168 matches found
Debian DSA-261-1 : tcpdump - infinite loop
A problem has been discovered in tcpdump, a powerful tool for network monitoring and data acquisition. An attacker is able to send a specially crafted RADIUS network packet which causes tcpdump to enter an infinite loop. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...
CVE-2003-0145
Unknown vulnerability in tcpdump before 3.7.2 related to an inability to "Handle unknown RADIUS attributes properly," allows remote attackers to cause a denial of service infinite loop, a different vulnerability than CAN-2003-0093...
CVE-2002-0145
chuid 1.2 and earlier does not properly verify the ownership of files that will be changed, which allows remote attackers to change files owned by other users, such as root...
CVE-2002-0145
The CVE-2002-0145 entry concerns chuid 1.2 and earlier, where the process does not properly verify ownership of files that will be changed. This allows remote attackers to modify files owned by other users, including root. The NVD notes a base score of 7.5 (HIGH) with network attack vector and lo...
CVE-2001-0145
CVE-2001-0145 affects Outlook 2000/98 and Outlook Express 5.x, where a buffer overflow in the VCard handler can be triggered by a malformed vCard birthday field, allowing an attacker to execute arbitrary commands. The root cause described is a faulty VCard birthday parsing leading to memory corru...
CVE-2001-0145
Buffer overflow in VCard handler in Outlook 2000 and 98, and Outlook Express 5.x, allows an attacker to execute arbitrary commands via a malformed vCard birthday field...
CVE-1999-0145
CVE-1999-0145 is a historical vulnerability in Sendmail where the WIZ command can be executed to gain root access. The linked sources consistently describe a Sendmail WIZ/WIZard capability that permits arbitrary command execution with root privileges, effectively allowing local compromise of the ...
CVE-2000-0145
The CVE-2000-0145 issue affects gnucash on Debian GNU/Linux via the libguile.so library installed with world-writable permissions. The root cause is a world-writable libguile.so, which could allow unauthorized modifications to the file. Impact is described as enabling modification of the library,...