Debian DSA-1163-1 : gtetrinet - programming error

Michael Gehring discovered several potential out-of-bounds index accesses in gtetrinet, a multiplayer Tetris-like game, which may allow a remote server to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CVE-2006-1163

The CVE-2006-1163 entry concerns Nodez 4.6.1.1, affected by a Cross‑Site Scripting (XSS) vulnerability that allows remote attackers to inject arbitrary script/HTML via the op parameter. The vulnerability may originate from a directory traversal issue, as noted in the description. Documents do not...

CVE-2003-1163

CVE-2003-1163 affects Ganglia gmond 2.5.3. The vulnerability arises in hash.c where a UDP packet containing a single-byte name string is used as an out-of-bounds array index, causing a remote denial of service (segmentation fault). Exploitation details are not provided beyond the description, and...

CVE-2005-1163

CVE-2005-1163 describes multiple buffer overflows in Yager 5.24 and earlier that allow remote attackers to execute arbitrary code via (1) a crafted nickname or (2) a packet with a large amount of data. The NVD entries indicate a network-exposed vulnerability with low attack complexity and no auth...

CVE-2004-1163

Cisco CNS Network Registrar Central Configuration Management CCM server 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service CPU consumption by ending a connection after sending a certain sequence of packets...

CVE-2004-1163

Cisco CNS Network Registrar Central Configuration Management CCM server 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service CPU consumption by ending a connection after sending a certain sequence of packets...

CVE-2003-1163

hash.c in Ganglia gmond 2.5.3 allows remote attackers to cause a denial of service segmentation fault via a UDP packet that contains a single-byte name string, which is used as an out-of-bounds array index...

CVE-2001-1163

Buffer overflow in Munica Corporation NetSQL 1.0 allows remote attackers to execute arbitrary code via a long CONNECT argument to port 6500...

CVE-1999-1163

CVE-1999-1163 describes a vulnerability in HP Series 800 S/X/V Class servers where the Service Support Processor (SSP) Teststation allows remote attackers to gain access to the S/X/V Class console. The NVD entry lists an attack vector of NETWORK with no authentication and indicates partial impact...

CVE-2000-1163

CVE-2000-1163 affects Ghostscript prior to 5.10-16, which uses an insecure LD_RUN_PATH value to locate libraries in the current directory. This enables a local attacker to place a Trojan horse library in a directory from which another user runs Ghostscript, potentially executing code with the use...

CVE-2000-1163

ghostscript before 5.10-16 uses an empty LDRUNPATH environmental variable to find libraries in the current directory, which could allow local users to execute commands as other users by placing a Trojan horse library into a directory from which another user executes ghostscript...