72 matches found
CVE-2012-5589
The MultiLink module 6.x-2.x before 6.x-2.7 and 7.x-2.x before 7.x-2.7 for Drupal does not properly check node permissions when generating an in-content link, which allows remote authenticated users with text-editing permissions to read arbitrary node titles via a generated link...
Code injection
The MultiLink module 6.x-2.x before 6.x-2.7 and 7.x-2.x before 7.x-2.7 for Drupal does not properly check node permissions when generating an in-content link, which allows remote authenticated users with text-editing permissions to read arbitrary node titles via a generated link...
CVE-2012-5589
The MultiLink module 6.x-2.x before 6.x-2.7 and 7.x-2.x before 7.x-2.7 for Drupal does not properly check node permissions when generating an in-content link, which allows remote authenticated users with text-editing permissions to read arbitrary node titles via a generated link...
CVE-2012-5589
The CVE-2012-5589 entry concerns the Drupal MultiLink module (versions 6.x-2.x before 6.x-2.7 and 7.x-2.x before 7.x-2.7) which does not properly enforce node-access checks when generating in-content links. This allows remote authenticated users with text-editing permissions to read arbitrary nod...
CVE-2012-5589: Exposure of Sensitive Information to an Unauthorized Actor
The MultiLink module 6.x-2.x before 6.x-2.7 and 7.x-2.x before 7.x-2.7 for Drupal does not properly check node permissions when generating an in-content link, which allows remote authenticated users with text-editing permissions to read arbitrary node titles via a generated link...
SA-CONTRIB-2012-170 - MultiLink - Access Bypass
MultiLink allows you to generate in-content links to a suitable node or node translation based on the visitor's language preferences. It allows the Node Title of the target node to be shown as the visible text and title attribute for the generated link. Prior to versions 6.x-2.7 and 7.x-2.7 the...
Cisco Security Advisory: IOS Stack Group Bidding Protocol Crafted Packet DoS
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: IOS Stack Group Bidding Protocol Crafted Packet DoS Document ID: 68793 Advisory ID: cisco-sa-20060118-sgbp http://www.cisco.com/warp/public/707/cisco-sa-20060118-sgbp.shtml Revision 1.0 ============ For Public Release 2006...
CVE-1999-1203
CVE-1999-1203 affects Ascend systems using Multilink PPP for ISDN dialup prior to version 4.6. The vulnerability arises from a spoofed endpoint identifier, enabling remote attackers to cause a denial of service (availability impact). The provided documents do not specify a fix or mitigation. No e...
CVE-1999-1203
Multilink PPP for ISDN dialup users in Ascend before 4.6 allows remote attackers to cause a denial of service via a spoofed endpoint identifier...
CVE-1999-1203: Undefined Security Weakness
Multilink PPP for ISDN dialup users in Ascend before 4.6 allows remote attackers to cause a denial of service via a spoofed endpoint identifier...
ascend.multilink.ppp.txt
Date: Wed, 10 Feb 1999 15:08:50 -0800 From: David Schwartz To: [email protected] Subject: Security problems in ISDN equipment authentication A security flaw is probably still present in Ascend's multilink PPP implementation over ISDN. Due to its fundamental nature, it's probably in other ISDN...