CVE-2007-0393

CVE-2007-0393 concerns Sun Solaris 9 where the system does not properly verify the status of file descriptors before setuid execution, enabling local privilege escalation by closing fd 0, 1, or 2 and then running a setuid program. The vulnerability is described as a variant of CVE-2002-0572. Conn...

CVE-2006-0393

OpenSSH in Apple Mac OS X 10.4.7 is affected by CVE-2006-0393. The vulnerability arises when attempting to log in with a nonexistent user, causing the authentication process to hang and enabling denial of service and potential account existence discovery. The issue is documented in multiple sourc...

Sendmail 8.8.8 - 8.9.2 Parsing Redirection DoS Vulnerability

The remote Sendmail server, according to its version number, allows remote attackers cause a denial of service by sending messages with a large number of headers. SPDX-FileCopyrightText: 2003 Xue Yong Zhi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

CVE-2005-0393

The helper scripts for crip 3.5 do not properly use temporary files, which allows local users to have an unknown impact with unknown attack vectors...

CVE-2005-0393

The helper scripts for crip 3.5 do not properly use temporary files, which allows local users to have an unknown impact with unknown attack vectors...

CVE-2005-0393

CVE-2005-0393 affects crip, a terminal-based ripper/encoder/tagger tool. The advisory notes that crip 3.5 helper scripts do not securely use temporary files, allowing local users to exploit this in an insecure manner with unknown impact and attack vectors. The Debian DSA-733-1 and OpenVAS entry c...

CVE-2004-0393

Format string vulnerability in the msg function for rlpr daemon rlprd 2.0.4 allows remote attackers to execute arbitrary code via format string specifiers in a buffer that can not be resolved, which is provided to the syslog function...

CVE-2004-0393

Format string vulnerability in the msg function for rlpr daemon rlprd 2.0.4 allows remote attackers to execute arbitrary code via format string specifiers in a buffer that can not be resolved, which is provided to the syslog function...

CVE-2004-0393

Format string vulnerability in the msg function for rlpr daemon rlprd 2.0.4 allows remote attackers to execute arbitrary code via format string specifiers in a buffer that can not be resolved, which is provided to the syslog function...

CVE-2004-0393

Format string vulnerability in the msg function for rlpr daemon rlprd 2.0.4 allows remote attackers to execute arbitrary code via format string specifiers in a buffer that can not be resolved, which is provided to the syslog function...

CVE-2004-0393

CVE-2004-0393 corresponds to a format-string vulnerability in rlpr/rlprd (rlpr daemon) version 2.0.4. The flaw resides in the msg() function, where unbounded format strings provided to syslog can lead to arbitrary code execution. Documented impact is remote code execution with the rlprd process p...

CVE-2003-0393

Privacyware Privatefirewall 3.0 does not block certain incoming packets when in "Filter Internet Traffic" or Deny Internet Traffic" modes, which allows remote attackers to identify running services via FIN scans or Xmas scans...

CVE-2003-0393

The CVE-2003-0393 entry concerns Privacyware Privatefirewall 3.0, where the product fails to block certain incoming packets when in Filter Internet Traffic or Deny Internet Traffic modes. This behavior can allow remote attackers to identify running services via FIN scans or Xmas scans. According ...

CVE-2003-0393

Privacyware Privatefirewall 3.0 does not block certain incoming packets when in "Filter Internet Traffic" or Deny Internet Traffic" modes, which allows remote attackers to identify running services via FIN scans or Xmas scans...

CVE-2002-0393

Buffer overflow in Red-M 1050 Bluetooth Access Point management web interface allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long administration password...

CVE-2002-0393

Buffer overflow in Red-M 1050 Bluetooth Access Point management web interface allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long administration password...

CVE-2002-0393

Affected product: Red-M 1050 Bluetooth Access Point (management web interface). Vulnerable component: the management web server where a buffer overflow can be triggered by a long administration password, leading to remote DoS and potentially arbitrary code execution. Exploitation details are not ...

CVE-2001-0393

Navision Financials Server 2.0 allows remote attackers to cause a denial of service via a series of connections to the server without providing a username/password combination, which consumes the license limits...

CVE-2001-0393

Navision Financials Server 2.0 allows remote attackers to cause a denial of service via a series of connections to the server without providing a username/password combination, which consumes the license limits...

CVE-2001-0393

CVE-2001-0393 affects Navision Financials Server 2.0. The issue allows remote attackers to cause a denial of service by establishing a series of connections to the server without providing a username/password, consuming license limits. The available references (NVD/NVD entry) describe the impact ...