78 matches found
CVE-2006-0525
CVE-2006-0525 affects multiple Adobe products (notably Photoshop CS2, Illustrator CS2, and Adobe Help Center) where a large number of .EXE and .DLL files are installed with write-access for the Everyone group. This local-privilege-escalation vulnerability allows bypassing protections via Trojan h...
RHEL 3 : PHP (RHSA-2005:405)
Updated PHP packages that fix various security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A bug was found in the way PHP...
SUSE-SA:2005:023: php4, php5
The remote host is missing the patch for the advisory SUSE-SA:2005:023 php4, php5. This update fixes the following security issues in the PHP scripting language: - A bug in getimagesize EXIF handling which could lead to a denial of service attack. This is tracked by the Mitre CVE IDs CVE-2005-052...
CVE-2005-0525
The CVE-2005-0525 entry concerns PHP’s image.c: The function php_next_marker, reachable via getimagesize, is invoked by a JPEG image with an invalid marker value. This triggers a denial-of-service via an infinite loop caused by passing a negative length to php_stream_seek, affecting PHP versions ...
CVE-2004-0525
HP Integrated Lights-Out iLO 1.10 and other versions before 1.55 allows remote attackers to cause a denial of service hang by accessing iLO using the TCP/IP reserved port zero...
CVE-2004-0525
HP Integrated Lights-Out iLO 1.10 and other versions before 1.55 allows remote attackers to cause a denial of service hang by accessing iLO using the TCP/IP reserved port zero...
CVE-2003-0525
The getCanonicalPath function in Windows NT 4.0 may free memory that it does not own and cause heap corruption, which allows attackers to cause a denial of service crash via requests that cause a long file name to be passed to getCanonicalPath, as demonstrated on the IBM JVM using a long string t...
CVE-2003-0525
The getCanonicalPath function in Windows NT 4.0 may free memory that it does not own and cause heap corruption, which allows attackers to cause a denial of service crash via requests that cause a long file name to be passed to getCanonicalPath, as demonstrated on the IBM JVM using a long string t...
CVE-2003-0525
CVE-2003-0525 describes a heap corruption flaw in Windows NT 4.0’s file name processing (ntdll.dll) triggered by long input passed to java.io.getCanonicalPath, allowing a denial-of-service crash (noted in IBM JVM scenarios). Affected: Windows NT 4.0 environments using IBM/JVM and Java runtimes th...
MS03-029: Flaw in Windows Function may allow DoS (823803)
The remote host is running a version of Windows NT 4.0 that has a flaw in one of its functions that could allow a user to cause a denial of service on this host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11802; scriptversion"1.34"; scriptcvsdate"Date: 2018/11/15...
CVE-2002-0525
Format string vulnerabilities in 1 inews or 2 rnews for INN 2.2.3 and earlier allow local users and remote malicious NNTP servers to gain privileges via format string specifiers in NTTP responses...
CVE-2002-0525
Format string vulnerabilities in 1 inews or 2 rnews for INN 2.2.3 and earlier allow local users and remote malicious NNTP servers to gain privileges via format string specifiers in NTTP responses...
CVE-2002-0525
The CVE-2002-0525 entry corresponds to a format string vulnerability in INN components (inews or rnews) affecting INN 2.2.3 and earlier. The underlying issue is format string specifiers in NNTP (NTTP) responses, which could allow a local user or a remote malicious NNTP server to gain privileges. ...
CVE-2001-0525
CVE-2001-0525 affects dsh in dqs 3.2.7 on SuSE Linux 7.0 and earlier (and possibly other OSes). The vulnerability is a buffer overflow triggered by a long first command line argument, allowing local users to gain privileges. The available documents do not specify patches or exact affected product...
CVE-2000-0525
CVE-2000-0525: OpenSSH does not properly drop privileges when UseLogin is enabled, allowing local users to execute arbitrary commands by supplying the command to the ssh daemon. Affected: OpenSSH with UseLogin enabled. Root cause: privileges not dropped correctly after authentication. Impact: pot...
CVE-2000-0525
OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbitrary commands by providing the command to the ssh daemon...