CVE-2007-0392

IBM AIX 5.3 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572...

CVE-2007-0392

CVE-2007-0392 affects IBM AIX 5.3. The issue is a failure to properly verify the status of file descriptors before setuid execution, enabling local privilege escalation by closing FD 0, 1, or 2 and then running a setuid program. Descriptions from connected sources identify this as a variant of CV...

HP-UX PHSS_33252 : HP OpenView Operations, Remote Unauthorized Access and Denial of Service (DoS) (HPSBMA02149 SSRT050968 rev.1)

s700800 11.X OV ITO7.1X Comm Agt AIX A.07.17 : A potential security vulnerability has been identified in HP OpenView Operations. This potential vulnerability could be exploited remotely to allow unauthorized access or to create a Denial of Service DoS. %NASLMINLEVEL 70300 C Tenable Network...

[security bulletin] HPSBMA02149 SSRT050968 rev.1 - HP OpenView Operations, Remote Unauthorized Access and Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00767033 Version: 1 HPSBMA02149 SSRT050968 rev.1 - HP OpenView Operations, Remote Unauthorized Access and Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted...

CVE-2006-0392

CVE-2006-0392 describes a buffer overflow in Apple Mac OS X 10.4.7's ImageIO framework when processing Canon RAW images. An attacker could entice a user to view a crafted Canon RAW file, potentially causing an application crash or arbitrary code execution with user privileges. Affected products i...

Apache chunked encoding buffer overflow

Added: 05/08/2006 CVE: CVE-2002-0392 BID: 5033 OSVDB: 838 Background Apache web servers support chunked encoding, which is used by a web client to send data to the server in parts, or chunks. Problem A flaw in the calculation of the size of chunked encoding leads to a buffer overflow, allowing...

[SECURITY] [DSA 725-2] New ppxp packages fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 725-2 [email protected] http://www.debian.org/security/ Martin Schulze July 4th, 2005 http://www.debian.org/security/faq -...

CVE-2005-0392

CVE-2005-0392 is a local privilege-escalation flaw in the ppxp PPP program where root privileges are not dropped when opening potentially user-supplied log files, enabling an unprivileged user to trigger a root shell. This is discussed in Debian advisories DSA-725-1/DSA-725-2 and mirrored in Open...

Debian DSA-133-1 : apache-perl - remote DoS / exploit

Mark Litchfield found a denial of service attack in the Apache web-server. While investigating the problem the Apache Software Foundation discovered that the code for handling invalid requests which use chunked encoding also might allow arbitrary code execution. %NASLMINLEVEL 70300 C Tenable...

Debian DSA-132-1 : apache-ssl - remote DoS / exploit

Mark Litchfield found a denial of service attack in the Apache web-server. While investigating the problem the Apache Software Foundation discovered that the code for handling invalid requests which use chunked encoding also might allow arbitrary code execution on 64 bit architectures...

RHEL 2.1 : apache (RHSA-2002:126)

The Apache Web server contains a security vulnerability which can be used to launch a denial of service DoS attack or, in some cases, allow remote code execution. Versions of the Apache Web server up to and including 1.3.24 contain a bug in the routines which deal with requests using 'chunked'...

CVE-2004-0392

racoon before 20040407b allows remote attackers to cause a denial of service infinite loop and dropped connections via an IKE message with a malformed Generic Payload Header containing invalid 1 "Security Association Next Payload" and 2 "RESERVED" fields...

CVE-2004-0392

racoon before 20040407b allows remote attackers to cause a denial of service infinite loop and dropped connections via an IKE message with a malformed Generic Payload Header containing invalid 1 "Security Association Next Payload" and 2 "RESERVED" fields...

CVE-2004-0392

CVE-2004-0392 affects the racoon IKE daemon. The vulnerability is in racoon before 20040407b, where handling of an IKE message with a malformed Generic Payload Header (invalid Security Association Next Payload and RESERVED fields) can cause a remote denial of service via an infinite loop and drop...

CVE-2003-0392

Directory traversal vulnerability in ST FTP Service 3.0 allows remote attackers to list arbitrary directories via a CD command with a DoS drive letter argument e.g. E:...

CVE-2002-0392

Affected software: Apache HTTP Server 1.3.x (up to 1.3.24) and 2.0.x (up to 2.0.36). The vulnerability arises from processing chunk-encoded HTTP requests, causing Apache to compute an incorrect size, which can lead to a remote denial of service and, in some reports, potential arbitrary code execu...

CVE-2002-0392

Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a chunk-encoded HTTP request that causes Apache to use an incorrect size...

CVE-2002-0392

Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a chunk-encoded HTTP request that causes Apache to use an incorrect size...

Immunity Canvas: APACHECHUNK_WIN32

Name| apachechunkwin32 ---|--- CVE| CVE-2002-0392 Exploit Pack| CANVAS Description| Apache Chunk win32 Notes| References: http://www.apache.org CVE Name: CVE-2002-0392 VENDOR: Apache Notes: Apache 1.3 through 1.3.24 Repeatability: Multiple tries Date public: 06/17/2002 CERT Advisory:...

[SECURITY] [DSA-131-1] Apache chunk handling vulnerability

Package : apache Problem type : remote DoS / exploit Debian-specific: no CVE name : CAN-2002-0392 CERT advisory : VU944335 Mark Litchfield found a denial of service attack in the Apache web-server. While investigating the problem the Apache Software Foundation discovered that the code for handlin...