192 matches found
CVE-2003-0063
The vulnerability refers to the xterm terminal emulator in XFree86 4.2.0 and earlier. The issue allows an attacker to change the window title via a specific escape sequence and then insert it back into the user’s shell, potentially leading to execution of arbitrary commands. Connected documents c...
CVE-2003-0063
The xterm terminal emulator in XFree86 4.2.0 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the...
Mandrake Linux Security Advisory : cups (MDKSA-2002:015)
There is a potential buffer overflow vulnerability in CUPS when reading the names of attributes. This bug affects all versions of CUPS and is fixed upstream in version 1.1.14. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...
CVE-2004-0063
The SPPVerifyPVV function in nCipher payShield SPP library 1.3.12, 1.5.18 and 1.6.18 returns a StatusOK value even if the HSM returns a different status code, which could cause applications to make incorrect security-critical decisions, e.g. by accepting an invalid PIN number...
CVE-2002-0063
Buffer overflow in ippRead function of CUPS before 1.1.14 may allow attackers to execute arbitrary code via long attribute names or language values...
CVE-2002-0063
CVE-2002-0063 affects CUPS prior to 1.1.14, where a buffer overflow in ippRead (triggered by long attribute names or language values) could allow remote arbitrary-code execution. Upstream fixes exist in 1.1.14+; debian/mandrake advisories reference this fix. Remediation: upgrade CUPS to 1.1.14 or...
CVE-2001-0063
procfs in FreeBSD and possibly other operating systems allows local users to bypass access control restrictions for a jail environment and gain additional privileges...
CVE-2001-0063
CVE-2001-0063 affects FreeBSD (procfs) and possibly other OSes; local users can bypass access controls in a jail environment to gain additional privileges (complete impact on confidentiality, integrity, and availability per NVD). The description provided does not include specific vulnerable versi...
CVE-2001-0063
procfs in FreeBSD and possibly other operating systems allows local users to bypass access control restrictions for a jail environment and gain additional privileges...
CVE-2000-0063
CVE-2000-0063 affects the Nortel Contivity HTTP server via the cgiproc CGI script, which allows remote attackers to read arbitrary files by passing a filename parameter. This points to an uncontrolled file access flaw in the CGI handler, enabling partial confidentiality impact. The available docu...
CVE-2000-0063
cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary files by specifying the filename in a parameter to the script...
CVE-1999-0063
CVE-1999-0063 affects Cisco IOS 12.0 and related 11.3/12.0 branches. The issue: processing of malformed UDP packets to the syslog port (UDP 514) can cause the device to crash or hang. Red Hat/Nessus entries and Cisco advisories corroborate that the vulnerability stems from handling invalid UDP sy...