Gentoo Security Advisory GLSA 200803-23 (wml)

The remote host is missing updates announced in advisory GLSA 200803-23. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200803-23 (wml)

The remote host is missing updates announced in advisory GLSA 200803-23. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2008-3789

Samba 3.2.0 uses weak permissions 0666 for the 1 groupmapping.tdb and 2 groupmapping.ldb files, which allows local users to modify the membership of Unix groups...

[SECURITY] [DSA 1492-2] New wml packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1492-2 [email protected] http://www.debian.org/security/ Martin Schulze April 27th, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1492-1] New wml packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1492-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 10, 2008 http://www.debian.org/security/faq -...

CVE-2008-0666

Website META Language WML 2.0.11 allows local users to overwrite arbitrary files via a symlink attack on 1 the /tmp/pe.tmp.$$ temporary file used by wmlcontrib/wmg.cgi and 2 temporary files used by wmlbackend/p3eperl/eperlsys.c...

CVE-2008-0666

CVE-2008-0666 affects Website META Language (WML) 2.0.11. Local attackers can exploit insecure temporary files created by wml_contrib/wmg.cgi, wml_backend/p3_eperl/eperl_sys.c, and ipp-related paths (e.g., /tmp/pe.tmp.$$) via symlinks to overwrite or modify files. Impact is local. The vulnerabili...

[SECURITY] [DSA 1492-1] New wml packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1492-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 10, 2008 http://www.debian.org/security/faq -...

CVE-2007-0666

IPSwith WS_FTP Server 5.04 is affected by CVE-2007-0666. A long input string to the iFTPAddU or iFTPAddH file, or to an edition module, triggers arbitrary code execution on the server due to improper input handling. The connected sources identify the affected component and the root cause (input h...

linux/x86 chmod 0666 /etc/shadow 36 bytes

No description provided by source. / By Kris Katterjohn 8/29/2006 36 byte shellcode to chmod"/etc/shadow", 0666 and exit for Linux/x86 To remove exit: Remove the last 5 bytes 0x6a - 0x80 section .text global start start: xor edx, edx push byte 15 pop eax push edx push byte 0x77 push word 0x6f64...

CVE-2006-0666

The CVE-2006-0666 entry concerns IBM AIX 5.3 VRMF 5.3.0.30–5.3.0.33 (kernels unix_mp and unix_64). The vulnerability enables local users to cause a denial-of-service (system crash) via unknown vectors related to EMULATE_VMX. Documents do not specify the exact affected component, exploit details, ...

linux/x86 chmod/etc/shadow, 0666 + exit 32 bytes

linux/x86 chmod/etc/shadow, 0666 + exit 32 bytes. Shellcode exploit for linx86 platform / linux/x86 chmod"/etc/shadow", 0666 + exit - 32 bytes - izik / char shellcode = "\x6a\x0f" // push $0xf "\x58" // pop %eax "\x31\xc9" // xor %ecx,%ecx "\x51" // push %ecx "\x66\xb9\xb6\x01" // mov $0x1b6,%cx...

linux/x86 chmod(/etc/shadow, 0666) + exit() 32 bytes

Exploit for linux/x86 platform in category shellcode ==================================================== linux/x86 chmod/etc/shadow, 0666 + exit 32 bytes ==================================================== / linux/x86 chmod"/etc/shadow", 0666 + exit - 32 bytes - izik / char shellcode = "\x6a\x0...

CVE-2005-0666

The CVE-2005-0666 entry describes an unknown vulnerability in PaX (Sept 2003 release to 2.2 before 2005.03.05) related to SEGMEXEC or RANDEXEC and VMA mirroring that allows local users and possibly remote attackers to bypass access restrictions and execute arbitrary code. The provided sources rei...

CVE-2004-0666

Off-by-one error in the POP3readmsg function in popclient 3.0b6 allows remote attackers to cause a denial of service application crash via an e-mail message with a certain line length, which leads to a buffer overflow...

CVE-2004-0666

Off-by-one error in the POP3readmsg function in popclient 3.0b6 allows remote attackers to cause a denial of service application crash via an e-mail message with a certain line length, which leads to a buffer overflow...

CVE-2004-0666

The CVE-2004-0666 issue is in popclient 3.0b6, specifically the POP3_readmsg function. An off-by-one error can trigger a buffer overflow when processing a mail message with a certain line length, allowing remote attackers to cause a denial of service (application crash). The provided documents id...

CVE-2003-0666

Buffer overflow in Microsoft Wordperfect Converter allows remote attackers to execute arbitrary code via modified data offset and data size parameters in a Corel WordPerfect file...

CVE-2003-0666

CVE-2003-0666 describes a buffer overflow in Microsoft WordPerfect Converter that allows remote code execution via crafted Corel WordPerfect files. The vulnerability arises from manipulated data offset and data size parameters in the converter. Impact is remote, with potential arbitrary code exec...

CVE-2002-0666

CVE-2002-0666 affects multiple IPsec implementations (notably FreeS/WAN and KAME). The root cause is incorrect calculation of the authentication data length for very small ESP datagrams, which can result in an unsigned integer overflow and cause a kernel panic (remote denial of service). The NVD/...