174 matches found
Debian DSA-102-2 : at - daemon exploit
zen-parse found a bug in the current implementation of at which leads into a heap corruption vulnerability which in turn could potentially lead into an exploit of the daemon user. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
OpenCA crypto-utils.lib libCheckSignature Function Signature Validation Weakness
The remote host seems to be running an older version of OpenCA. It is reported that OpenCA versions up to and incluing 0.9.1.6 contains a flaw that may lead an attacker to bypass signature verification of a certificate. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2003-0004
The CVE describes a buffer overflow in the Windows XP Redirector (RPC redirector) due to an unchecked/length parameter handling in the Windows Redirector service. Affected software: Microsoft Windows XP (XP Redirector/SMB Redirector). Root cause: unchecked length in received parameter information...
CVE-2004-0004
Affects OpenCA : OpenCA 0.9.1.6 and earlier use crypto-utils.lib’s libCheckSignature, which compares only the certificate serial to the database entry. This can allow a signature to be accepted if the signer's certificate chain is trusted by OpenCA’s chain directory, enabling an attacker to spoof...
CVE-2003-0004
Buffer overflow in the Windows Redirector function in Microsoft Windows XP allows local users to execute arbitrary code via a long parameter...
Mandrake Linux Security Advisory : at (MDKSA-2002:007)
zen-parse discovered a problem in the at command containing an extra call to free which can lead to a segfault with a carefully crafted, but incorrect, format. This is caused due to a heap corruption that can be exploited under certain circumstances because the at command is installed setuid root...
CVE-2003-0004
Buffer overflow in the Windows Redirector function in Microsoft Windows XP allows local users to execute arbitrary code via a long parameter...
MS03-005: Unchecked Buffer in XP Redirector (810577)
The remote version of Windows contains a buffer overflow in the Windows Redirector service that could allow an attacker to execute arbitrary code on the remote host with SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11231; scriptversion"1.37";...
CVE-2002-0004
CVE-2002-0004 describes a heap corruption vulnerability in the “at” utility caused by a double-free during execution time handling, enabling a local user to potentially execute arbitrary code. The issue is evidenced in multiple advisories (e.g., Debian DSA 102-1/102-2) noting that the remote host...
CVE-2001-0004
This CVE concerns IIS 4.0/5.0 where an attacker can cause the server to disclose file contents by sending a crafted GET request that appends %3F+.htr, causing the target file to be parsed as an .HTR ISAPI extension. Impact: unauthenticated remote disclosure of potentially sensitive files within t...
CVE-2000-0004
ZBServer Pro (CVE-2000-0004) exposes a partial confidentiality impact by allowing remote attackers to read source code of executable files when a dot is inserted into the URL. This is a network-accessible issue with low attack complexity and no authentication required, aligning with a CVSS v2 bas...
CVE-1999-0004
CVE-1999-0004 describes a MIME buffer overflow in email clients, notably Solaris mailtool and Outlook. The vulnerability is triggered by MIME handling issues that overflow buffers, leading to a potential denial of service or instability (per CVSS data indicating network attack vector, no authenti...