729 matches found
CVE-2005-4273
CVE-2005-4273 : IBM AIX 5.3 has multiple unspecified vulnerabilities in the getShell and getCommand components that allow local users to append to arbitrary files. Affected: AIX 5.3. No remediation details are provided in the connected documents; the CVSS score listed is 2.1 (Low) with local acce...
CVE-2005-4273: Undefined Security Weakness
Multiple unspecified vulnerabilities in 1 getShell and 2 getCommand in IBM AIX 5.3 allow local users to append to arbitrary files...
CVE-2005-3848
Memory leak in the icmppushreply function in Linux 2.6 before 2.6.12.6 and 2.6.13 allows remote attackers to cause a denial of service memory consumption via a large number of crafted packets that cause the ipappenddata function to fail, aka "DST leak in icmppushreply."...
FreeBSD : Cyrus IMAPd -- APPEND command uses undefined programming construct (31952117-3d17-11d9-8818-008088034841)
To support MULTIAPPENDS the cmdappend handler uses the global stage array. This array is one of the things that gets destructed when the fatal function is triggered. When the Cyrus IMAP code adds new entries to this array this is done with the help of the postfix increment operator in combination...
CVE-2005-1089
Unknown vulnerability in DC++ before 0.674 allows attackers to append data to arbitrary files...
CVE-2005-1089: Undefined Security Weakness
Unknown vulnerability in DC++ before 0.674 allows attackers to append data to arbitrary files...
CVE-2005-1089
Unknown vulnerability in DC++ before 0.674 allows attackers to append data to arbitrary files...
CVE-2004-1100
Cross-site scripting XSS vulnerability in mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to execute arbitrary web script or HTML via the append parameter...
CVE-2004-1100: Undefined Security Weakness
Cross-site scripting XSS vulnerability in mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to execute arbitrary web script or HTML via the append parameter...
Cyrus IMAPd -- APPEND command uses undefined programming construct
To support MULTIAPPENDS the cmdappend handler uses the global stage array. This array is one of the things that gets destructed when the fatal function is triggered. When the Cyrus IMAP code adds new entries to this array this is done with the help of the postfix increment operator in combination...
TIPS MailPost append Parameter XSS
TIPS MailPost, a web application used for emailing HTML form data to a third party, is installed on the remote host. The version of MailPost hosted on the remote web server has a cross-site scripting vulnerability in the 'append' variable of mailpost.exe when debug mode is enabled. Debug mode is...
PT-2003-1865 · Ipswitch · Ws Ftp
Name of the Vulnerable Software and Affected Versions: WS FTP versions 3 and 4 Description: The issue allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via long arguments, specifically the APPE append or STAT status arguments. Recommendations: For ...
CVE-2000-0615
CVE-2000-0615 : LPRng 3.6.x improperly installs lpd as setuid root, allowing local users to append lpd trace and logging messages to files. The connected documents confirm the vulnerability is a local privilege issue tied to the lpd binary running with root privileges. No explicit exploit details...
CVE-2001-0996: Undefined Security Weakness
POP3Lite before 0.2.4 does not properly quote a . dot in an email message, which could allow a remote attacker to append arbitrary text to the end of an email message, which could then be interpreted by various mail clients as valid POP server responses or other input that could cause clients to...
CVE-1999-1394
CVE-1999-1394 : BSD 4.4–based operating systems running at security level 1 allow the root user to clear immutable/append-only flags on files by unmounting the filesystem and using a filesystem editor (e.g., fsdb) to modify a device directly. The description does not specify affected products, ve...
CVE-1999-1394: Undefined Security Weakness
BSD 4.4 based operating systems, when running at security level 1, allow the root user to clear the immutable and append-only flags for files by unmounting the file system and using a file system editor such as fsdb to directly modify the file through a device...
linux/x86 add user 70 bytes
Exploit for linux/x86 platform in category shellcode =========================== linux/x86 add user 70 bytes =========================== / Linux/x86 Appends the line "z::0:0:::\n" to /etc/passwd. quite old, could be optimized further / include char c0de = / main: / "\xeb\x29" / jmp callz / / star...
CVE-2000-0645: Undefined Security Weakness
WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by using the RESTART REST command and writing beyond the end of a file, or writing to a file that does not exist, via commands such as STORE UNIQUE STOU, STORE STOR, or APPEND APPE...