Debian DSA-1220-1 : pstotext - insecure file name quoting

Brian May discovered that pstotext, a utility to extract plain text from Postscript and PDF files, performs insufficient quoting of file names, which allows execution of arbitrary shell commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

DSA-1220-1 pstotext

Bulletin has no description...

CVE-2006-1220

CVE-2006-1220 affects the Mac OS X kernel’s mach_msg_send function, where an integer overflow in handling large message headers can trigger a heap-based buffer overflow. The vulnerability may allow local users to execute arbitrary code, as described by the NVD entry, with a Local attack vector an...

Quicktime/Darwin 4.1.x Streaming Administration Server 'parse_xml.cgi' Multiple Vulnerabilities

QuickTime/Darwin streaming administration server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2005 Michael Scheidell Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

[Full-disclosure] APPLE Darwin Streaming Server Web Admin Remote Denial of Serivce

APPLE Darwin Streaming Server Web Admin Remote Denial of Serivce By Sowhat 2005.07.13 http://secway.org/Advisory/AD20050713.txt Vendor Apple Inc. Product Affected Darwin Streaming Server 5.5 and below for Win32 CVE-ID: CAN-2005-2195 OverView: Darwin Streaming Server is server technology allowing...

CVE-2005-1220

The CVE-2005-1220 entry describes an information-disclosure vulnerability in Shoutbox SCRIPT 3.0.2 and earlier. An attacker could trigger a direct request to db/settings.dat to obtain usernames and password hashes, indicating a partial confidentiality impact. The connected documents confirm the a...

CVE-2000-1220

CVE-2000-1220 affects the line printer daemon (lpd) in the lpr package across multiple Linux distributions. The vulnerability lets local users gain root privileges by causing sendmail to be invoked with arbitrary command line arguments through a crafted -C configuration file option. This is trigg...

CVE-2000-1220

The line printer daemon lpd in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file...

CVE-2004-1220

Battlefield 1942 1.6.19 and earlier, and Battlefield Vietnam 1.2 and earlier, allows a remote master server to cause a denial of service client crash via a server reply that contains a large numplayers value, which triggers a null dereference...

CVE-2004-1220

Battlefield 1942 (1.6.19 and earlier) and Battlefield Vietnam (1.2 and earlier) are affected. A remote master server can cause a denial of service (client crash) by replying with a large numplayers value, which triggers a null dereference on the client. This describes the vulnerability and impact...

CVE-2004-1220

Battlefield 1942 1.6.19 and earlier, and Battlefield Vietnam 1.2 and earlier, allows a remote master server to cause a denial of service client crash via a server reply that contains a large numplayers value, which triggers a null dereference...

CVE-2002-1220

BIND 8.3.x–8.3.3 is affected by CVE-2002-1220: remote denial of service (termination due to assertion failure) triggered by a request for a non-existent subdomain containing an OPT RR with a large UDP payload. The available sources confirm the affected range and the impact but do not provide expl...

CVE-2003-0502

Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to cause a denial of service crash via a .. dot dot sequence followed by an MS-DOS device name e.g. AUX in a request to HTTP port 1220, a different vulnerability than CVE-2003-0421...

CVE-2003-0502

CVE-2003-0502 affects Apple QuickTime / Darwin Streaming Server up to version 4.1.3g. The vulnerability enables a remote denial-of-service (crash) when a crafted HTTP request to port 1220 contains a \..\ sequence followed by an MS-DOS device name (e.g., AUX). The condition is that the software is...

CVE-2002-1220

BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service termination due to assertion failure via a request for a subdomain that does not exist, with an OPT resource record with a large UDP payload size...

CVE-2001-1220

CVE-2001-1220 affects the D-Link DWL-1000AP Wireless LAN Access Point with firmware 3.2.28 #483. The root cause is storing the administrative password in plaintext in the default Management Information Base (MIB), allowing remote attackers to gain administrative privileges. No remediation details...

CVE-1999-1220

CVE-1999-1220 affects Majordomo 1.94.3 and earlier. The vulnerability lies in the advertise/noadvertise directives in a configuration file, where shell metacharacters in the Reply-To header can allow a remote attacker to execute arbitrary commands. According to the provided description, exploitat...

CVE-1999-1220

Majordomo 1.94.3 and earlier allows remote attackers to execute arbitrary commands when the advertise or noadvertise directive is used in a configuration file, via shell metacharacters in the Reply-To header...