340 matches found
Information disclosure
onedcu in IBM Informix Dynamic Server IDS 10.x before 10.00.xC8 allows local users to create arbitrary files via the Trace file argument...
Code injection
WebSpeed 3.x in OpenEdge 10.x in Progress Software Progress 9.1e, and certain other 9.x versions, allows remote attackers to cause a denial of service infinite loop and daemon hang via a messenger URL that invokes edit.r with no additional parameters, as demonstrated by requests for cgiip.exe or...
CVE-2007-2506
This CVE concerns WebSpeed 3.x in OpenEdge 10.x in Progress Software Progress 9.1e and some 9.x variants. The vulnerability allows remote attackers to cause a denial of service (infinite loop and daemon hang) by requesting a messenger URL that calls _edit.r with no additional parameters, demonstr...
Path traversal
Multiple absolute path traversal vulnerabilities in Fantastico, as used with cPanel 10.x, allow remote authenticated users to include and execute arbitrary local files via 1 the userlanguage parameter to includes/loadlanguage.php or 2 the fantasticopath parameter to includes/mysqlconfig.php and...
Apple Mac OSX 10.x - FPathConf System Call Local Denial of Service
// source: https://www.securityfocus.com/bid/20982/info Apple Mac OS X is prone to a local denial-of-service vulnerability because the kernel fails to properly handle the execution of a system call. Exploiting this issue allows local, unprivileged users to crash affected kernels, denying further...
SSA-2006-0628032502
New kdebase packages are available for Slackware 10.0, 10.1, 10.2, and -current to fix a security issue with KDM the KDE login manager which could be exploited by a local attacker to read any file on the system. The official KDE security advisory may be found here:...
MacOS 10.x VPN Detection
Binary data 3579.prm...
Solaris 10.x - ESRI Arcgis Format String Privilege Escalation
Solaris 10.x - ESRI Arcgis Format String Privilege Escalation / ESRI 9.x Arcgis local root format string exploit Copyright Kevin Finisterre and John H. Bug found by Kevin Finisterre Exploit by John H. We overwrite the thrjmptable Tested on solaris 10 / include include include include include...
HP-UX Security patch : PHSS_10786
The remote host is missing HP-UX Security Patch number PHSS10786 . Security Vulnerabilities in VirtualVault code %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17430;...
HP-UX Security patch : PHKL_12007
The remote host is missing HP-UX Security Patch number PHKL12007 . Security Vulnerability with rpc.pcnfsd %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17389; scriptversion"1.6";...
Solaris 10.x ESRI Arcgis Local Root Format String Exploit
Exploit for solaris platform in category local exploits ========================================================= Solaris 10.x ESRI Arcgis Local Root Format String Exploit ========================================================= / ESRI 9.x Arcgis local root format string exploit Copyright Kevin...
Apple Mac OSX 10.x - DirectoryService Denial of Service
// source: https://www.securityfocus.com/bid/7323/info MacOSX DirectoryService has been reported prone to a denial of service vulnerability. It has been reported that a remote attacker may trigger an exception in DirectoryService by repeatedly connecting to specific network ports. / OS X include...
HP-UX 10.x - rs.F3000 Unauthorized Access
HP-UX 10.x - rs.F3000 Unauthorized Access source: https://www.securityfocus.com/bid/6837/info The rs.F3000 binary is prone to an issue that may allow attackers to obtain unauthorized access to a vulnerable system. A denial of service attack is also possible. This is due to multiple instances of t...
CVE-1999-1144
The CVE-1999-1144 entry affects HP-UX MPower on HP-UX 10.x, where certain MPower files are installed with insecure permissions, enabling local privilege escalation due to insufficient access controls. Root cause: insecure file permissions. Connected PT-1997-1195 notes the remediation to update/se...
CVE-1999-1161
CVE-1999-1161 describes a local privilege-escalation vulnerability in HP-UX 10.x and earlier where forcing the ppl process to core-dump allows a local user to gain root privileges. Affected software: HP-UX kernel/userland component handling ppl (HP-UX 10.x and earlier). Root cause: improper handl...
CVE-2001-0488
This CVE concerns HP-UX 10.x where the pcltotiff utility has setgid permissions (sgid bin) to read fonts, allowing local users to cause denial of service. The root cause is insecure sgid settings on /opt/sharedprint/bin/pcltotiff, as described in HP advisory HPSBUX0104-149. Impact is local DoS; n...
CVE-1999-1133
CVE-1999-1133 affects HP-UX 9.x and 10.x running X Windows. Local attackers can gain privileges via the unauthenticated components vuefile, vuepad, dtfile, or dtpad. The provided sources describe the vulnerable components and the privilege escalation vector but do not specify a patch or remediati...
CVE-2001-0488
pcltotiff in HP-UX 10.x has unnecessary set group id permissions, which allows local users to cause a denial of service...
