Gentoo Security Advisory GLSA 200409-11 (star)

The remote host is missing updates announced in advisory GLSA 200409-11. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-0850

CVE-2008-0850 concerns Dokeos 1.8.4 with multiple SQL injection vulnerabilities. The affected components include: (1) id parameter in whoisonline.php, (2) tracking_list_coaches_column parameter in main/mySpace/index.php, (3) tutor_name parameter in main/create_course/add_course.php, (4) Referer H...

CVE-2007-0850

CVE-2007-0850 affects SysCP up to version 1.2.15. The flaw resides in scripts/cronscript.php, which can include and execute arbitrary PHP scripts listed in the panel_cronscript table. An attacker with database write privileges can inject a PHP filename into that table to achieve arbitrary code ex...

CVE-2006-0850

SQL injection vulnerability in include/includes/user/login.php in ilchClan before 1.05g allows remote attackers to execute arbitrary SQL commands via the loginname parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-0850

SQL injection vulnerability in include/includes/user/login.php in ilchClan before 1.05g allows remote attackers to execute arbitrary SQL commands via the loginname parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-0850

The CVE concerns ilchClan (CMS) before version 1.05g, specifically the login routine at include/includes/user/login.php. The vulnerability is an SQL injection in the login_name parameter, allowing remote attackers to execute arbitrary SQL commands. Affected component: login.php handling in ilchCl...

CVE-2005-0850

FileZilla FTP server before 0.9.6 allows remote attackers to cause a denial of service via a request for a filename containing an MS-DOS device name such as CON, NUL, COM1, LPT1, and others...

CVE-2005-0850

Vulnerability summary (CVE-2005-0850): FileZilla FTP Server prior to 0.9.6 is susceptible to denial of service when a client requests a filename containing MS-DOS device names (e.g., CON, NUL, COM1, LPT1). The issue is confirmed in multiple security feeds, and related Nessus findings also describ...

CVE-2004-0850

Star before 1.5alpha46 does not drop the effective user ID euid before calling external programs, which could allow local users to gain privileges by modifying the RSH environment variable to reference a malicious program...

CVE-2004-0850

CVE-2004-0850 affects the Star archiver. Star versions before 1.5_alpha46 do not drop the effective user ID when invoking the program specified by the RSH environment variable, allowing a local user to gain privileges by referencing a malicious program. The issue is a Suid/root vulnerability with...

CVE-2004-0850

Star before 1.5alpha46 does not drop the effective user ID euid before calling external programs, which could allow local users to gain privileges by modifying the RSH environment variable to reference a malicious program...

CVE-2002-0850

The CVE-2002-0850 issue affects PGP Corporate Desktop 7.1.1 . A buffer overflow occurs when handling an encrypted document with a very long filename, which can be exploited to cause a crash or remote code execution when the file is decrypted. Exploitation scenarios described in the accompanying a...

CVE-2003-0850

...

CVE-2003-0850

The TCP reassembly functionality in libnids before 1.18 allows remote attackers to cause "memory corruption" and possibly execute arbitrary code via "overlarge TCP packets."...

Libnids <= 1.17 buffer overflow

Hello, Libnids is a library which implements the functionality of NIDS E-component. Libnids provides IP defragmentation, TCP stream reassembly and port scan detection. Robert Watson [email protected] has found a bug in the part of libnids code responsible for TCP reassembly. The flaw probably...

CVE-2003-0850

The TCP reassembly functionality in libnids before 1.18 allows remote attackers to cause "memory corruption" and possibly execute arbitrary code via "overlarge TCP packets."...

CVE-2003-0850

CVE-2003-0850 affects libnids prior to 1.18, where the TCP reassembly code can be triggered by overlarge TCP packets, leading to memory corruption and potential remote code execution. Public advisories note a remote vulnerability in libnids and recommend upgrading to libnids 1.18 or newer (e.g., ...

CVE-2001-0850

A configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the snprintf and vsnprintf functions, which could allow local or remote users to exploit those functions with a buffer overflow...

CVE-2001-0850

The CVE-2001-0850 entry concerns a configuration error in the libdb1 package of OpenLinux 3.1. The vulnerability arises from insecure versions of snprintf and vsnprintf used by libdb1, which could allow local or remote users to trigger a buffer overflow. Affected software: OpenLinux 3.1 (libdb1)....

CVE-2001-0850

A configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the snprintf and vsnprintf functions, which could allow local or remote users to exploit those functions with a buffer overflow...