130 matches found
CVE-2004-0544
Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the 1 putlvcb or 2 getlvcb commands...
Mandrake Linux Security Advisory : openssl (MDKSA-2003:098)
Two bugs were discovered in OpenSSL 0.9.6 and 0.9.7 by NISCC. The parsing of unusual ASN.1 tag values can cause OpenSSL to crash, which could be triggered by a remote attacker by sending a carefully-crafted SSL client certificate to an application. Depending upon the application targetted, the...
CVE-2004-0544
Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the 1 putlvcb or 2 getlvcb commands...
CVE-2004-0544
The CVE-2004-0544 issue affects LVM on AIX 5.1/5.2, with multiple buffer overflows in putlvcb and getlvcb that enable local privilege escalation. Connected Nessus entries indicate vendor patches IY55681 (AIX 5.1) and IY55682 (AIX 5.2) to mitigate the vulnerability. Practically, systems running af...
CVE-2003-0544
...
CVE-2003-0544
OpenSSL 0.9.6 and 0.9.7 are affected by DoS vulnerabilities stemming from ASN.1 parsing issues, specifically CVE-2003-0544 (incorrect character counting in long-form ASN.1 inputs causing a crash via an SSL client certificate) and CVE-2003-0543 (integer overflow in ASN.1 handling). Affected produc...
CVE-2002-0544
CVE-2002-0544 affects Aprelium Abyss Web Server (abyssws) before 1.0.3. The administrative console password is stored in plaintext in the abyss.conf file, allowing local users who can access the file to gain privileges. The connected documents provide the vulnerability description but do not spec...
CVE-2001-0544
CVE-2001-0544 affects IIS 5.0. A crafted invalid MIME Content-Type header can cause a denial of service by corrupting the File Type table. Local user access, no authentication required, partial availability impact. Connected docs mention related MS01-044 references; no patch/fix details are provi...
CVE-2000-0544
CVE-2000-0544 affects Windows NT and Windows 2000 hosts due to malformed DCE/RPC SMBwriteX requests carrying an invalid data length, enabling a remote attacker to cause a denial of service. The connected Nessus plugin MS00-066 indicates a patch (hotfix Q272303) addressing this issue; the descript...