5623 matches found
CVE-2001-1575
CVE-2001-1575 affects Apple Personal Web Sharing (PWS) versions 1.1, 1.5, and 1.5.5. When Web Sharing authentication is enabled, a remote attacker can cause a Denial of Service by sending a long password, possibly due to a buffer overflow. The connected documents confirm the affected product/vers...
CVE-2001-1549
Tiny Personal Firewall 1.0 and 2.0 allows local users to bypass filtering via non-standard TCP packets created with non-Windows protocol adapters...
CVE-2001-1520
Xircom REX 6000 allows local users to obtain the 10 digit PIN by starting a serial monitor, connecting to the personal digital assistant PDA via Rextools, and capturing the cleartext PIN...
CVE-2001-1549
The CVE-2001-1549 entry affects Tiny Personal Firewall versions 1.0 and 2.0. The vulnerability permits local users to bypass filtering by sending non-standard TCP packets created with non-Windows protocol adapters, indicating a local-privilege or local-bypass risk depending on the deployment. The...
CVE-2002-1925
CVE-2002-1925 affects Tiny Personal Firewall versions 3.0 through 3.0.6. The vulnerability arises when an administrator views the Log tab in the Personal Firewall Agent module, enabling remote attackers to cause a denial of service (crash) by sending SYN, UDP, ICMP, or TCP port scans. The availab...
CVE-2002-1779
The "block fragmented IP Packets" option in Symantec Norton Personal Firewall 2002 NPW does not properly protect against certain attacks on Windows vulnerabilities such as jolt2 CVE-2000-0305...
CVE-2002-1685
CVE-2002-1685 : BadBlue Enterprise Edition and Personal Edition versions 1.7 and 1.7.2 are affected by a cross-site scripting (XSS) vulnerability in the ext.dll ISAPI. The flaw enables an attacker to execute arbitrary script in the context of other users by injecting script via the ext.dll ISAPI ...
CVE-2002-1684
Directory traversal vulnerability in 1 Deerfield D2Gfx 1.0.2 or 2 BadBlue Enterprise Edition 1.5.x and BadBlue Personal Edition 1.5.6 allows remote attackers to read arbitrary files via a ../ dot dot slash in the script used to read Microsoft Office documents...
CVE-2002-1779
The CVE-2002-1779 entry concerns Symantec Norton Personal Firewall 2002 (NPW) with the option “block fragmented IP Packets.” The accompanying description states this feature does not properly protect against certain Windows-based attacks such as jolt2 (CVE-2000-0305). Connected records corroborat...
CVE-2002-1778
CVE-2002-1778 affects Symantec Norton Personal Firewall 2002. The vulnerability allows remote attackers to bypass the portscan protection by using crafted scans: SYN/FIN, SYN/FIN/URG, SYN/FIN/PUSH, or SYN/FIN/URG/PUSH. The connected records reiterate this bypass but do not provide the exact root ...
CVE-2002-1778
Symantec Norton Personal Firewall 2002 allows remote attackers to bypass the portscan protection by using a 1 SYN/FIN, 2 SYN/FIN/URG, 3 SYN/FIN/PUSH, or 4 SYN/FIN/URG/PUSH scan...
CVE-2002-1683
CVE-2002-1683 is an XSS vulnerability in BadBlue Personal Edition 1.7.3 where an attacker can remotely inject a script via the cleanSearchString() function, causing the script to run in other users’ contexts. The connected sources confirm the vulnerability details but do not provide exploitation ...
CVE-2005-1661
Affected software: Jeuce Personal Webserver 2.13. Vulnerability: remote attackers can cause a denial-of-service (server crash) via a long GET request, possibly triggering a buffer overflow. This is the root cause described across connected documents. Impact: DoS with server instability; no detail...
CVE-2005-1663
Technical details for CVE-2005-1663 are not publicly available in the provided documents; no affected version, root cause, or remediation information is shown. Monitor for updates.
CVE-2005-1661
Jeuce Personal Webserver 2.13 allows remote attackers to cause a denial of service server crash via a long GET request, possibly triggering a buffer overflow...
CVE-2005-1663
Jeuce Personal Web Server 2.13 allows remote attackers to cause a denial of service server crash via a GET request beginning with "://"...
CVE-2005-1661
Jeuce Personal Webserver 2.13 allows remote attackers to cause a denial of service server crash via a long GET request, possibly triggering a buffer overflow...
CVE-2005-1662
CVE-2005-1662 is a directory traversal vulnerability in Jeuce Personal Web Server 2.13 that allows remote attackers to read arbitrary files via a .. in the URL. The connected documents confirm the affected product/version and the traversal vector; no exploitation specifics or remediation steps ar...