CVE-2016-7832: Exposure of Sensitive Information to an Unauthorized Actor

Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to obtain an arbitrary DBM Cybozu Dezie proprietary format file via unspecified vectors...

PT-2017-9384

Name of the Vulnerable Software and Affected Versions Cybozu Dezie versions 8.0.0 through 8.1.1 Description The issue allows remote attackers to bypass access restrictions, enabling them to delete an arbitrary DBM file. DBM refers to a proprietary format used by Cybozu Dezie. Recommendations For...

JVN#16781735: Multiple access restriction bypass vulnerabilities in Cybozu Dezie

Cybozu Dezie contains multiple access restriction bypass vulnerabilities listed below. Access restriction bypass to download DBM files - CVE-2016-7832 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N| Base Score: 5.3 CVSS v2| AV:N/AC:L/Au:N/C:P/I:N/A:N| Bas...

CVE-2003-1067

Multiple buffer overflows in the 1 dbmopen function, as used in ndbm and dbm, and the 2 dbminit function in Solaris 2.6 through 9 allow local users to gain root privileges via long arguments to Xsun or other programs that use these functions...

CVE-2003-1067: Undefined Security Weakness

Multiple buffer overflows in the 1 dbmopen function, as used in ndbm and dbm, and the 2 dbminit function in Solaris 2.6 through 9 allow local users to gain root privileges via long arguments to Xsun or other programs that use these functions...

ColdFusion on IIS cfm/dbm Diagnostic Error Path Disclosure

It was possible to make the remote web server disclose the physical path to its web root by requesting a MS-DOS device ending in .dbm as in nul.dbm. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script was written by Renaud Deraison Modified by Paul Johnston for Westpoint Ltd to displ...

CVE-2002-0082

CVE-2002-0082 affects mod_ssl and Apache-SSL where memory is not properly initialized during SSL_SESSION serialization (i2d_SSL_SESSION), enabling a remote attacker to trigger a buffer overflow with a large client certificate signed by a trusted CA. This can lead to arbitrary code execution on vu...