176 matches found
cpio security update
CentOS Errata and Security Advisory CESA-2005:806-01 An updated cpio package that fixes multiple issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. GNU cpio copies files into or out of a cpio or tar archive. A race condition bu...
RHEL 4 : cpio (RHSA-2005:378)
The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:378 advisory. GNU cpio copies files into or out of a cpio or tar archive. A race condition bug was found in cpio. It is possible for a local malicious user to modif...
Mandrake Linux Security Advisory : cpio (MDKSA-2005:116-1)
A race condition has been found in cpio 2.6 and earlier which allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by cpio after the decompression is complete CVE-2005-1111. A vulnerability has...
CVE-2003-1111
The Session Initiation Protocol SIP implementation in multiple dynamicsoft products including y and certain demo products for AppEngine allows remote attackers to cause a denial of service or execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suit...
CVE-2004-1111
Cisco IOS 2.218EW, 12.218EWA, 12.214SZ, 12.218S, 12.218SE, 12.218SV, 12.218SW, and other versions without the "no service dhcp" command, keep undeliverable DHCP packets in the queue instead of dropping them, which allows remote attackers to cause a denial of service dropped traffic via multiple...
CVE-2004-1111
The CVE-2004-1111 issue affects Cisco IOS versions including 2.2(18)EW and 12.2(18)S/SE/SV/SW (and others) that run DHCP server/relay without the no service dhcp setting. The bug causes undeliverable DHCP packets to remain in the input queue and may exhaust it, allowing remote attackers to trigge...
CVE-2004-1111
Cisco IOS 2.218EW, 12.218EWA, 12.214SZ, 12.218S, 12.218SE, 12.218SV, 12.218SW, and other versions without the "no service dhcp" command, keep undeliverable DHCP packets in the queue instead of dropping them, which allows remote attackers to cause a denial of service dropped traffic via multiple...
CVE-2002-1111
CVE-2002-1111 affects Mantis (print_all_bug_page.php) in versions 0.17.3 and earlier where limit_reporters is not enforced, allowing remote attackers to view bug summaries for bugs they should not see. The Debian advisory for DSA-153-1 states the issue, including the specific vulnerability in the...
CVE-2002-1111
printallbugpage.php in Mantis 0.17.3 and earlier does not verify the limitreporters option, which allows remote attackers to view bug summaries for bugs that would otherwise be restricted...
CVE-2003-1111
The Session Initiation Protocol SIP implementation in multiple dynamicsoft products including y and certain demo products for AppEngine allows remote attackers to cause a denial of service or execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suit...
CVE-2001-1111
CVE-2001-1111 concerns EFTP 2.0.7.337, where user passwords are stored in plaintext in the file eftp2users.dat. The issue is a plaintext credential exposure, with the NVD vector indicating local access, low complexity, and no authentication required to obtain partial confidentiality, partial inte...
CVE-1999-1111
The CVE-1999-1111 entry describes a vulnerability in StackGuard before 1.21 where an attacker can bypass Random and Terminator Canary protections by a non-linear attack that directly modifies the return-address pointer instead of overflowing a buffer. Documents do not provide exploitation details...
CVE-2000-1111
Telnet Service for Windows 2000 Professional does not properly terminate incomplete connection attempts, which allows remote attackers to cause a denial of service by connecting to the server and not providing any input...
CVE-2001-1111
EFTP 2.0.7.337 stores user passwords in plaintext in the eftp2users.dat file...
CVE-2000-1111
Telnet Service for Windows 2000 Professional does not properly terminate incomplete connection attempts, which allows remote attackers to cause a denial of service by connecting to the server and not providing any input...
