6330 matches found
CVE-2006-6184
Multiple stack-based buffer overflows in Allied Telesyn TFTP Server AT-TFTP 1.9, and possibly earlier, allow remote attackers to cause a denial of service crash or execute arbitrary code via a long filename in a 1 GET or 2 PUT command...
CVE-2006-6172
Buffer overflow in the asmrpeval function in the RealMedia RTSP stream handler asmrp.c for Real Media input plugin, as used in 1 xine/xine-lib, 2 MPlayer 1.0rc1 and earlier, and possibly others, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a ruleboo...
CVE-2006-6150
PHP remote file inclusion vulnerability in memory/OWLMemoryProperty.php in OWLLib 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the OWLLIBROOT parameter...
CVE-2006-6140
The CVE-2006-6140 entry describes a PHP remote file inclusion in Sisfo Kampus 2006 (Semarang 3). An attacker can cause arbitrary PHP code execution by supplying a URL in the slnt parameter to index.php or print.php. The vulnerability arises from insufficient validation of user-supplied input used...
CVE-2006-5750
Directory traversal vulnerability in the DeploymentFileRepository class in JBoss Application Server jbossas 3.2.4 through 4.0.5 allows remote authenticated users to read or modify arbitrary files, and possibly execute arbitrary code, via unspecified vectors related to the console manager...
CVE-2006-6121
Acer Notebook LunchApp.APlunch ActiveX control allows remote attackers to execute arbitrary commands by calling the Run method...
CVE-2006-6086
PHP remote file inclusion vulnerability in src/arkinc.php in e-Ark 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the cfgpearpath parameter...
CVE-2006-6026
CVE-2006-6026 : RealNetworks Helix Server/Helix Mobile Server (pre-11.1.3) and Helix DNA Server (11.0 and 11.1) suffer a heap-based buffer overflow via a DESCRIBE request containing an invalid LoadTestPassword field. An unauthenticated, remote attacker could crash the server or execute arbitrary ...
Preemptive Protection against OpenLDAP BIND Denial of Service Vulnerability
A denial of service vulnerability exists in OpenLDAP. OpenLDAP Software is an open source implementation of the Lightweight Directory Access Protocol LDAP. The vulnerability could be exploited by remote attackers to crash the service or execute arbitrary code via a specially crafted LDAP request ...
CVE-2006-5972
Stack-based buffer overflow in WG111v2.SYS in NetGear WG111v2 wireless adapter USB allows remote attackers to execute arbitrary code via a long 802.11 beacon request...
CVE-2006-5836
The fpathconf syscall function in bsd/kern/kerndescrip.c in the Darwin kernel XNU 8.8.1 in Apple Mac OS X allows local users to cause a denial of service kernel panic and possibly execute arbitrary code via a file descriptor with an unrecognized file type...
Microsoft IIS ASP chunked encoding buffer overflow
Added: 11/10/2006 CVE: CVE-2002-0079 BID: 4485 OSVDB: 768 Background Microsoft IIS web servers include ISAPI extensions which are invoked in the server process to handle requests of a given type. Problem A buffer overflow in the ASP ISAPI filter allows remote attackers to execute arbitrary comman...
Microsoft IIS ASP chunked encoding buffer overflow
Added: 11/10/2006 CVE: CVE-2002-0079 BID: 4485 OSVDB: 768 Background Microsoft IIS web servers include ISAPI extensions which are invoked in the server process to handle requests of a given type. Problem A buffer overflow in the ASP ISAPI filter allows remote attackers to execute arbitrary comman...
CVE-2006-5747
Unspecified vulnerability in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 allows remote attackers to execute arbitrary code via the XML.prototype.hasOwnProperty JavaScript function...
CVE-2006-5790
Multiple format string vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 an entry with an attachment whose name contains format string specifiers elsubmit function, and possibly other vectors in...
CVE-2006-4809
Stack-based buffer overflow in loaderpnm.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PNM image...
CVE-2006-5734
The CVE-2006-5734 entry describes multiple PHP remote file inclusion vulnerabilities in ATutor 1.5.3.2, exploitable via untrusted URLs passed to specific parameters (1) section in documentation/common/frame_toc.php and documentation/common/search.php; (2) req_lang in documentation/common/search.p...
CVE-2006-5647
Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11 allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via a malformed CHM file with a large name length in the CHM chunk...
CVE-2006-5634
Multiple PHP remote file inclusion vulnerabilities in phpProfiles 2.1 Beta allow remote attackers to execute arbitrary PHP code via a URL in the 1 reqpath parameter to a body.inc.php and b bodyblog.inc.php in users/include/; or the 2 usrinc parameter in users/include/uploadht.inc.php...