Debian DSA-072-1 : groff - printf format attack

Zenith Parse found a security problem in groff the GNU version oftroff. The pic command was vulnerable to a printf format attack which made it possible to circumvent the -S' option and execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

CVE-2004-0573

CVE-2004-0573 describes a buffer overflow in the Microsoft WordPerfect 5.x Converter used by Office 2000, Office XP, Office 2003, and Works Suite 2001–2004. The overflow occurs when reading an overly long WordPerfect 5.x document, allowing a remote attacker to execute arbitrary code with the priv...

CVE-2001-0643

Affected software: Internet Explorer 5.5. Issue: CLSID not displayed when it appears at the end of a file name, enabling spoofing of file type and potentially deceiving users into executing a dangerous program. Impact: user may run unintended or unsafe code due to misleading file type indication....

CVE-2001-0749

The CVE-2001-0749 issue affects Beck IPC GmbH IPC@CHIP Embedded-Webserver. The vulnerability allows remote attackers to read arbitrary files because the web server default root directory is set to the system root ("/"), enabling access to files outside the web root (e.g., chip.ini with login cred...

CVE-2001-0825

The CVE-2001-0825 entry concerns xinetd prior to 2.1.8.8, where a buffer overflow in internal string handling routines enables remote command execution. The vulnerability stems from a length argument of zero or less, which disables the length check and may allow an attacker to run arbitrary comma...

CVE-2001-0837

DeltaThree Pc-To-Phone 3.0.3 is affected by a local-privilege issue where sensitive data is placed in world-readable locations within the installation directory. The vulnerable components include access to temp.html, the log folder, and the PhoneBook folder, enabling local users to read sensitive...

CVE-2001-0909

CVE-2001-0909 : Affected software is Microsoft Help Center on Windows XP, vulnerable via a buffer overflow in the helpctr.exe component when processing a long hcp: URL. This could allow a remote attacker to execute arbitrary code. CVSS v2 base score is 7.5 (HIGH) with network access, low attack c...

CVE-2001-0951

CVE-2001-0951 : Windows 2000 is affected. Vulnerability allows remote attackers to cause a denial of service by flooding the IKE UDP port 500 with packets containing a large number of dot characters, leading to CPU consumption. The connected records confirm Windows 2000 as the affected platform a...

CVE-2001-1055

The CVE-2001-1055 entry affects the Microsoft Windows network stack . The vulnerability allows a remote attacker to exhaust CPU resources by sending a flood of malformed ARP request packets with random source IP and MAC addresses, resulting in denial of service . The effect is described as CPU co...

CVE-2001-1066

The CVE-2001-1066 issue affects the Netscape 6.0.1 installation script on Solaris (and related versions) where the installer creates a temporary, predictably named file in a world-writable /tmp directory without proper existence/ownership checks. This enables a local attacker to perform a symlink...

CVE-2001-1069

The CVE describes a Linux issue in the libCoolType library used by Adobe Acrobat (acroread): the AdobeFnt.lst file is created with world-writable permissions, allowing local users to modify the file and possibly alter acroread’s behavior. Vulnerable component: libCoolType in Acrobat/acroread on L...

CVE-2001-1081

Vulnerability details: CVE-2001-1081 concerns Livingston/Lucent RADIUS prior to 2.1.va.1, where format string vulnerabilities in log message handling can allow local or remote attackers to cause a denial of service and potentially execute arbitrary code via crafted format specifiers. The provided...

CVE-2001-1103

CVE-2001-1103 concerns the FTP Voyager ActiveX control, prior to version 8.0. When flagged as safe for scripting (the default) or when permitted by the IObjectSafety interface, the control could allow remote attackers to execute arbitrary commands. The affected component is the FTP Voyager Active...

CVE-2001-1186

CVE-2001-1186 affects Microsoft IIS 5.0. The issue is a denial of service caused by an HTTP request whose Content-Length is larger than the request body, preventing IIS from timing out the connection. The connected documents confirm the same description across NVD and CVE lists. There are no deta...

CVE-2001-1200

CVE-2001-1200 affects Microsoft Windows XP. The vulnerability allows local users to bypass a locked screen and execute programs associated with hot keys. The NVD entry lists a local attack vector with low complexity and complete impact to confidentiality, integrity, and availability (base score 7...

CVE-2001-1352

CVE-2001-1352 is a cross-site scripting vulnerability in Namazu 2.0.9 and earlier. The issue arises when an invalid index file is specified in the idxname parameter, allowing remote attackers to execute arbitrary JavaScript in the context of other web users via an error message returned by the ap...

CVE-2001-1391

CVE-2001-1391 is an off-by-one vulnerability in the CPIA driver of the Linux kernel prior to 2.2.19 that allows a local user to write into kernel memory. The issue is documented in multiple advisories (Mandrake MDKSA-2001:037, Debian DSA-047-1) and is described as a problem in the CPIA driver’s b...

CVE-2001-0792

CVE-2001-0792 describes a format-string vulnerability in XChat 1.2.x that lets remote attackers execute arbitrary code via a malformed nickname. The provided documents identify the affected product as XChat 1.2.x and classify the issue as a remote, unauthenticated vector with potential for arbitr...

CVE-2001-1328

The CVE-2001-1328 issue is a buffer overflow in the Solaris ypbind daemon (Solaris 5.4–8) that allows remote code execution. Concrete details: the root cause is a stack overflow within YPBINDPROC_DOMAIN. Impact is described as remote arbitrary code execution with partial confidentiality/integrity...

CVE-2001-0548

CVE-2001-0548 describes a buffer overflow in Solaris 2.6/7’s dtmail MUA triggered by the MAIL environment variable, allowing local users to gain privileges. Affected component: dtmail; impact: local privilege escalation (to the mail group). Underlying cause: insufficient boundary checking of envi...