Debian DSA-1020-1 : flex - buffer overflow

Chris Moore discovered that flex, a scanner generator, generates code, which allocates insufficient memory, if the grammar contains REJECT statements or trailing context rules. This may lead to a buffer overflow and the execution of arbitrary code. If you use code, which is derived from a...

CVE-2006-0459

flex.skl in Will Estes and John Millaway Fast Lexical Analyzer Generator flex before 2.5.33 does not allocate enough memory for grammars containing 1 REJECT statements or 2 trailing context rules, which causes flex to generate code that contains a buffer overflow that might allow context-dependen...

BELL-CVE-2006-0459 CVE-2006-0459 does not affect BellSoft software

Bulletin has no description...

CVE-2006-0459

CVE-2006-0459 affects the Fast Lexical Analyzer Generator (flex) before version 2.5.33. The issue is a memory allocation fault when processing grammars that contain REJECT statements or trailing context rules, causing generated code to contain a buffer overflow. This could allow context-dependent...

[SECURITY] [DSA 1020-1] New flex packages fix insecure code generation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1020-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 28th, 2006 http://www.debian.org/security/faq -...

CVE-2006-0975

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-0459. Reason: This candidate is a reservation duplicate of CVE-2006-0459. Notes: All CVE users should reference CVE-2006-0459 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2006-0975

CVE-2006-0975 is a rejected candidate and not in use.

CVE-2005-0459

phpMyAdmin 2.6.2-dev, and possibly earlier versions, allows remote attackers to determine the full path of the web root via a direct request to selectlang.lib.php, which reveals the path in a PHP error message...

CVE-2005-0459

CVE-2005-0459 affects phpMyAdmin 2.6.2-dev (and possibly earlier) and allows remote attackers to discover the full web-root path by requesting select_lang.lib.php, causing a PHP error message that reveals the path. The vulnerability is due to error output disclosing the filesystem path; no exploi...

CVE-2004-0459

The Clear Channel Assessment CCA algorithm in the IEEE 802.11 wireless protocol, when using DSSS transmission encoding, allows remote attackers to cause a denial of service via a certain RF signal that causes a channel to appear busy aka "jabber", which prevents devices from transmitting data...

CVE-2003-0459

...

CVE-2003-0459

CVE-2003-0459 affects KDE Konqueror up to version 3.1.2, where credentials in URLs of the form user:password@host in the HTTP-Referer header are not removed. This may allow remote websites to steal user credentials for pages that link to them. The issue is a Kotlin? (not applicable) credential le...

CVE-2002-0459

Cross-site scripting vulnerability in Board-TNK 1.3.1 and earlier allows remote attackers to execute arbitrary Javascript via the WEB parameter...

CVE-2002-0459

CVE-2002-0459 describes a cross-site scripting vulnerability in Board-TNK 1.3.1 and earlier. The flaw allows remote attackers to execute arbitrary JavaScript via the WEB parameter, indicating a client-side scripting input handling weakness that leads to code execution in the context of authentica...

CVE-2002-0459

Cross-site scripting vulnerability in Board-TNK 1.3.1 and earlier allows remote attackers to execute arbitrary Javascript via the WEB parameter...

CVE-2001-0459

CVE-2001-0459 corresponds to buffer overflows in the ascdc component of AfterStep when run with setuid. The vulnerability allows local users to gain root privileges by providing excessively long arguments via the long options -d, -m, or -f. The connected sources confirm the affected component and...

CVE-2001-0459

Buffer overflows in ascdc Afterstep while running setuid allows local users to gain root privileges via a long 1 -d option, 2 -m option, or 3 -f option...

CVE-2000-0459

The CVE-2000-0459 issue affects IMP with the MSWordView process. The root cause is that IMP does not remove files properly when MSWordView quits, allowing a local attacker to cause a denial of service by depleting disk space through repeated requests for a large number of documents and an early t...

CVE-2000-0459

IMP does not remove files properly if the MSWordView application quits, which allows local users to cause a denial of service by filling up the disk space by requesting a large number of documents and prematurely stopping the request...

CVE-2000-0459

IMP does not remove files properly if the MSWordView application quits, which allows local users to cause a denial of service by filling up the disk space by requesting a large number of documents and prematurely stopping the request...