8178 matches found
Maelstorm buffer overflow
Buffer overflow during command line parsing...
CVE-2003-0256
The GnuPG plugin in kopete before 0.6.2 does not properly cleanse the command line when executing gpg, which allows remote attackers to execute arbitrary commands...
Cisco Catalyst switches allow access to "enable mode" without password
Overview Cisco Catalyst OS 7.51 contains a vulnerability that allows anyone who can obtain command line access to gain "enable" mode access without knowledge of the "enable" password. Description Cisco Catalyst OS is an operating system for Cisco's line of Catalyst switches. Version 7.51 of...
linux-atm buffer overflow
Buffer overflow in command line parsing in /usr/local/sbin/les -f...
Using Java from Javascript
Opera and Netscape browsers allow you to include java methods calls in your javascript . As Javascript has support for objects you can use objects returned by these calls in your scripts . I have been looking for information about the possibly security implications and vulnerabilities published...
Eye of Gnome contains format string vulnerability in the file name handling of command line arguments
Overview Eye of Gnome contains a format string vulnerability that may allow remote attackers to execute arbitrary code with the privileges of the user running the application, typically an unprivileged system user. Description Eye of Gnome EOG is an image viewing application that is part of the...
CVE-2002-0274
CVE-2002-0274 : Affects Exim 3.34 and earlier. The vulnerability is a buffer overflow in the long -C (configuration file) and other command line arguments, enabling a local user to gain privileges. Root cause: improper handling of lengthy inputs in configuration/command line parsing leading to me...
CVE-2002-0817
Format string vulnerability in super for Linux allows local users to gain root privileges via a long command line argument...
CVE-2003-0165
Format string vulnerability in Eye Of Gnome EOG allows attackers to execute arbitrary code via format string specifiers in a command line argument for the file to display...
CVE-2002-1051
Format string vulnerability in TrACESroute 6.0 GOLD aka NANOG traceroute allows local users to execute arbitrary code via the -T terminator command line argument...
CVE-2003-0144
Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as 1 request ID or 2 user name...
XMame 0.6x - Lang Local Buffer Overflow
XMame 0.6x - Lang Local Buffer Overflow // source: https://www.securityfocus.com/bid/7773/info Xmame is prone to a locally exploitable buffer overflow. This is due to insufficient bounds checking of the command line parameter used to specify language settings --lang. Successful exploitation on so...
XMame 0.6x - Lang Local Buffer Overflow
// source: https://www.securityfocus.com/bid/7773/info Xmame is prone to a locally exploitable buffer overflow. This is due to insufficient bounds checking of the command line parameter used to specify language settings --lang. Successful exploitation on some systems could result in execution of...
CVE-2003-0165
Format string vulnerability in Eye Of Gnome EOG allows attackers to execute arbitrary code via format string specifiers in a command line argument for the file to display...
CVE-2003-0165
Eye of GNOME (EOG) 2.2.0 and earlier is affected by a format-string vulnerability in the command-line filename handling, allowing an attacker to execute arbitrary code with the user’s privileges. Exploitation would require a crafted filename passed to EOG (e.g., via mailcap/mail clients). Patches...
CVE-2003-0165
Format string vulnerability in Eye Of Gnome EOG allows attackers to execute arbitrary code via format string specifiers in a command line argument for the file to display...
CVE-2003-0144
Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as 1 request ID or 2 user name...
Thunderstone TEXIS 3.0 - texis.exe Information Disclosure
Thunderstone TEXIS 3.0 - texis.exe Information Disclosure source: https://www.securityfocus.com/bid/7105/info Thunderstone TEXIS is prone to an information-disclosure vulnerability. Under certain circumstances, an attacker may pass command-line switches as URI parameters to the TEXIS executable...
Thunderstone TEXIS 3.0 - 'texis.exe' Information Disclosure
source: https://www.securityfocus.com/bid/7105/info Thunderstone TEXIS is prone to an information-disclosure vulnerability. Under certain circumstances, an attacker may pass command-line switches as URI parameters to the TEXIS executable. This action may cause the vulnerable server to return...