Low: Red Hat Security Advisory: ia32el security update

An updated ia32el package that fixes several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The ia32el package contains IA-32 Execution Layer platform which allows emulation of IA-32 binaries on IA-64. A flaw was found in the...

CVE-2005-1072

The CVE-2005-1072 entry describes a Cross-site Scripting (XSS) vulnerability in PunBB versions prior to 1.2.5, allowing remote attackers to inject arbitrary web script or HTML. The description explicitly states the affected product and the vulnerability type, with the impact limited to injection ...

CVE-2003-1072

Memory leak in lofiadm in Solaris 8 allows local users to cause a denial of service kernel memory consumption...

CVE-2003-1072

CVE-2003-1072 pertains to Solaris 8 where a memory leak in the /kernel/drv/lofi driver and the /usr/sbin/lofiadm utility can be triggered by local users, leading to kernel memory consumption and potential denial of service. The OpenVAS entries reference a Solaris Update patch 114162-01 addressing...

CVE-2004-1072

The binfmtelf loader binfmtelf.c in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, may create an interpreter name string that is not NULL terminated, which could cause strings longer than PATHMAX to be used, leading to buffer overflows that allow local users to cause a denial of service...

CVE-2004-1072

CVE-2004-1072 describes a vulnerability in the Linux kernel where the binfmt_elf loader (binfmt_elf.c) may create an interpreter name string that is not NULL terminated, allowing strings longer than PATH_MAX to be used. This can cause buffer overflows that may lead to a local denial of service (h...

RPC nfs_acl Service In Use

Binary data 1072.prm...

CVE-2003-1072

Memory leak in lofiadm in Solaris 8 allows local users to cause a denial of service kernel memory consumption...

CVE-2002-1072

CVE-2002-1072 affects ZyXEL Prestige devices (642R and Prestige 310) due to a vulnerability in handling oversized, fragmented ICMP packets (jolt style). The issue allows remote attackers to induce a denial of service. The available sources confirm affected models and the general impact (availabil...

CVE-2001-1072

CVE-2001-1072 affects Apache with mod_rewrite enabled on UNIX systems. The vulnerability arises when an attacker can insert extra / characters into the requested path, causing the RewriteRule’s regular expression to fail and allowing the path to bypass RewriteRules. The affected component is mod_...

CVE-1999-1072

Excite for Web Servers EWS 1.1 allows local users to gain privileges by obtaining the encrypted password from the world-readable Architext.conf authentication file and replaying the encrypted password in an HTTP request to AT-generated.cgi or AT-admin.cgi...

CVE-1999-1072

Excite for Web Servers (EWS) 1.1 is affected by a local-privilege escalation where an attacker who can read Architext.conf (world-readable) can obtain the encrypted password and replay it in an HTTP request to AT-generated.cgi or AT-admin.cgi to gain privileges. Root cause: the password is stored...

CVE-2001-1072

Apache with modrewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra / slash characters into the requested path, which causes the regular expression in the RewriteRule to fail...

CVE-2000-1072

iCal 2.1 Patch 2 installs many files with world-writeable permissions, which allows local users to modify the iCal configuration and execute arbitrary commands by replacing the iplncal.sh program with a Trojan horse...

CVE-2000-1072

CVE-2000-1072 affects iCal 2.1 Patch 2 where multiple files are installed with world-writable permissions. This allows a local user to modify the iCal configuration and, by replacing the iplncal.sh program with a Trojan horse, execute arbitrary commands. The underlying issue is improper permissio...

CVE-1999-1072

Excite for Web Servers EWS 1.1 allows local users to gain privileges by obtaining the encrypted password from the world-readable Architext.conf authentication file and replaying the encrypted password in an HTTP request to AT-generated.cgi or AT-admin.cgi...