CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 11005 | CVE-2004-2579 | Candidate | ACLCHECK module in Novell iChain 2.3 allows attackers to bypass access control rules of an unspecified component via an unspecified attack vector involving a string that contains escape sequences represented with "overlong UTF-8 encoding." | Assigned (20051128) | None (candidate not yet proposed) | View | |
| 11004 | CVE-2004-2578 | Candidate | phpGroupWare before 0.9.16.002 transmits the (1) header admin and (2) setup passwords in plaintext via cookies, which allows remote attackers to sniff passwords. | Assigned (20051128) | None (candidate not yet proposed) | View | |
| 11003 | CVE-2004-2577 | Candidate | The acl_check function in phpGroupWare 0.9.16RC2 always returns True, even when mkdir does not behave as expected, which could allow remote attackers to obtain sensitive information via WebDAV from users" home directories that lack .htaccess files, and possibly has other unknown impacts. | Assigned (20051128) | None (candidate not yet proposed) | View | |
| 11002 | CVE-2004-2576 | Candidate | class.vfs_dav.inc.php in phpGroupWare 0.9.16.000 does not create .htaccess files to enable authorization checks for access to users" home-directory files, which allows remote attackers to obtain sensitive information from these files. | Assigned (20051128) | None (candidate not yet proposed) | View | |
| 11001 | CVE-2004-2575 | Candidate | phpGroupWare 0.9.14.005 and earlier allow remote attackers to obtain sensitive information via a direct request to (1) hook_admin.inc.php, (2) hook_home.inc.php, (3) class.holidaycalc.inc.php, and (4) setup.inc.php.sample, which reveals the path in an error message. | Assigned (20051128) | None (candidate not yet proposed) | View |
Page 18743 of 20943, showing 5 records out of 104715 total, starting on record 93711, ending on 93715
