92 matches found
CVE-2004-0279
AIM Sniff aimSniff.pl 0.9b allows local users to overwrite arbitrary files via a symlink attack on /tmp/AS.log...
Debian DSA-031-2 : sudo - buffer overflow
Todd Miller announced a new version of sudo which corrects a buffer overflow that could potentially be used to gain root privileges on the local system. The fix from sudo 1.6.3p6 is available in sudo 1.6.2p2-1potato1 for Debian 2.2 potato. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
CVE-2004-0279
AIM Sniff aimSniff.pl 0.9b allows local users to overwrite arbitrary files via a symlink attack on /tmp/AS.log...
CVE-2004-0279
AIM Sniff (aimSniff.pl) 0.9b is affected. A local user can overwrite arbitrary files via a symlink attack on /tmp/AS.log, indicating a local file overwrite vulnerability in this tool. The provided connected documents confirm the affected component and the root cause (symlink leading to /tmp/AS.lo...
CVE-2002-0279
The kernel in HP-UX 11.11 does not properly provide arguments for setrlimit, which could allow local attackers to cause a denial of service kernel panic and possibly gain privileges...
CVE-2002-0279
CVE-2002-0279 affects HP-UX 11.11 on HP 9000 servers, where the kernel incorrectly supplies arguments to setrlimit. This could let a local attacker cause a kernel panic (DoS) and potentially gain privileges. HP’s security bulletin #0183 recommends applying patch PHKL_26233 (and reboot) for affect...
CVE-2001-0279
Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges...
CVE-2001-0279
The CVE-2001-0279 entry concerns a buffer overflow in sudo prior to version 1.6.3p6 that could allow a local user to gain root privileges. Multiple connected advisories confirm this vulnerability and reference updating to a fixed package (e.g., 1.6.3p6 or newer) as the remedy. Affected documents ...
CVE-2001-0279
Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges...
CVE-2000-0279
CVE-2000-0279 affects BeOS. A remote attacker can cause denial of service by sending malformed network packets whose length field is shorter than the headers. The available details in connected documents reiterate this description with no vendor/version-specific remediation or fix information pro...
CVE-2000-0279
BeOS allows remote attackers to cause a denial of service via malformed packets whose length field is less than the length of the headers...
CVE-1999-0279
CVE-1999-0279 affects Excite for Web Servers (EWS). The vulnerability allows remote command execution via shell metacharacters in the CGI component (architext_query.pl), enabling an attacker to run arbitrary commands with the web server’s privileges. Related sources consistently describe this iss...