151 matches found
RHEL 2.1 / 3 : slocate (RHSA-2004:041)
Updated slocate packages are now available that fix vulnerabilities allowing a local user to gain 'slocate' group privileges. Slocate is a security-enhanced version of locate, designed to find files on a system via a central database. Patrik Hornik discovered a vulnerability in Slocate versions u...
CVE-2003-0848
Heap-based buffer overflow in main.c of slocate 2.6, and possibly other versions, may allow local users to gain privileges via a modified slocate database that causes a negative "pathlen" value to be used...
CVE-2003-0848
...
CVE-2003-0848
CVE-2003-0848 is a heap-based buffer overflow in slocate (up to 2.7) triggered by processing a crafted slocate database, allowing a local user to gain privileges to the slocate group and access the central database. The root cause is unsafe handling of the database path and length, leading to a n...
CVE-2002-0848
Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier, when using RADIUS with a challenge type of Password Authentication Protocol PAP or Challenge, sends the user password in cleartext in a validation retry request, which could allow remote attackers to...
CVE-2002-0848
CVE-2002-0848 affects Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier. When using RADIUS with a PAP or Challenge, the system sends the user password in cleartext in a validation retry request, enabling potential password capture by remote attackers...
CVE-2001-0848
join.cfm in e-Zone Media Fuse Talk allows a local user to execute arbitrary SQL code via a semi-colon ; in a form variable...
CVE-2001-0848
CVE-2001-0848 affects join.cfm in e-Zone Media Fuse Talk, where a local user can inject and execute arbitrary SQL through a semicolon in a form variable. The vulnerability is tied to SQL injection in the application’s handling of input data, enabling partial confidentiality/integrity/availability...
CVE-2000-0848
CVE-2000-0848 describes a buffer overflow in IBM WebSphere Application Server (WAS) that allows remote attackers to execute arbitrary commands via a long Host header in HTTP requests. The vulnerability is tied to the server’s handling of the Host: header, leading to potential remote code executio...
CVE-1999-0848
CVE-1999-0848 concerns a denial-of-service in ISC BIND’s named daemon caused by consuming more than the configured fdmax file descriptors. This is confirmed by the NVD entry and Red Hat security page, both citing the same DoS vector. The provided connected documents do not specify exact affected ...