94 matches found
Moderate: Red Hat Security Advisory: Red Hat Network Satellite Server security update
Red Hat Network Satellite Server version 5.0.2 is now available. This update includes fixes for a number of security issues in Red Hat Network Satellite Server components. This update has been rated as having moderate security impact by the Red Hat Security Response Team. During an internal...
CVE-2003-1329
ftpd.c in wu-ftpd 2.6.2, when running on "operating systems that only allow one non-connected socket bound to the same local address," does not close failed connections, which allows remote attackers to cause a denial of service...
CVE-2003-1329
CVE-2003-1329 affects wu-ftpd 2.6.2 ftpd.c. On OSes that allow only one non-connected socket bound to the same local address, it does not close failed connections, enabling remote denial-of-service. Risk data (NVD) assigns CVSSv2 base score 7.8 (HIGH) with network attack vector and no authenticat...
CVE-2007-1329
Directory traversal vulnerability in SQL-Ledger, and LedgerSMB before 1.1.5, allows remote attackers to read and overwrite arbitrary files, and execute arbitrary code, via . dot characters adjacent to 1 users and 2 users/members strings, which are removed by blacklisting functions that filter the...
CVE-2007-1329
CVE-2007-1329 affects SQL-Ledger, and LedgerSMB before 1.1.5. A directory traversal flaw allows remote attackers to read/overwrite arbitrary files and execute arbitrary code by using "." characters adjacent to (1) users and (2) users/members; blacklist filtering collapses to ".." sequences. The v...
CVE-2007-1329
Directory traversal vulnerability in SQL-Ledger, and LedgerSMB before 1.1.5, allows remote attackers to read and overwrite arbitrary files, and execute arbitrary code, via . dot characters adjacent to 1 users and 2 users/members strings, which are removed by blacklisting functions that filter the...
CVE-2006-1329
CVE-2006-1329 affects the Jabberd server used with Jabber Studio. The vulnerability is in the SASL negotiation: a remote attacker can trigger a denial of service by sending a lack of proper authentication flow, causing a segfault in the c2s path when a response stanza is received before auth. The...
CVE-2004-1329
The CVE describes an untrusted execution path vulnerability in IBM AIX 5.1–5.3: the diag commands (lsmcode, diag_exec, invscout, invscoutd) can be coerced into running arbitrary code when the DIAGNOSTICS environment variable is modified to reference a malicious Dctrl program. Affected components/...
CVE-2004-1329
Untrusted execution path vulnerability in the diag commands 1 lsmcode, 2 diagexec, 3 invscout, and 4 invscoutd in AIX 5.1 through 5.3 allows local users to execute arbitrary programs by modifying the DIAGNOSTICS environment variable to point to a malicious Dctrl program...
Immunity Canvas: CVE_2004_1329
Name| CVE20041329 ---|--- CVE| CVE-2004-1329 Exploit Pack| CANVAS Description| CVE-2004-1329: DIAGNOSTICS environment handling Notes| CVE Name: CVE-2004-1329 VENDOR: IBM VersionsAffected: 5.X Repeatability: unlimited CVE URL: https://vulners.com/cve/CVE-2004-1329 CVSS: 7.2...
CVE-2001-1329
The CVE-2001-1329 issue is a buffer overflow in rsh for AIX 4.2.0.0 that allows local users to gain root privileges via a long command-line argument. Affected component: rsh on AIX 4.2.0.0. Root-level impact is stated by sources; access is local and requires crafted input. The vulnerability’s exi...
CVE-2001-1329
Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument...
CVE-1999-1329
The CVE describes a local privilege escalation caused by a buffer overflow in SysVInit on Red Hat Linux 5.1 and earlier. Affected component: SysVInit; vulnerable action: buffer overflow leading to privilege gain. Root cause: overflow in SysVInit that permits local users to escalate privileges to ...