10089 matches found
CVE-2005-0666
Unknown vulnerability in PaX from the September 2003 release to 2.2 before 2005.03.05, related to SEGMEXEC or RANDEXEC and VMA mirroring, allows local users and possibly remote attackers to bypass intended access restrictions and execute arbitrary code...
Debian DSA-717-1 : lsh-utils - buffer overflow, typo
Several security relevant problems have been discovered in lsh, the alternative secure shell v2 SSH2 protocol server. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CAN-2003-0826 Bennett Todd discovered a heap buffer overflow in lshd which could lead...
[SECURITY] [DSA 717-1] New lsh packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 717-1 [email protected] http://www.debian.org/security/ Martin Schulze April 27th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 717-1] New lsh packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 717-1 [email protected] http://www.debian.org/security/ Martin Schulze April 27th, 2005 http://www.debian.org/security/faq -...
MailEnable Enterprise Professional - https Remote Buffer Overflow
MailEnable Enterprise Professional - https Remote Buffer Overflow !/usr/bin/perl This tools and to consider only himself to educational purpose -=MailEnable Enterprise & Professional HTTPS remote BoF exploit=- -= =- -= Discovered & Coded by CorryL info:www.x0n3-h4ck.org=- -= irc.xoned.net x0n3-h4...
CVE-2003-1132
Vulnerability overview (CVE-2003-1132) : Cisco Content Service Switch (CSS) 11000/11500 DNS servers respond with NXDOMAIN (response code 3) when queried for a nonexistent AAAA record, instead of No Error (response code 0). This behavior can enable remote attackers to cause a denial of service by ...
Multiple OS (Win32AixCisco) - Crafted ICMP Messages Denial of Service (MS05-019)
Multiple OS Win32AixCisco - Crafted ICMP Messages Denial of Service MS05-019 / HOD-icmp-attacks-poc.c: 2005-04-15: PUBLIC v.0.2 Copyright c 2004-2005 houseofdabus. MS05-019 CISCO:20050412 ICMP attacks against TCP Proof-of-Concept .:: houseofdabus ::. for more details:...
Multiple OS (Win32/Aix/Cisco) - Crafted ICMP Messages Denial of Service (MS05-019)
/ HOD-icmp-attacks-poc.c: 2005-04-15: PUBLIC v.0.2 Copyright c 2004-2005 houseofdabus. MS05-019 CISCO:20050412 ICMP attacks against TCP Proof-of-Concept .:: houseofdabus ::. for more details: http://www.livejournal.com/users/houseofdabus...
MS Exchange Server Remote Code Execution Exploit (MS05-021)
漏洞描述：Microsoft Exchange是一款由微软开发的邮件服务程序。Microsoft Exchange Server中存在缓冲区溢出漏洞，攻击者可能利用此漏洞在主机上执行任意指令。 起因是Exchange SMTP Server在处理特殊的扩展SMTP verb时存在缓冲区溢出。漏洞可能允许攻击者连接到Exchange服务器的SMTP端口并发送精心构造的恶意命令，这些命令可能导致拒绝服务或以SMTP服务进程的权限运行攻击者所选择的代码。漏洞影响：受影响的软件： •Microsoft Exchange Server 2000 Service Pack 3 •Microsoft...
Debian DSA-710-1 : gtkhtml - NULL pointer dereference
Alan Cox discovered a problem in gtkhtml, an HTML rendering widget used by the Evolution mail reader. Certain malformed messages could cause a crash due to a NULL pointer dereference. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
CVE-2003-0061
CVE-2003-0061: Buffer overflow in passwd for HP-UX B.10.20 allows local users to gain root privileges via a long LANG environment variable. This is supported by multiple sources in the provided documents (NVD, CVE list, RH advisory). The descriptions do not specify root cause details beyond overf...
CVE-2003-0643
CVE-2003-0643 involves an integer signedness error in the Linux Socket Filter (filter.c) in Linux kernels from 2.4.3-pre3 through 2.4.22-pre10, which can cause a crash (denial of service). The vulnerability is documented across multiple sources (NVD/CVE entries, Debian advisory CD/OSV). The initi...
CVE-2003-0363
The CVE-2003-0363 entry covers a format string vulnerability in LICQ versions 1.2.6 and 1.0.3 (and possibly others). The underlying issue is a format string vulnerability in which an attacker can influence format specifiers to perform unknown actions remotely. The vulnerability affects LICQ’s han...
CVE-2003-0644
CVE-2003-0644 affects Kdbg 1.1.0–1.2.8, which fails to validate permissions on the .kdbgrc file. This allows a local attacker to inject commands if a program runs from a world-writable location, executing with the privileges of the user running Kdbg. Public advisories (RHSA-2005:416, CentOS advis...
CVE-2003-0420
CVE-2003-0420 describes an information-leak in dsimportexport on Apple Macintosh OS X Server 10.2.6, where local users can obtain the username and password of the account running the tool. The connected Apple Security Update 2003-06-12 documents fixing this issue by updating Apache 2 and explicit...
CVE-2003-1005
CVE-2003-1005 affects Mac OS X 10.2.8 and 10.3.2 PKI functionality. The vulnerability allows remote attackers to cause a denial of service (service crash) by sending malformed ASN.1 sequences. Exploitation is indicated as network-based with low complexity and no authentication required, resulting...
CVE-2003-0627
CVE-2003-0627 refers to a DoS issue in PeopleSoft PeopleBooks Search CGI (psdoccgi.exe) affecting PeopleTools versions 8.4–8.43. The vulnerability arises from headername/footername argument handling, which can cause the application to crash when processing crafted input, enabling remote attackers...
CVE-2003-0791
The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to the script.thaw JavaScript function, which is then deserialized and executed...
CVE-2003-0626
CVE-2003-0626 relates to the PeopleSoft PeopleBooks/PeopleTools CGI component. The issue resides in psdoccgi.exe (used by PeopleBooks Search CGI) where two arguments, headername and footername , can be crafted to read arbitrary files outside the web root due to insufficient input validation. Affe...