94 matches found
CVE-2009-2657
nilfs-utils before 2.0.14 installs multiple programs with unnecessary setuid privileges, which allows local users to execute arbitrary commands via the device string in a -c command line option to mkfs.nilfs2...
CVE-2009-2657
Nilfs-utils before 2.0.14 installs multiple programs with unnecessary setuid privileges, enabling local users to run arbitrary commands via the device string in a -c option to mkfs.nilfs2. Affected components: nilfs-utils and related nilfs2-utils tooling. Impact: local privilege escalation. Remed...
Fedora Core 10 FEDORA-2009-2657 (glib2)
The remote host is missing an update to glib2 announced via advisory FEDORA-2009-2657. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Fedora Core 10 FEDORA-2009-2657 (glib2)
The remote host is missing an update to glib2 announced via advisory FEDORA-2009-2657. OpenVAS Vulnerability Test $Id: fcore20092657.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-2657 glib2 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...
Debian Security Advisory DSA 811-1 (common-lisp-controller)
The remote host is missing an update to common-lisp-controller announced via advisory DSA 811-1. Francois-Rene Rideau discovered a bug in common-lisp-controller, a Common Lisp source and compiler manager, that allows a local user to compile malicious code into a cache directory which is executed ...
Stack overflow
Stack-based buffer overflow in the PrecisionID Barcode 1.9 ActiveX control in PrecisionIDBarcode.dll allows remote attackers to cause a denial of service Internet Explorer 6 crash, and possibly execute arbitrary code, via a long argument to the SaveBarCode method. NOTE: this issue might overlap...
CVE-2007-2744
The CVE-2007-2744 entry concerns the PrecisionID Barcode 1.9 ActiveX control (PrecisionID_Barcode.dll). The vulnerability is a stack-based buffer overflow triggered by a long argument to the SaveBarCode method, allowing a remote attacker to cause an Internet Explorer 6 crash and potentially execu...
CVE-2007-2657
CVE-2007-2657 affects the PrecisionID Barcode 1.3 ActiveX control (PrecisionID_DataMatrix.DLL). The vulnerability allows a remote attacker to cause a denial of service by sending a long argument to the SaveBarCode method. The description is generic and specifies no concrete root cause beyond the ...
CVE-2004-2657
Mozilla Firefox 1.5.0.1 (and possibly other versions) has a vulnerability where user activity records persist after uninstall, allowing local users sharing a Windows profile to view these records after a new Firefox installation (notably the Passwords Never Saved list). The vendor disputes the is...
CVE-2005-2657
CVE-2005-2657 affects common-lisp-controller up to version 4.18. A local user can cause code to be compiled into a cache directory and later executed by another user who has not run Common Lisp, enabling privilege escalation. Debian/DSA advisories document this as a design error and provide fixed...
CVE-2005-2657
Removed by vendor...
[Full-disclosure] [SECURITY] [DSA 811-1] New common-lisp-controller packages fix arbitrary code injection
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 811-1 [email protected] http://www.debian.org/security/ Martin Schulze September 14th, 2005 http://www.debian.org/security/faq -...
Debian DSA-811-2 : common-lisp-controller - design error
The bugfix for the problem mentioned below contained an error that caused third-party programs to fail. The problem is corrected by this update. For completeness we're including the original advisory text : Francois-Rene Rideau discovered a bug in common-lisp-controller, a Common Lisp source and...