Skip to content
OpenAdvisories

Archive

17 October 2007

Vulnerabilities first published on this day (UTC), newest first.

52 results · Feed

  • Unscored —

    The escape_dangerous_chars function in CGI::Lite 2.0 and earlier does not correctly remove special characters including…

  • Unscored —
    CVE-2003-1366 Public exploit

    chpass in OpenBSD 2.0 through 3.2 allows local users to read portions of arbitrary files via a hard link attack on a te…

  • Unscored —

    Unknown vulnerability in VERITAS Bare Metal Restore (BMR) of Tivoli Storage Manager (TSM) 3.1.0 through 3.2.1 allows re…

  • Unscored —

    Buffer overflow in the setupterm function of (1) lanadmin and (2) landiag programs of HP-UX 10.0 through 10.34 allows l…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Nuked-Klan 1.2b allow remote attackers to inject arbitrary HTML …

  • Unscored —
    CVE-2003-1358 Public exploit

    rs.F300 for HP-UX 10.0 through 11.22 uses the PATH environment variable to find and execute programs such as rm while o…

  • Unscored —
    CVE-2003-1359 Public exploit

    Buffer overflow in stmkfont utility of HP-UX 10.0 through 11.22 allows local users to gain privileges via a long comman…

  • Unscored —
    CVE-2003-1369 Public exploit

    Buffer overflow in ByteCatcher FTP client 1.04b allows remote attackers to cause a denial of service (crash) and possib…

  • Unscored —

    Directory traversal vulnerability in auth.php for PhpBB 1.4.0 through 1.4.4 allows remote attackers to read and include…

  • Unscored —

    Bastille B.02.00.00 of HP-UX 11.00 and 11.11 does not properly configure the (1) NOVRFY and (2) NOEXPN options in the s…

  • Unscored —
    CVE-2003-1368 Public exploit

    Buffer overflow in the 32bit FTP client 9.49.1 allows remote attackers to cause a denial of service (crash) and possibl…

  • Unscored —
    CVE-2003-1364 Public exploit

    Aprelium Technologies Abyss Web Server 1.1.2, and possibly other versions before 1.1.4, allows remote attackers to caus…