189 matches found
CVE-2003-0013
CVE-2003-0013 concerns Bugzilla’s default .htaccess behavior. The bug is that backups of localconfig created by editors (e.g., vi, Emacs; often .swp or ~ files) were not blocked by the default .htaccess, potentially allowing remote attackers to download a backup and obtain the database password. ...
CVE-2003-0013
The default .htaccess scripts for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x before 2.17.3 do not include filenames for backup copies of the localconfig file that are made from editors such as vi and Emacs, which could allow remote attackers to obtain a database password by...
CVE-2002-0013
CVE-2002-0013 concerns numerous SNMPv1 implementation flaws that allow remote DoS or privilege escalation via SNMP GetRequest, GetNextRequest, and SetRequest messages, demonstrated by the PROTOS c06-SNMPv1 test suite. The vulnerability is described across multiple advisories and vendors (e.g., AR...
CVE-2002-0013
Vulnerabilities in the SNMPv1 request handling of a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via 1 GetRequest, 2 GetNextRequest, and 3 SetRequest messages, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly...
CVE-2001-0013
CVE-2001-0013 describes a format-string vulnerability in the nslookupComplain() routine of ISC BIND 4. This flaw allows remote attackers to execute code with the BIND process’ privileges (typically root) by sending specially crafted DNS input. The CERT/CC note (CA-2001-02) identifies vulnerable v...
CVE-2000-0013
IRIX soundplayer vulnerability (CVE-2000-0013): Local privilege elevation via shell metacharacters embedded in a .wav file that are executed by the midikeys program. Affects the IRIX soundplayer workflow where untrusted WAV data is processed, enabling an attacker with local access to run commands...
CVE-2000-0013
IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which is executed via the midikeys program...
CVE-1999-0013
CVE-1999-0013 describes local privilege exposure where stolen credentials from SSH clients via the ssh-agent program can be used by other local users to access remote accounts belonging to the ssh-agent user. Connected sources corroborate the existence of this issue in OpenSSH-related contexts an...
