5060 matches found
DEBIAN-CVE-2007-3372
The Avahi daemon in Avahi before 0.6.20 allows attackers to cause a denial of service exit via empty TXT data over D-Bus, which triggers an assert error...
CVE-2007-3193
lib/WikiUser/LDAP.php in PhpWiki before 1.3.13p1, when the configuration lacks a nonzero PASSWORDLENGTHMINIMUM, might allow remote attackers to bypass authentication via an empty password, which causes ldapbind to return true when used with certain LDAP implementations...
Authentication flaw
lib/WikiUser/LDAP.php in PhpWiki before 1.3.13p1, when the configuration lacks a nonzero PASSWORDLENGTHMINIMUM, might allow remote attackers to bypass authentication via an empty password, which causes ldapbind to return true when used with certain LDAP implementations...
CVE-2007-3193
lib/WikiUser/LDAP.php in PhpWiki before 1.3.13p1, when the configuration lacks a nonzero PASSWORDLENGTHMINIMUM, might allow remote attackers to bypass authentication via an empty password, which causes ldapbind to return true when used with certain LDAP implementations...
CVE-2007-3151
rpttop.htm in the web management interface in Packeteer PacketShaper 7.3.0g2 and 7.5.0g1 allows remote attackers to cause a denial of service device reboot via a request with empty values of the OP.MEAS.DATAQUERY and MEAS.TYPE parameters...
PT-2007-4039 · Mpc Hc Team · Media Player Classic
Name of the Vulnerable Software and Affected Versions: Media Player Classic version 6.4.9.0 Description: The issue allows remote attackers to cause a denial of service, resulting in a web browser crash, by utilizing an "empty" .MPA file. This triggers a divide-by-zero error. Recommendations: For...
PulseAudio sound server DoS
Multiple invalid assertusage, e.g. on empty request...
CVE-2007-1888
Buffer overflow in the sqlitedecodebinary function in src/encode.c in SQLite 2, as used by PHP 4.x through 5.x and other applications, allows context-dependent attackers to execute arbitrary code via an empty value of the in parameter. NOTE: some PHP installations use a bundled version of sqlite...
CVE-2007-1170
SimBin GTR - FIA GT Racing Game 1.5.0.0 and earlier, GT Legends 1.1.0.0 and earlier, GTR 2 1.1 and earlier, and RACE - The WTCC Game 1.0 and earlier allow remote attackers to cause a denial of service client disconnection via an empty UDP packet to the server port...
CVE-2007-1170
SimBin GTR - FIA GT Racing Game 1.5.0.0 and earlier, GT Legends 1.1.0.0 and earlier, GTR 2 1.1 and earlier, and RACE - The WTCC Game 1.0 and earlier allow remote attackers to cause a denial of service client disconnection via an empty UDP packet to the server port...
Design/Logic Flaw
Unspecified vulnerability in certain demonstration scripts in getID3 1.7.1, as used in the Mediafield and Audio modules for Drupal, allows remote attackers to read and delete arbitrary files, list arbitrary directories, and write to empty files or .mp3 files via unknown vectors...
PT-2007-2255 · Microsoft · Windows 2000 +2
Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer version 6.0 SP1 on Windows 2000 Microsoft Internet Explorer version 6.0 SP2 on Windows XP Description: The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and...
The system security of the empty password to enter the WINDOWS2000-vulnerability warning-the black bar safety net
WINDOWS200 where winnt\System32\Config under the SAM file that account password database file, it save the WINDOWS2000 of all the username and password when you log in, the system will put the username and password you enter with the SAM file in the encrypted data proofreading, and if they...
CVE-2006-6262
Directory traversal vulnerability in mboard.php in PHPJunkYard aka Klemen Stirn MBoard 1.22 and earlier allows remote attackers to create arbitrary empty files via a .. dot dot in the origid parameter...
CVE-2006-6239
webadmin in MailEnable NetWebAdmin Professional 2.32 and Enterprise 2.32 allows remote attackers to authenticate using an empty password...
PT-2006-6440 · Rhadrix · Rhadrix If-Cms
Name of the Vulnerable Software and Affected Versions: Rhadrix If-CMS versions 1.01 through 2.07 Description: The issue allows remote attackers to obtain the full path of the web server. This is achieved by providing empty arguments, specifically rns or pag, which results in an error message that...
Heart empty Forum(CKong) v2. 5 SQL injection vulnerability-vulnerability warning-the black bar safety net
Program: heart empty ForumCKong Version:=2.5 Type: sql injection Vulnerability analysis 1, The post.php | ? requireonce"include/config.inc.php"; requireonce'include/functions.inc.php'; $fid=intval$fid; $tid=intval$tid; $pid=intval$pid; ......... if!$ Cerrormsg if$postid $sql='select...
Low: Red Hat Bug Fix Advisory: conga bug fix update
Updated conga packages that provide critical bug fixes are now available. The Conga package is a web-based administration tool for remote cluster and storage management. This erratum applies the following bug fixes: - The borrowed Zope packages used by Conga have been patched to eliminate a...
PT-2006-4420 · Microsoft · Internet Explorer
Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer version 7.0 Beta Description: The issue allows remote attackers to cause a denial of service, resulting in an application crash, via a web page containing multiple empty APPLET start tags. A third party has dispute...