221 matches found
CVE-2006-0020
CVE-2006-0020 describes a WMF parsing memory corruption affecting Internet Explorer on Windows platforms (e.g., IE 5.01 SP4 on 2000 SP4; 5.5 SP2 on Millennium) where a crafted WMF file with manipulated header size (potential integer overflow) can crash the process and may allow code execution. Th...
CVE-2005-0020
Buffer overflow in playmidi before 2.4 allows local users to execute arbitrary code...
Mandrake Linux Security Advisory : playmidi (MDKSA-2005:010)
Erik Sjolund discovered a buffer overflow in playmidi that could be exploited by a local attacker if installed setuid root. Note that by default Mandrakelinux does not ship playmidi installed setuid root. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...
CVE-2003-0020
Apache does not filter terminal escape sequences from its error logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences...
CVE-2003-0020
CVE-2003-0020 concerns Apache HTTP Server: the product does not filter terminal escape sequences from error logs, enabling potential insertion of escape sequences into terminal emulators vulnerable to such sequences. Connected documents show multiple related CVEs affecting different Apache branch...
RHEL 2.1 : apache (RHSA-2003:244)
Updated Apache and modssl packages that fix several minor security issues are now available for Red Hat Enterprise Linux. The Apache HTTP server is a powerful, full-featured, efficient, and freely-available Web server. Ben Laurie found a bug in the optional renegotiation code in modssl which can...
Apache < 1.3.31 / 2.0.49 Log Entry Terminal Escape Sequence Injection
The target is running an Apache web server that allows for the injection of arbitrary escape sequences into its error logs. An attacker might use this vulnerability in an attempt to exploit similar vulnerabilities in terminal emulators. Nessus has determined the vulnerability exists only by looki...
CVE-2003-0020
...
DEBIAN-CVE-2003-0020
Apache does not filter terminal escape sequences from its error logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences...
Security fix for the ALT Linux 9 package apache2 version 2.0.40-21
Feb. 24, 2003 Joe Orton &[email protected] 2.0.40-21 - add security fix for CAN-2003-0020; replace non-printable characters with '!' when printing to error log. - disable debuginfo on IA64...
CVE-2002-0020
CVE-2002-0020 affects the Telnet server in Windows 2000 and Interix 2.2, where a buffer overflow in the handling of protocol options allows a remote attacker to execute arbitrary code. The vulnerability is exploitable remotely, without authentication, via crafted telnet sessions. Advisories refer...
CVE-2002-0020
Buffer overflow in telnet server in Windows 2000 and Interix 2.2 allows remote attackers to execute arbitrary code via malformed protocol options...
CVE-2002-0020
Buffer overflow in telnet server in Windows 2000 and Interix 2.2 allows remote attackers to execute arbitrary code via malformed protocol options...
CVE-2001-0020
Technical details about CVE-2001-0020 are not publicly available in the provided connected documents. The material confirms a directory traversal vulnerability in Arrowpoint, but no further specifics, affected versions, or mitigations are included here. Monitor for updates.
CVE-2001-0020
Directory traversal vulnerability in Arrowpoint aka Cisco Content Services, or CSS allows local unprivileged users to read arbitrary files via a .. dot dot attack...
CVE-2001-0020
Directory traversal vulnerability in Arrowpoint aka Cisco Content Services, or CSS allows local unprivileged users to read arbitrary files via a .. dot dot attack...
CVE-2000-0020
DNS PRO allows remote attackers to conduct a denial of service via a large number of connections...
CVE-2000-0020
CVE-2000-0020 relates to DNS PRO: remote DoS via a large number of connections. The connected sources show DNS PRO as vulnerable to DoS with partial availability impact (NVD CVSS v2 base score 5.0, NETWORK vector, LOW complexity, no authentication). Affected versions are not specified in PT-1999-...
CVE-1999-0020
CVE-1999-0020 is a duplicate of CVE-1999-0032. Connected records provide concrete details for CVE-1999-0032: a buffer overflow in lpr (used in BSD-based systems, including Linux) allows local users to execute arbitrary code as root via a long -C (classification) option. The affected component is ...