CVE-2006-0408

The CVE concerns Sun Grid Engine (SGE) rsh used by Grid Engine 6.0 and earlier, where local users can gain privileges and execute arbitrary code via unspecified vectors. Connected sources show Solaris patching for Grid Engine 6.0 (patches 121956-01, 121957-01, 121958-01 across SPARC/x86 and Solar...

CVE-2005-0408

CitrusDB 0.3.6 and earlier uses an authentication cookie id_hash which is md5(user_name + 'boogaadeeboo'); because id_hash is derived from the username with a hard-coded suffix, an attacker who knows a valid username can compute the MD5 and forge the cookie to bypass authentication and gain privi...

[Full-Disclosure] Advisory: Authentication bypass in CitrusDB

Advisory: Authentication bypass in CitrusDB A group of Students in our lab called RedTeam found an authentication bypass vulnerability in CitrusDB which can result in complete corruption of the installed CitrusDB application. Details ======= Product: CitrusDB Affected Version: 0.3.6 verified,...

Debian DSA-494-1 : ident2 - buffer overflow

Jack discovered a buffer overflow in ident2, an implementation of the ident protocol RFC1413, where a buffer in the childservice function was slightly too small to hold all of the data which could be written into it. This vulnerability could be exploited by a remote attacker to execute arbitrary...

CVE-2004-0408

Buffer overflow in the childservice function in the ident2 ident daemon allows remote attackers to execute arbitrary code...

CVE-2004-0408

Buffer overflow in the childservice function in the ident2 ident daemon allows remote attackers to execute arbitrary code...

CVE-2004-0408

CVE-2004-0408 describes a buffer overflow in the ident2 daemon’s child_service function, enabling remote code execution. The vulnerability arises because a buffer is slightly too small to hold incoming data, allowing an attacker to overflow and potentially execute arbitrary code with the ident2 p...

CVE-2003-0408

Buffer overflow in Uptime Client UpClient 5.0b7, and possibly other versions, allows local users to gain privileges via a long -p argument...

CVE-2002-0408

htcgibin.exe in Lotus Domino server 5.0.9a and earlier, when configured with the NoBanner setting, allows remote attackers to determine the version number of the server via a request that generates an HTTP 500 error code, which leaks the version in a hard-coded error message...

CVE-2002-0408

CVE-2002-0408 affects htcgibin.exe in Lotus Domino Server 5.0.9a and earlier. When configured with the NoBanner setting, a remote attacker can cause an HTTP 500 error and leak the server version in a hard-coded error message. This is an information-disclosure vulnerability that exposes version de...

CVE-2001-0408

CVE-2001-0408 affects Vim (gvim); a crafted file containing VIM control codes can cause arbitrary commands to execute when opening the file. The root cause is Vim interpreting embedded control codes, enabled by the status line option in .vimrc, allowing code execution as the user. Mandrake adviso...

CVE-2001-0408

vim aka gvim processes VIM control codes that are embedded in a file, which could allow attackers to execute arbitrary commands when another user opens a file containing malicious VIM control codes...

CVE-2000-0408

IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions, aka the "Malformed Extension Data in URL" vulnerability...

CVE-1999-0408

CVE-1999-0408 affects Cobalt RaQ microservers, where files created from interactive shell sessions (for example, .bash_history) become world-readable and accessible from the web server. The linked sources (NVD/Red Hat/CVE listings) describe the issue as exposing shell-history contents to web user...