RHEL 4 : python (RHSA-2005:108)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:108 advisory. Python is an interpreted, interactive, object-oriented programming language. An object traversal bug was found in the Python SimpleXMLRPCServer. This...

CVE-2005-0089

CVE-2005-0089 affects the SimpleXMLRPCServer library in Python 2.2, 2.3 before 2.3.5, and 2.4. When an XML-RPC server registers an object via register_instance that lacks a _dispatch method, remote attackers could read or modify globals of the target module and potentially execute arbitrary code ...

CVE-2005-0089

The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the registerinstance method to register an object without a dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute...

CVE-2004-0089

CVE-2004-0089 describes a buffer overflow in TruBlueEnvironment, part of the Mac OS X Classic environment, on Mac OS X 10.3.x and 10.2.x. The vulnerability occurs when TruBlueEnvironment copies a long environment variable without proper bounds checking, allowing a local, authenticated user to exe...

CVE-2004-0089

Buffer overflow in TruBlueEnvironment in Mac OS X 10.3.x and 10.2.x allows local users to gain privileges via a long environment variable...

CVE-2003-0089

Buffer overflow in the Software Distributor utilities for HP-UX B.11.00 and B.11.11 allows local users to execute arbitrary code via a long LANG environment variable to setuid programs such as 1 swinstall and 2 swmodify...

CVE-2003-0089

Buffer overflow in HP-UX Software Distributor utilities (HP-UX B.11.00 and B.11.11) allows local users to execute arbitrary code via a long LANG environment variable passed to setuid programs such as swinstall and swmodify. Affected components include the Software Distributor utilities; the root ...

CVE-2003-0089

Buffer overflow in the Software Distributor utilities for HP-UX B.11.00 and B.11.11 allows local users to execute arbitrary code via a long LANG environment variable to setuid programs such as 1 swinstall and 2 swmodify...

CVE-2002-0089

Buffer overflow in admintool in Solaris 2.5 through 8 allows local users to gain root privileges via long arguments to 1 the -d command line option, or 2 the PRODVERS argument in the .cdtoc file...

CVE-2002-0089

The CVE-2002-0089 issue affects Sun Solaris admintool across Solaris 2.5 through 8 (SPARC/x86). The vulnerability is a buffer overflow in admintool triggered by long strings in two input vectors: (1) the -d command line option and (2) the PRODVERS variable in the .cdtoc file. This can allow a loc...

CVE-2002-0089

Buffer overflow in admintool in Solaris 2.5 through 8 allows local users to gain root privileges via long arguments to 1 the -d command line option, or 2 the PRODVERS argument in the .cdtoc file...

CVE-2001-0089

Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE element in an HTML form, aka the "File Upload via Form" vulnerability...

CVE-2001-0089

CVE-2001-0089 affects Internet Explorer 5.0–5.5. The vulnerability allows a remote attacker to read arbitrary files from the client through an HTML form using an INPUT TYPE element, known as the “File Upload via Form” issue. The provided documents do not specify payloads, affected configurations ...

CVE-2001-0089

Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE element in an HTML form, aka the "File Upload via Form" vulnerability...

CVE-2000-0089

Technical details about CVE-2000-0089 are not publicly available in the provided connected documents. Monitor for updates from official sources; current documents reiterate the legacy vulnerability description without additional specifics.

CVE-1999-0089

CVE-1999-0089 corresponds to a buffer overflow in the AIX libDtSvc library that can allow local users to gain root access. The connected Red Hat and CVE records reiterate the same description, but none provide specific affected versions, exploit details, or a remediation/fix. The PT-1997-1043 ent...