SuSE 11 Security Update : glib2 (SAT Patch Number 1831)

When copying symbolic links the gfilecopy function set the target of the link to mode 0777 therefore exposing potentially sensitive information or allowing other user to modify files they should not have access to CVE-2009-3289. This has been fixed. This update also fixes a problem where glib2...

CVE-2010-1831

CVE-2010-1831 affects Apple Type Services (ATS) in Mac OS X 10.5.8 and 10.6.x up to 10.6.4; a buffer overflow in ATS handling of embedded fonts with long names can lead to arbitrary code execution when viewing or downloading a document. Root cause: bounds checking/ buffer overflow in ATS font han...

Debian DSA-1831-1 : djbdns - programming error

Matthew Dempsky discovered that Daniel J. Bernstein's djbdns, a Domain Name System server, does not constrain offsets in the required manner, which allows remote attackers with control over a third-party subdomain served by tinydns and axfrdns, to trigger DNS responses containing arbitrary record...

CVE-2009-1831

The CVE-2009-1831 flaw affects Nullsoft Winamp’s gen_ff.dll in versions before 5.552. It allows a remote attacker to trigger a stack-based buffer overflow while parsing a MAKI file, caused by an incorrect sign extension and an integer overflow. Result: remote code execution or crashes as describe...

CVE-2009-1831

creationtimestamp| type| source ---|---|--- 2009-05-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8770 2009-05-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8767 2009-05-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8772 2009-05-26...

Winamp < 5.552 Modern Skins Support Module (gen_ff.dll) MAKI File Handling Overflow

The remote host is running Winamp, a media player for Windows. The version of Winamp installed on the remote host is earlier than 5.552. Such versions are reportedly affected by an integer overflow vulnerability when processing '.maki' files. An attacker could exploit this to execute arbitrary co...

CVE-2008-1831

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2008-1831

Multiple unspecified vulnerabilities in the Siebel SimBuilder component in Oracle Siebel Enterprise 7.8.2 and 7.8.5 have unknown impact and remote or local attack vectors, aka 1 SEBL01, 2 SEBL02, 3 SEBL03, 4 SEBL04, 5 SEBL05, and 6 SEBL06...

CVE-2007-1831

CVE-2007-1831 affects web-app.org WebAPP prior to 0.9.9.6. The issue allows remote authenticated users to open files and write the string "wrong data" through a crafted QUERY_STRING. Impact and remediation are not elaborated beyond the described behavior in the provided sources; exploitation deta...

CVE-2006-1831

CVE-2006-1831 : Direct static code injection in Sysinfo’s web interface. Sysinfo.cgi in sysinfo 1.21 and potentially versions before 2.25 allows remote command execution via a leading semicolon in the name parameter of a systemdoc action, which is injected into phpinfo.php. Affected: Sysinfo web-...

Sysinfo name Parameter Arbitrary Code Execution

The remote host is running Sysinfo, a web-based system monitor. The version of Sysinfo installed on the remote host fails to sanitize user-supplied input to the 'name' parameter before passing it to a shell for execution. An unauthenticated attacker may be able to exploit this issue to execute...

CVE-2002-1831

MSN Messenger Service 1.0–4.6 is affected by a remote DoS vulnerability: an invite request containing hex-encoded spaces (%20) in the Invitation-Cookie field can crash the service. The available documents do not provide a root-cause analysis, affected versions beyond 1.0–4.6, exploit specifics, o...

CVE-2005-1831

Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows local users to gain privileges by using sudo to call su, then entering a blank password and hitting CTRL-C. NOTE: SuSE and multiple third-party researchers have not been able to replicate this issue, stating "Sudo...

CVE-2005-1831

CVE-2005-1831 refers to Sudo 1.6.8p7 on SuSE Linux 9.3 (and possibly other distros) where local users could gain privileges by using sudo to run su, then entering a blank password and pressing CTRL-C. Several researchers could not reproduce the issue, noting that Sudo catches SIGINT and returns a...

BELL-CVE-2005-1831 CVE-2005-1831 does not affect BellSoft software

Bulletin has no description...

CVE-2004-1831

CVE-2004-1831 affects Chrome 1.2.0.0 and earlier. The vulnerability is a buffer overflow in processing a packet with a large length value, causing a crash through a null dereference or out-of-bounds read. This can lead to a denial of service via remote input over the network. The available docume...