Searching sp2 software vulnerabilities

Check Point VPN-1/FireWall-1 4.1 SP2 with Fastm

VPN-1/FireWall-1 | restrictions | fragmented | malformed | attackers | Fastmode | packets | enabled | access | bypass | allows | remote | Point | Check | via | SP2 |

Check Point VPN-1/FireWall-1 4.1 SP2 with Fastmode enabled allows remote attackers to bypass access restrictions via malformed, fragmented packets.


Novell Groupwise 5.5 (sp1 and sp2) allows a rem

Groupwise | Novell |

Novell Groupwise 5.5 (sp1 and sp2) allows a remote user to access arbitrary files via an implementation error in Groupwise system policies.


Unknown vulnerability in ColdFusion Server 2.0

vulnerability | ColdFusion | through | Unknown | Server |

Unknown vulnerability in ColdFusion Server 2.0 through 4.5.1 SP2 allows remote attackers to overwrite templates with zero byte files via unknown attack vectors.


Microsoft SQL Server 2000 SP2, when configured

Microsoft | Server | SQL |

Microsoft SQL Server 2000 SP2, when configured as a distributor, allows attackers to execute arbitrary code via the @scriptfile parameter to the sp_MScopyscript stored procedure.


The kernel of Microsoft Windows 2000, Windows X

Microsoft | Windows | kernel |

The kernel of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via certain access requests.


The Mini FTP server in Novell iChain 2.2 and 2.

unauthenticated | attackers | earlier | command | obtain | allows | remote | Novell | server | iChain | full | path | Mini | PWD | via | SP2 | FTP |

The Mini FTP server in Novell iChain 2.2 and 2.3 SP2 and earlier allows remote unauthenticated attackers to obtain the full path of the server via the PWD command.


The xvesa code in Novell Netware 6.5 SP2 and SP

GUIMirror/Start | authentication | attackers | redirect | xsession | Netware | without | request | allows | direct | remote | Novell | xvesa | code | SP2 | SP3 | via |

The xvesa code in Novell Netware 6.5 SP2 and SP3 allows remote attackers to redirect the xsession without authentication via a direct request to GUIMirror/Start.


Mercur Messaging 2005 SP2 allows remote attacke

Messaging | Mercur |

Mercur Messaging 2005 SP2 allows remote attackers to read the source code of .ctml files via a URL with a trailing hex-encoded space ("%20").


BEA WebLogic Server and WebLogic Express 8.1 SP

connection | security | WebLogic | "shrink | Monitor | Express | allows | Server | pools" | reset | users | JDBC | role | BEA | SP2 | SP3 |

BEA WebLogic Server and WebLogic Express 8.1 SP2 and SP3 allows users with the Monitor security role to "shrink or reset JDBC connection pools."


Cross-site scripting (XSS) vulnerability in sho

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in showerr.asp in DVBBS 7.1 SP2 allows remote attackers to inject arbitrary web script or HTML via the action parameter.


explorer.exe in Windows Explorer 6.00.2900.2180

explorerexe | Explorer | Windows |

explorer.exe in Windows Explorer 6.00.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service via a crafted WMV file.


Microsoft Internet Explorer 6 SP1 on Windows 20

Microsoft | Explorer | Internet | Windows | SP1 |

Microsoft Internet Explorer 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; and 7 on Windows Vista allows remote attackers to execute arbitrary code via certain property methods that may trigger memory corruption, aka "Property Memory Corruption Vulnerability."


Unspecified vulnerability in Microsoft Agent (m

vulnerability | Unspecified | Microsoft | Agent |

Unspecified vulnerability in Microsoft Agent (msagent\agentsvr.exe) in Windows 2000 SP4, XP SP2, and Server 2003, 2003 SP1, and 2003 SP2 allows remote attackers to execute arbitrary code via crafted URLs, which result in memory corruption.


Buffer overflow in the Graphics Device Interfac

Interface | Graphics | overflow | Buffer | Device |

Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4; XP SP2; Server 2003 Gold, SP1, and SP2; and Vista allows local users to gain privileges via a crafted Enhanced Metafile (EMF) image format file.


Buffer overflow in the Graphics Device Interfac

Interface | Graphics | overflow | Buffer | Device |

Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4; XP SP2; Server 2003 Gold, SP1, and SP2; and Vista allows local users to gain privileges via certain "color-related parameters" in crafted images.


Unspecified vulnerability in Kodak Image Viewer

vulnerability | Unspecified | Microsoft | Windows | Viewer | Kodak | Image |

Unspecified vulnerability in Kodak Image Viewer in Microsoft Windows 2000 SP4, and in some cases XP SP2 and Server 2003 SP1 and SP2, allows remote attackers to execute arbitrary code via crafted image files that trigger memory corruption.


Unspecified vulnerability in the Windows Schann

vulnerability | Unspecified | Microsoft | Security | Schannel | Windows | Package |

Unspecified vulnerability in the Windows Schannel Security Package for Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, allows remote servers to execute arbitrary code or cause a denial of service via crafted digital signatures that are processed during an SSL handshake.


Unspecified vulnerability in the Win32 API on M

vulnerability | Unspecified | Microsoft | Windows | Win32 | API |

Unspecified vulnerability in the Win32 API on Microsoft Windows 2000, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via certain parameters to an unspecified function.


Object linking and embedding (OLE) Automation,

embedding | linking | Object |

Object linking and embedding (OLE) Automation, as used in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Office 2004 for Mac, and Visual Basic 6.0 allows remote attackers to execute arbitrary code via the substringData method on a TextNode object, which causes an integer overflow that leads to a buffer overflow.


rpcrt4.dll (aka the RPC runtime library) in Mic

rpcrt4dll |

rpcrt4.dll (aka the RPC runtime library) in Microsoft Windows XP SP2, XP Professional x64 Edition, Server 2003 SP1 and SP2, Server 2003 x64 Edition and x64 Edition SP2, and Vista and Vista x64 Edition allows remote attackers to cause a denial of service (RPCSS service stop and system restart) via an RPC request that uses NTLMSSP PACKET authentication with a zero-valued verification trailer signature, which triggers an invalid dereference. NOTE: this also affects Windows 2000 SP4, although the impact is an information leak.


Software vulnerabilities results 1 to 20 of 245     
Page: 12345...13►