170 matches found
CVE-2005-0143
Firefox before 1.0 and Mozilla before 1.7.5 display the SSL lock icon when an insecure page loads a binary file from a trusted site, which could facilitate phishing attacks...
CVE-2005-0143
CVE-2005-0143 affects Firefox before 1.0 and Mozilla before 1.7.5. The issue is that the SSL lock icon can be displayed when an insecure page loads a binary file from a trusted site, which could aid phishing. Connected advisories confirm Mozilla security updates were issued (e.g., RHSA-2005:335; ...
CVE-2003-0143
CVE-2003-0143 affects qpopper 4.0.x prior to 4.0.5fc2. The pop_msg function fails to null-terminate the message buffer after Qvsnprintf, enabling an authenticated user to trigger a buffer overflow in a mdef command with a long macro name and execute arbitrary code. The CVE is associated with remo...
CVE-2003-0143
The popmsg function in qpopper 4.0.x before 4.0.5fc2 does not null terminate a message buffer after a call to Qvsnprintf, which could allow authenticated users to execute arbitrary code via a buffer overflow in a mdef command with a long macro name...
Qpopper pop_msg() Macroname Remote Overflow
The remote Qpopper server, according to its banner, is vulnerable to a one-byte overflow ih its popmsg function after a call to Qvsnprintf. An attacker may use this flaw to execute code with the privileges of the Qpopper service usually non-root, provided that he has a valid POP account to log in...
CVE-2002-0143
The CVE-2002-0143 issue is a local buffer overflow in Eterm of Enlightenment Imlib2 (versions ≤ 1.0.4) caused by a long HOME environment variable. Exploit details and mitigations are not provided in the connected documents; no further remediation is specified.
CVE-2002-0143
Buffer overflow in Eterm of Enlightenment Imlib2 1.0.4 and earlier allows local users to execute arbitrary code via a long HOME environment variable...
CVE-2001-0143
The CVE-2001-0143 issue affects the vpop3d component in the linuxconf package (versions 1.23r and earlier). The root cause is a temporary file race (symlink attack) that local users can exploit to overwrite arbitrary files. Public references in the Mandrake advisory MDKSA-2001:011 confirm the vul...
CVE-2000-0143
Technical details for CVE-2000-0143 are not provided in the connected documents. The initial description notes local TCP redirection via sshd, but no vendor/versions/impact or fixes are specified beyond that. Monitor for updates.