132 matches found
RHEL 2.1 : postgresql (RHSA-2003:314)
Updated PostgreSQL packages that correct a buffer overflow in the toascii routines are now available. PostgreSQL is an advanced Object-Relational database management system DBMS. Two bugs that can lead to buffer overflows have been found in the PostgreSQL abstract data type to ASCII conversion...
PostgreSQL to_ascii() Function Remote Overflows
According to its version number, the PostgreSQL server listening on this port is vulnerable to two buffer overflows in the toascii function that could allow an attacker who can query the remote database to execute arbitrary code, subject to the privileges under which the service operates...
CVE-2003-0901
Buffer overflow in toascii for PostgreSQL 7.2.x, and 7.3.x before 7.3.4, allows remote attackers to execute arbitrary code...
CVE-2003-0901
The CVE-2003-0901 issue affects PostgreSQL 7.2.x and 7.3.x up to 7.3.3 (before 7.3.4) with a buffer overflow in the to_ascii conversion function, allowing remote code execution. Debian, Red Hat, Mandrake/Mandriva and other advisories describe the vulnerability and the need to upgrade to patched p...
CVE-2003-0901
Buffer overflow in toascii for PostgreSQL 7.2.x, and 7.3.x before 7.3.4, allows remote attackers to execute arbitrary code...
CVE-2002-0901
Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver AMANDA 2.3.0.4 allow 1 remote attackers to execute arbitrary code via long commands to the amindexd daemon, or certain local users to execute arbitrary code via long command line arguments to the programs 2 amcheck, 3...
CVE-2002-0901
CVE-2002-0901 affects AMANDA 2.3.0.4. The vulnerability arises from multiple buffer overflows in the AMANDA components, allowing remote attackers to execute arbitrary code via long commands to the amindexd daemon, or local users via long command-line arguments to programs such as amcheck, amgetid...
CVE-2002-0901
Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver AMANDA 2.3.0.4 allow 1 remote attackers to execute arbitrary code via long commands to the amindexd daemon, or certain local users to execute arbitrary code via long command line arguments to the programs 2 amcheck, 3...
CVE-2001-0901
Hypermail allows remote attackers to execute arbitrary commands on a server supporting SSI via an attachment with a .shtml extension, which is archived on the server and can then be executed by requesting the URL for the attachment...
CVE-2000-0901
The vulnerability CVE-2000-0901 affects the screen program (versions 3.9.5 and earlier). It stems from a format string vulnerability in the vbell_msg initialization, enabling local users to gain root privileges. Exploitation details are not provided in the supplied documents, and a remediation/pa...
CVE-1999-0901
CVE-1999-0901 affects the ypserv component (noted as ypserv 4.1-4 in some feeds). The description across Red Hat and CVE records states that a local user can modify the GECOS field and login shells of other users, indicating an unauthorized local privilege impact. The Red Hat/Red Hat-linked entri...