Debian DSA-1198-1 : python2.3 - buffer overflow

Benjamin C. Wiley Sittler discovered that the repr of the Python interpreter allocates insufficient memory when parsing UCS-4 Unicode strings, which might lead to execution of arbitrary code through a buffer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

CVE-2005-1198

CVE-2005-1198 describes a directory traversal vulnerability in apexec.pl used by the Anaconda Foundation Directory. The flaw allows remote attackers to read arbitrary files by inserting hex-encoded null characters (%00) within the middle of '..' sequences in the template parameter. The NVD entry ...

CVE-2004-1198

The provided documents describe CVE-2004-1198 as a vulnerability in Microsoft Internet Explorer that allows remote attackers to cause a denial of service via memory consumption. Specifically, a demo uses JavaScript that repeatedly creates nested arrays and then sorts them, leading to an applicati...

CVE-2002-1198

Bugzilla 2.16.x before 2.16.1 does not properly filter apostrophes from an email address during account creation, which allows remote attackers to execute arbitrary SQL via a SQL injection attack...

CVE-2001-1198

CVE-2001-1198 affects HP-UX 10.20 and 11.0. The vulnerability in RLPDaemon lets local users overwrite arbitrary files and gain privileges by specifying the target file in the -L option. The provided documents do not include exploit details, workaround, or confirmed patch information.

CVE-1999-1198

The vulnerability affects the BuildDisk program on NeXT systems prior to 2.0. It fails to prompt for the root password, enabling local users to gain root privileges. Root cause: missing authentication prompt in BuildDisk. Impact: local privilege escalation with complete compromise of the affected...

CVE-2001-1198

RLPDaemon in HP-UX 10.20 and 11.0 allows local users to overwrite arbitrary files and gain privileges by specifying the target file in the -L option...

CVE-2000-1198

CVE-2000-1198 affects the qpopper POP server. The vulnerability arises from lock files being created with predictable names, enabling a local attacker to cause a denial of service for other users by creating lock files for other mail boxes. The available connected documents describe the issue and...

CVE-2000-1198

qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users lack of mail access by creating lock files for other mail boxes...