134 matches found
CVE-2006-0158
CVE-2006-0158 describes an SQL injection vulnerability in the CyberDoc SiteSuite CMS, specifically in index.php where the attacker can supply the page parameter to execute arbitrary SQL remotely. The vulnerability is documented with a high severity (CVSSv2 base score 7.5, HIGH) and a network atta...
CVE-2005-0158
Format string vulnerability in bidwatcher before 1.3.17 allows remote malicious web servers from eBay, or a spoofed eBay server, to cause a denial of service and possibly execute arbitrary code via certain responses...
GLSA-200503-06 : BidWatcher: Format string vulnerability
The remote host is affected by the vulnerability described in GLSA-200503-06 BidWatcher: Format string vulnerability Ulf Harnhammar discovered a format string vulnerability in 'netstuff.cpp'. Impact : Remote attackers can potentially exploit this vulnerability by sending specially crafted respons...
[SECURITY] [DSA 687-1] New bidwatcher packages fix format string vulnerability
-------------------------------------------------------------------------- Debian Security Advisory DSA 687-1 [email protected] http://www.debian.org/security/ Martin Schulze February 18th, 2005 http://www.debian.org/security/faq -...
CVE-2005-0158
Bidwatcher is affected by a format-string vulnerability (CVE-2005-0158) in versions before 1.3.17. A remote attacker—via a malicious or spoofed eBay web server—can cause a denial of service and potentially execute arbitrary code by sending certain responses. Multiple connected advisories referenc...
CVE-2005-0158
Format string vulnerability in bidwatcher before 1.3.17 allows remote malicious web servers from eBay, or a spoofed eBay server, to cause a denial of service and possibly execute arbitrary code via certain responses...
Debian DSA-445-1 : lbreakout2 - buffer overflow
Ulf Harnhammar from the Debian Security Audit Project discovered a vulnerability in lbreakout2, a game, where proper bounds checking was not performed on environment variables. This bug could be exploited by a local attacker to gain the privileges of group 'games'. %NASLMINLEVEL 70300 C Tenable...
CVE-2002-0158
CVE-2002-0158 refers to a buffer overflow in Xsun on Solaris 2.6–8 when processing a long -co (color database) command line argument. The overflow occurs in the heap/dynamic memory handling and can enable a local user to execute arbitrary code with root privileges, as described in the CVE details...
CVE-2004-0158
CVE-2004-0158 affects the game lbreakout2 via a buffer overflow in its handling of the HOME environment variable, enabling a local attacker to gain the 'games' group privileges by overflowing stack/global buffers while the process copies HOME to various components (editor.c, theme.c, manager.c, c...
CVE-2004-0158
Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable to 1 editor.c, 2 theme.c, 3 manager.c, 4 config.c, 5 game.c, 6 levels.c, or 7 main.c...
CVE-2002-0158
Buffer overflow in Xsun on Solaris 2.6 through 8 allows local users to gain root privileges via a long -co color database command line argument...
Cisco PIX Firewall Manager (PFM) on Windows Arbitrary File Access
It is possible to read arbitrary files on this machine by using relative paths in the URL. This flaw can be used to bypass the management software's password protection and possibly retrieve the enable password for the Cisco PIX. This vulnerability has been assigned Cisco Bug ID: CSCdk39378...
CVE-2000-0158
CVE-2000-0158 describes a buffer overflow in the MMDF server that allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon. The affected component is the MMDF server’s SMTP handling; the root cause is a buffer overflow vulnerability. No exploitation details or re...