authentication checks and gives anonymous users remote adminitration of the...
Axis Network Camera 2.x And Video Server 1-3 - HTTP Authentication Bypass
source: https://www.securityfocus.com/bid/11011/info A hardcoded backdoor administrative-user issue allows remote attackers to administer affected devices. This likely cannot be disabled. This issue is reported to affect: - Axis StorePoint CD E100 CD-ROM Server with firmware version 5.30 ?php...
