CVE-2002-1503

Buffer overflow in Automatic File Distributor AFD 1.2.14 and earlier allows local users to gain privileges via a long MONWORKDIR environment variable or -w workdir argument to 1 afd, 2 afdcmd, 3 afdctrl, 4 initafd, 5 mafd, 6 monctrl, 7 showolog, or 8 udc...

CVE-2002-1503: Undefined Security Weakness

Buffer overflow in Automatic File Distributor AFD 1.2.14 and earlier allows local users to gain privileges via a long MONWORKDIR environment variable or -w workdir argument to 1 afd, 2 afdcmd, 3 afdctrl, 4 initafd, 5 mafd, 6 monctrl, 7 showolog, or 8 udc...

Automatic File Content Type Recognition Tool contains memory allocation problem

Overview A memory allocation problem exists in the "Automatic File Content Type Recognition Tool" versions of the file1 package prior to 3.41. Description According to an OpenPKG advisory, a memory allocation problem exists in the "Automatic File Content Type Recognition Tool" AFCTR tool versions...

AFD 1.2.14 multiple local root compromises

Netric Security Team - http://www.netric.org|be By Netric AFD 1.2.14 multiple local root exploits type: stack and heap overflows Priority: 5 1 Description 2 Vulnerable 3 Exploit 4 Proof of concept 5 Vendor response 6 Patches 1 Description The Automatic File Distributor provides a framework for ve...

CVE-2002-0901: Undefined Security Weakness

Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver AMANDA 2.3.0.4 allow 1 remote attackers to execute arbitrary code via long commands to the amindexd daemon, or certain local users to execute arbitrary code via long command line arguments to the programs 2 amcheck, 3...

Nullsoft Winamp 2.80 - Automatic Update Check Buffer Overflow

Nullsoft Winamp 2.80 - Automatic Update Check Buffer Overflow // source: https://www.securityfocus.com/bid/5170/info Nullsoft Winamp is a media player for Microsoft Windows supporting MP3 and other filetypes. Winamp is vulnerable to a buffer overflow condition when checking for updated versions. ...

Nullsoft Winamp 2.80 - Automatic Update Check Buffer Overflow

// source: https://www.securityfocus.com/bid/5170/info Nullsoft Winamp is a media player for Microsoft Windows supporting MP3 and other filetypes. Winamp is vulnerable to a buffer overflow condition when checking for updated versions. A malicious server located at www.winamp.com may return a...

[SNS Advisory No.48] Microsoft Internet Explorer Still Download And Execute ANY Program Automatically

---------------------------------------------------------------------- SNS Advisory No.48 Microsoft Internet Explorer Still Download And Execute ANY Program Automatically Problem first discovered: Wed, 13 Feb 2002 Published: Mon, 18 Mar 2002 Revised: Thu, 16 May 2002...

CVE-2002-0340

Windows Media Player WMP 8.00.00.4477, and possibly other versions, automatically detects and executes .wmf and other content, even when the file's extension or content type does not specify .wmf, which could make it easier for attackers to conduct unauthorized activities via Trojan horse files...

CVE-2001-0720

Internet Explorer 5.1 for Macintosh on Mac OS X allows remote attackers to execute arbitrary commands by causing a BinHex or MacBinary file type to be downloaded, which causes the files to be executed if automatic decoding is enabled...

CVE-2001-0720

CVE-2001-0720 affects Internet Explorer 5.1 for Macintosh on Mac OS X. The issue allows remote execution of arbitrary commands by triggering the download of a BinHex or MacBinary file type that is executed if automatic decoding is enabled. The vulnerability arises in how the browser handles certa...

CVE-2001-0501

Microsoft Word 2002 and earlier allows attackers to automatically execute macros without warning the user by embedding the macros in a manner that escapes detection by the security scanner...

CVE-2001-0720: Undefined Security Weakness

Internet Explorer 5.1 for Macintosh on Mac OS X allows remote attackers to execute arbitrary commands by causing a BinHex or MacBinary file type to be downloaded, which causes the files to be executed if automatic decoding is enabled...

CVE-1999-1333: Undefined Security Weakness

automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the names of files that are to be downloaded...

Auto file execution vulnerability in Mac OS

Auto file execution vulnerability in Mac OS http://homepage.mac.com/vmconverter/macautoexecvuln.html Overview We found a vulnerability in Mac OS and Mac OS X with Classic Environment. If victims only browse malicious web-page; 1.Browsers start automatically download a compressed disc-image file...

MSIE may download and run programs automatically - details

This posting briefly describes some technical details of the vulnerability discussed in the Bugtraq messages with the subjects "MSIE may download and run progams automatically" Dec 14 2001 and "File extensions spoofable in MSIE download dialog" Nov 26 2001. The flaw allows a malicious web site to...

Форматная строка в and - auto nice daemon (format string)

Ошибка форматной строки при вызове syslog...

CVE-1999-1128: Undefined Security Weakness

Internet Explorer 3.01 on Windows 95 allows remote malicious web sites to execute arbitrary commands via a .isp file, which is automatically downloaded and executed without prompting the user...

CVE-1999-1474: Undefined Security Weakness

PowerPoint 95 and 97 allows remote attackers to cause an application to be run automatically without prompting the user, possibly through the slide show, when the document is opened in browsers such as Internet Explorer...

Vulnerable: Conference Room Professional-Developer Edititon.

Vulnerable: Conference Room Professional-Developer Edititon. www.webmaster.com Only tested on Windows NT 4.0 sp6a and Windows 2000 pro. Conference Room 1.8.1x or older versions are subject to a DoS attack when following commands are used. Make to connections to the irc server second being the clo...