91 matches found
CVE-2005-0638
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command...
CVE-2005-0638
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command...
CVE-2005-0638
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command...
CVE-2005-0638
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command...
CVE-2004-0638
The CVE-2004-0638 entry describes a buffer overflow in Oracle’s dbms_system.ksdwrt function (KSDWRTB) that affects Oracle 8i Release 1 8.1.7.4 and Oracle 9i Release 1/2 (9.0.1.4, 9.0.1.5, 9.2.0.3, 9.2.0.4). The vulnerability arises when a long second argument is passed, enabling remote authorized...
CVE-2003-0638
This CVE (CVE-2003-0638) affects Novell iChain 2.1 prior to Field Patch 3 and iChain 2.2 prior to Field Patch 1a. The vulnerability consists of multiple buffer overflows that can cause a denial of service (ABEND) and may allow arbitrary code execution. Exploitation is described as possible via (1...
CVE-2002-0638
CVE-2002-0638 concerns the util-linux package’s login utilities (notably setpwnam.c used by chfn/chsh). The advisory describes a race condition caused by inadequate locking of a temporary file used when modifying /etc/passwd, enabling a local attacker to escalate privileges. The issue affects Red...
CVE-2002-0638
setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a temporary file when modifying /etc/passwd, which may allow local users to gain privileges via a complex race condition that uses an open file descriptor in...
CVE-2000-0638
CVE-2000-0638 affects Big Brother’s bb-hostsvc.sh CGI. The vulnerability is a directory traversal in the HOSTSVC parameter, allowing a remote attacker to read arbitrary files on the affected system. Affected: Big Brother 1.4h1 and earlier. Root cause: input containing ".." used to traverse filesy...