| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2009-4653 | 9.0 | Stack-based buffer overflow in the dhost module in Novell eDirectory 8.8 SP5 for Windows allows remote authenticated users to cause a denial of service (dhost.exe crash) and possibly execute arbitrary code via a long string to /dhost/modules?I:. | 2018-10-10 19:49:00 | 2010-02-26 18:30:00 |
| CVE-2009-4496 | 5.0 | Boa 0.94.14rc21 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape | 2018-10-10 19:49:00 | 2010-01-13 20:30:00 |
| CVE-2009-4495 | 5.0 | Yaws 1.85 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequen | 2018-10-10 19:49:00 | 2010-01-13 20:30:00 |
| CVE-2009-4494 | 5.0 | AOLserver 4.5.1 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape | 2018-10-10 19:49:00 | 2010-01-13 20:30:00 |
| CVE-2009-4493 | 5.0 | Orion Application Server 2.0.7 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request contai | 2018-10-10 19:49:00 | 2010-01-13 20:30:00 |
| CVE-2009-4490 | 5.0 | mini_httpd 1.19 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape | 2018-10-10 19:49:00 | 2010-01-13 20:30:00 |
| CVE-2009-4489 | 5.0 | header.c in Cherokee before 0.99.32 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request c | 2018-10-10 19:49:00 | 2010-01-13 20:30:00 |
| CVE-2009-4607 | 7.2 | The command line interface in Overland Storage Snap Server 410 with GuardianOS 5.1.041 runs the "less" utility with a higher-privileged uid than the CLI user and without sufficient restriction on shell escapes, which allows local users to gain privil | 2018-10-10 19:49:00 | 2010-01-13 11:30:00 |
| CVE-2009-4606 | 7.2 | South River Technologies WebDrive 9.02 build 2232 installs the WebDrive Service without a security descriptor, which allows local users to (1) stop the service via the stop command, (2) execute arbitrary commands as SYSTEM by using the config command | 2018-10-10 19:49:00 | 2010-01-13 11:30:00 |
| CVE-2009-4587 | 5.0 | Cherokee Web Server 0.5.4 allows remote attackers to cause a denial of service (daemon crash) via an MS-DOS reserved word in a URI, as demonstrated by the AUX reserved word. | 2018-10-10 19:49:00 | 2010-01-07 18:30:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: