115 matches found
RHEL 3 / 4 : gaim (RHSA-2005:365)
An updated gaim package that fixes multiple denial of service issues is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. A buffer overflow bug was found in the wa...
CVE-2005-0966
CVE-2005-0966 concerns the IRC protocol handling in Gaim (GAIM) 1.2.0 and possibly earlier. The vulnerability stems from how IRC messages are processed by the IRC protocol plugin, allowing remote attackers to inject arbitrary markup into the Gaim UI via functions such as irc_msg_kick, irc_msg_mod...
CVE-2004-0966
The 1 autopoint and 2 gettextize scripts in the GNU gettext package 1.14 and later versions, as used in Trustix Secure Linux 1.5 through 2.1 and other operating systems, allows local users to overwrite files via a symlink attack on temporary files...
CVE-2004-0966
The 1 autopoint and 2 gettextize scripts in the GNU gettext package 1.14 and later versions, as used in Trustix Secure Linux 1.5 through 2.1 and other operating systems, allows local users to overwrite files via a symlink attack on temporary files...
CVE-2004-0966
The 1 autopoint and 2 gettextize scripts in the GNU gettext package 1.14 and later versions, as used in Trustix Secure Linux 1.5 through 2.1 and other operating systems, allows local users to overwrite files via a symlink attack on temporary files...
CVE-2004-0966
CVE-2004-0966 : The GNU gettext package (versions 1.14 and later) contains insecure handling in the autopoint and gettextize scripts that can create or overwrite files via a symlink attack on temporary files. This affects Trustix Secure Linux 1.5–2.1 and other OSs that ship gettext. The vulnerabi...
CVE-2004-0966
The 1 autopoint and 2 gettextize scripts in the GNU gettext package 1.14 and later versions, as used in Trustix Secure Linux 1.5 through 2.1 and other operating systems, allows local users to overwrite files via a symlink attack on temporary files...
CVE-2003-0966
CVE-2003-0966 affects the Elm mail user agent’s frm command. A buffer overflow in the frm command allows a remote attacker to cause arbitrary code execution by sending a message with an excessively long Subject line, affecting Elm versions 2.5.6 and earlier (potentially later). The issue is docum...
CVE-2003-0966
Buffer overflow in the frm command in elm 2.5.6 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code via a long Subject line...
RHEL 2.1 : elm (RHSA-2004:009)
Updated elm packages are now available that fix a buffer overflow vulnerability in the 'frm' command. Elm is a terminal mode email user agent. The frm command is provided as part of the Elm packages and gives a summary list of the sender and subject of selected messages in a mailbox or folder. A...
CVE-2002-0966
CVE-2002-0966 describes a buffer overflow in the 4D web server version 6.7.3 that can be triggered by parsing a long HTTP request. The impact cited is remote denial of service and potential arbitrary code execution. The provided sources (NVD entry) corroborate the vulnerability description; no ex...
CVE-2001-0966
CVE-2001-0966 describes a directory traversal vulnerability in Nudester 1.10 and earlier that allows remote attackers to read or write arbitrary files via the .. sequence in the CD (CWD) command. The provided sources do not include remediation details; no explicit exploit or affected versions bey...
CVE-2001-0966
Directory traversal vulnerability in Nudester 1.10 and earlier allows remote attackers to read or write arbitrary files via a .. dot dot in the CD CWD command...
CVE-2000-0966
CVE-2000-0966 refers to a buffer overflow in HP-UX 11.0 (and earlier) specifically in the lpspooler component of the fileset PrinterMgmt.LP-SPOOL. The underlying issue is a buffer overflow that could allow a local user to gain privileges. The public sources in the provided documents confirm affec...