CVE-2008-0318

Integer overflow in the cliscanpe function in libclamav in ClamAV before 0.92.1, as used in clamd, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Petite packed PE file, which triggers a heap-based buffer overflow...

CVE-2008-0318

ClamAV is affected by CVE-2008-0318 due to an integer overflow in libclamav/pe.c (cli_scanpe) when processing Petite packed PE files, triggering a heap-based overflow. This can allow remote code execution or a denial of service via crafted files. Mitigation: upgrade to libclamav/clamav 0.92.1 or ...

Security fix for the ALT Linux 9 package clamav version 0.92.1-alt1

Feb. 12, 2008 Victor Forsyuk 0.92.1-alt1 - 0.92.1 - Security fix for CVE-2008-0318...

Security fix for the ALT Linux 8 package clamav version 0.92.1-alt1

Feb. 12, 2008 Victor Forsyuk 0.92.1-alt1 - 0.92.1 - Security fix for CVE-2008-0318...

CVE-2007-0318

The CVE-2007-0318 entry affects Mac OS X 10.4.8 and arises from the do_hfs_truncate function. A crafted HFS+ filesystem in a DMG image can trigger an access of an invalid vnode structure during file removal, leading to a kernel panic (DoS). No explicit remediation is provided in the supplied docu...

CVE-2005-0318

CVE-2005-0318 concerns Alt-N WebAdmin 3.0.4, where useredit_account.wdm fails to properly validate edits by the logged-in user. The root cause is insufficient validation of the account-edit parameter, enabling remote authenticated users to modify other users’ account information via a tampered us...

CVE-2005-0318

usereditaccount.wdm in Alt-N WebAdmin 3.0.4 does not properly validate account edits by the logged in user, which allows remote authenticated users to edit other users' account information via a modified user parameter...

CVE-2004-0318

Load Sharing Facility LSF 4.x, 5.x, and 6.x uses the LSFEAUTHUID environment variable, if it exists, instead of the real UID of the user, which could allow remote attackers within the local cluster to gain privileges...

CVE-2004-0318

CVE-2004-0318 affects Load Sharing Facility (LSF) versions 4.x, 5.x, and 6.x. The vulnerability arises because LSF_EAUTH_UID may be used in place of the real user UID, enabling remote attackers within the local cluster to gain privileges. The underlying issue is the handling of an environment var...

CVE-2003-0318

The CVE-2003-0318 entry describes a Cross-site Scripting (XSS) vulnerability in the Statistics module of PHP-Nuke 6.0 and earlier. An attacker could inject arbitrary script via the year parameter, affecting PHP-Nuke’s Statistics component. The NVD entry lists a base score of 4.3 (Medium) with I:P...

CVE-2002-0318

FreeRADIUS RADIUS server allows remote attackers to cause a denial of service CPU consumption via a flood of Access-Request packets...

CVE-2002-0318

FreeRADIUS RADIUS server (the affected product) is vulnerable to a denial-of-service via a flood of Access-Request packets, causing CPU consumption. The public sources confirm the flaw in CVE-2002-0318 and note that, as of the connected records, there is no patch available for this issue (e.g., C...

CVE-2001-0318

Format string vulnerability in ProFTPD 1.2.0rc2 may allow attackers to execute arbitrary commands by shutting down the FTP server while using a malformed working directory cwd...

CVE-2001-0318

Format string vulnerability in ProFTPD 1.2.0rc2 may allow attackers to execute arbitrary commands by shutting down the FTP server while using a malformed working directory cwd...

CVE-2000-0318

Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot .. attack...

CVE-2000-0318

CVE-2000-0318 affects Atrium Mercur Mail Server 3.2 via a local directory traversal vulnerability (dot-dot). The vulnerability allows a local attacker to read other users’ email and to create arbitrary files by exploiting a path traversal issue. The available documents do not provide explicit exp...

CVE-2000-0318

Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot .. attack...

CVE-1999-0318

The CVE-1999-0318 issue affects the xmcd 2.0p12 release and is caused by a buffer overflow triggered via an environment variable, allowing local users to gain access. The PT-1997-1131 entry corroborates local privilege escalation through an environmental variable; it does not provide a product pa...