130 matches found
CVE-2009-1633
The CVE-2009-1633 issue affects the Linux kernel CIFS subsystem prior to 2.6.29.4. It describes multiple buffer overflows in CIFS that can be triggered by a malformed Unicode string (Unicode string area alignment in fs/cifs/sess.c) or long Unicode characters (fs/cifs/cifssmb.c and fs/cifs/readdir...
Linux Kernel CIFS字符串转换多个缓冲区溢出漏洞
BUGTRAQ ID: 34989 CVECAN ID: CVE-2009-1633 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的cifs处理代码通常将ucs2le字符串（windows所使用的双字节编码方案）转换为本地NLS字符集。字符串转换例程仅接受由所要转换的宽字符数所指定的单个长度参数，因此假设目标缓冲区已足够大，但实际上特制的CIFS字符串仍可触发缓冲区溢出。 Linux kernel 2.6.29 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Debian: Security Advisory (DSA-1633-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-1633-1 : slash - SQL Injection, XSS
It has been discovered that Slash, the Slashdot Like Automated Storytelling Homepage suffers from two vulnerabilities related to insufficient input sanitation, leading to execution of SQL commands CVE-2008-2231 and cross-site scripting CVE-2008-2553 . %NASLMINLEVEL 70300 C Tenable Network Securit...
CVE-2008-1633
CVE-2008-1633 affects Mondo Rescue before 2.2.5. Multiple connected sources describe an unspecified vulnerability with unknown impact and attack vectors, linked to the use of /tmp and MINDI_CACHE. The documents do not provide concrete root cause analysis, affected subcomponents, exploit details, ...
CVE-2005-1633
The connected OpenVAS entries describe the vulnerability in JGS-Portal (WoltLab Burning Board integration) as SQL injection flaws in JGS-Portal
CVE-2005-1633
Multiple SQL injection vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 anzahlbeitraege parameter to jgsportal.php, 2 year parameter to jgsportalstatistik.php, 3 year parameter to jgsportalbeitraggraf.php, 4 tag parameter to...
CVE-2002-1633
CVE-2002-1633 : In QNX 4.25, multiple buffer overflows in various utilities (e.g., sample, ex, du, find, lex, mkdir, rm, serserv, tcpserv, termdef, time, unzip, use, wcc, wlink, wpp, write, etc.) may allow a local user to execute arbitrary code via long command line arguments. The description spe...
CVE-2004-1633
The CVE-2004-1633 issue affects Bugzilla 2.9 through 2.18rc2 and 2.19 from CVS, where process_bug.cgi does not enforce edit permissions on the keywords field. An authenticated remote user can modify a bug’s keywords via the keywordaction parameter. The connection documents confirm the vulnerable ...
