97 matches found
CVE-2005-1119
Sudo VISudo 1.6.8 and earlier allows local users to corrupt arbitrary files via a symlink attack on temporary files...
CVE-2005-1119
CVE-2005-1119 affects Sudo VISudo 1.6.8 and earlier. The vulnerability arises from a symlink attack on temporary files, enabling local users to corrupt arbitrary files. Impact is local privilege concern (I = Partial) with no confidentiality/vitality impact, per available data. The provided docume...
CVE-2003-1119
SSH Secure Shell before 3.2.9 allows remote attackers to cause a denial of service via malformed BER/DER packets...
CVE-2003-1119
SSH Secure Shell prior to 3.2.9 is affected. The vulnerability allows remote DoS through malformed BER/DER packets, caused by an issue in processing those packets. Affected products are SSH Secure Shell versions 3.2.8 and earlier; remediation is to update to the latest version. Exploitation detai...
CVE-2003-1119
SSH Secure Shell before 3.2.9 allows remote attackers to cause a denial of service via malformed BER/DER packets...
CVE-2004-1119
Stack-based buffer overflow in INCDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote attackers to execute arbitrary code via a certain .m3u playlist file...
CVE-2004-1119
Stack-based buffer overflow in INCDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote attackers to execute arbitrary code via a certain .m3u playlist file...
Debian DSA-159-1 : python - insecure temporary files
Zack Weinberg discovered an insecure use of a temporary file in os.execvpe from os.py. It uses a predictable name which could lead execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...
CVE-2002-1119
CVE-2002-1119 affects Python (os._execvpe in os.py) in Python 2.2.1 and earlier, where temporary files are created with predictable names, enabling local users to execute arbitrary code via a symlink attack. Connected sources (Debian DSAs and Red Hat/Mandrake/Nessus entries) confirm the insecure ...
RHEL 2.1 : python (RHSA-2003:048)
An insecure use of a temporary file has been found in Python. Python is an interpreted, interactive, object-oriented programming language. Zack Weinberg discovered that os.execvpe from os.py in Python 2.2.1 and earlier creates temporary files with predictable names. This could allow local users t...
CVE-2003-1119
SSH Secure Shell before 3.2.9 allows remote attackers to cause a denial of service via malformed BER/DER packets...
CVE-2002-1119
os.execvpe from os.py in Python 2.2.1 and earlier creates temporary files with predictable names, which could allow local users to execute arbitrary code via a symlink attack...
CVE-2001-1119
cda in xmcd 3.0.2 and 2.6 in SuSE Linux allows local users to overwrite arbitrary files via a symlink attack...
CVE-2001-1119
CVE-2001-1119 affects xmcd's cda (on SuSE Linux) in versions 3.0.2 and 2.6, where local users can overwrite arbitrary files via a symlink attack on insecure temporary files (in /tmp). The root cause is a symbolic link redirection vulnerability tied to setuid-enabled cda. Impact; local privilege e...
CVE-1999-1119
CVE-1999-1119 concerns the AIX FTP installation script anon.ftp, which insecurely configures anonymous FTP. The issue arises from a misconfiguration in the anonymous FTP setup, enabling remote attackers to execute arbitrary commands. Documents in the connected set confirm the description and the ...
CVE-2001-1119
cda in xmcd 3.0.2 and 2.6 in SuSE Linux allows local users to overwrite arbitrary files via a symlink attack...
CVE-2000-1119
CVE-2000-1119 : A buffer overflow in the IBM AIX setsenv command (affected: AIX 4.3.x and earlier) can allow a local attacker to execute arbitrary commands with root privileges. The root cause is a vulnerable parameter handling in the setsenv utility; an exploit has been publicly available and re...