3952 matches found
CVE-2003-0397: Undefined Security Weakness
Buffer overflow in FastTrack FT network code, as used in Kazaa 2.0.2 and possibly other versions and products, allows remote attackers to execute arbitrary code via a packet containing a large list of supernodes, aka "Packet 0' death."...
CVE-2003-0335
rc.M in Slackware 9.0 calls quotacheck with the -M option, which causes the filesystem to be remounted and possibly reset security-relevant mount flags such as nosuid, nodev, and noexec...
CVE-2003-0238
CVE-2003-0238 impacts Mirabilis ICQ Pro 2003a and earlier. The flaw resides in ICQ’s Message Session HTML rendering library used by the ADS/advertising component. By spoofing the ADS server and sending malformed HTML, an attacker can trigger a denial-of-service condition, consuming CPU and freezi...
The SUPER Bug
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 / SAVE DEFCON..HELP GOBBLES..SAVE DEFCON..HELP GOBBLES When GOBBLES say he and he security team are non-profit. He really mean NON-profit. This means GOBBLES and he GOBBLES Security Labs GSL friends do not have much funds. GOBBLES was hoping to receiv...
CVE-2001-1322
The CVE-2001-1322 issue concerns xinetd up to version 2.1.8 (and earlier) running with a default umask of 0, allowing local users to read or modify files created by processes started by xinetd that don’t set a safe umask. Public sources in the connected docs identify this as a local-privilege ris...
CVE-2001-1322: Undefined Security Weakness
xinetd 2.1.8 and earlier runs with a default umask of 0, which could allow local users to read or modify files that are created by an application that runs under xinetd but does not set its own safe umask...
CVE-2001-1262: Undefined Security Weakness
Avaya Argent Office 2.1 compares a user-provided SNMP community string with the correct string only up to the length of the user-provided string, which allows remote attackers to bypass authentication with a 0 length community string...
CVE-2000-0620: Undefined Security Weakness
libX11 X library allows remote attackers to cause a denial of service via a resource mask of 0, which causes libX11 to go into an infinite loop...
CVE-1999-1064: Undefined Security Weakness
Multiple buffer overflows in WindowMaker 0.52 through 0.60.0 allow attackers to cause a denial of service and possibly execute arbitrary commands by executing WindowMaker with a long program name argv0...
IBM AIX 4.3 - usrliblpddigest Local Buffer Overflow
IBM AIX 4.3 - usrliblpddigest Local Buffer Overflow / source: https://www.securityfocus.com/bid/2033/info AIX is a version of the UNIX Operating System distributed by IBM. A vulnerability exists in the operating system which could allow a user an elevation in priviledge. The problem occurs in the...
IBM AIX 4.3 - '/usr/lib/lpd/digest' Local Buffer Overflow
/ source: https://www.securityfocus.com/bid/2033/info AIX is a version of the UNIX Operating System distributed by IBM. A vulnerability exists in the operating system which could allow a user an elevation in priviledge. The problem occurs in the digest binary. It is reported that it is possible t...
CVE-2000-0866: Undefined Security Weakness
Interbase 6 SuperServer for Linux allows an attacker to cause a denial of service via a query containing 0 bytes...
CVE-1999-0675
CVE-1999-0675 : The vulnerability affects Check Point FireWall-1. An attacker can cause a denial of service by sending UDP packets through VPN-1 to port 0 of a host, potentially crashing the remote host or the firewall between the attacker and the target. The available sources describe this DoS c...
CVE-1999-0675
Check Point FireWall-1 can be subjected to a denial of service via UDP packets that are sent through VPN-1 to port 0 of a host...
CVE-1999-0675: Undefined Security Weakness
Check Point FireWall-1 can be subjected to a denial of service via UDP packets that are sent through VPN-1 to port 0 of a host...
CVE-2000-0712: Undefined Security Weakness
Linux Intrusion Detection System LIDS 0.9.7 allows local users to gain root privileges when LIDS is disabled via the security=0 boot option...
[SECURITY] New version of horde and imp released
Package : horde and imp Problem type : remote exploit Debian-specific: no imp as distributed in Debian GNU/Linux 2.2 suffered from insufficient checking of user supplied data: the IMP webmail interface did not check the $from variable which contains the sender address for shell metacharacters. Th...
CVE-1999-0555
CVE-1999-0555 describes a UID 0 issue where a Unix account whose name is not "root" has root privileges. Multiple connected sources corroborate that any non-root-named account can effectively gain full control, exposing complete confidentiality, integrity, and availability impact. Red Hat and PT-...
CVE-2000-0038
CVE-2000-0038 concerns glFtpD (glftpd) software where a default glftpd user account exists with a default password and a UID of 0. The vulnerability is tied to this account’s privileged UID, enabling potential unauthorized access or privilege elevation. The PT-1999-1846 entry notes affected versi...