129 matches found
SuSE 10 Security Update : krb5-apps-servers and krb5-apps-clients (ZYPP Patch Number 1938)
Various return checks of setuid and seteuid calls have been fixed in kerberos client and server applications. If these applications are setuid, it might have been possible for local attackers to gain root access. CVE-2006-3083 We are not affected by the seteuid problems, tracked by CVE-2006-3084...
SuSE 10 Security Update : Xorg X11 (ZYPP Patch Number 3083)
Integer overflows in the XC-MISC extension of the X-server could potentially be exploited to execute code with root privileges. CVE-2007-1003 Integer overflows in libx11 could cause crashes. CVE-2007-1667 Integer overflows in the font handling of the X-server could potentially be exploited to...
openSUSE 10 Security Update : krb5-apps-clients (krb5-apps-clients-1937)
Various return checks of setuid and seteuid calls have been fixed in kerberos client and server applications. If these applications are setuid, it might have been possible for local attackers to gain root access CVE-2006-3083. We are not affected by the seteuid problems, tracked by CVE-2006-3084...
CVE-2007-3083
CVE-2007-3083 affects Z-Blog 1.7, where sensitive data is stored under the web root with insufficient access control. An attacker can directly access zblog.mdb to download the database, per NVD entry. The CVSS v2 vector (AV:N/AC:L/Au:N/C:C/I:N/A:N) yields a base score of 7.8 (High). No remediatio...
CVE-2006-3083
The 1 krshd and 2 v4rcp applications in a MIT Kerberos 5 krb5 up to 1.5, and 1.4.x before 1.4.4, when running on Linux and AIX, and b Heimdal 0.7.2 and earlier, do not check return codes for setuid calls, which allows local users to gain privileges by causing setuid to fail to drop privileges usi...
CVE-2006-3083
The CVE-2006-3083 family affects MIT Kerberos 5 krb5 (krb5) up to 1.5 and 1.4.x before 1.4.4 on Linux/AIX, and Heimdal 0.7.2 and earlier. The root cause is that return codes for setuid/seteuid are not checked, enabling local privilege escalation when privilege dropping fails (e.g., due to resourc...
[SECURITY] [DSA 1146-1] New krb5 packages fix privilege escalation
-------------------------------------------------------------------------- Debian Security Advisory DSA 1146-1 [email protected] http://www.debian.org/security/ Martin Schulze August 9th, 2006 http://www.debian.org/security/faq -...
CVE-2005-3083
CMS Made Simple 0.10 contains a cross-site scripting (XSS) vulnerability in index.php via the page parameter. Root cause is improper handling of the page parameter leading to script/HTML injection; impact implied is partial integrity compromise. CVSS 2.0 base score: 4.3 (Medium); vector: AV:N/AC:...