Дырки в Half Life

Переполнения буфера и ошибки коммандной строки в командах exec, map и при разборе конфигурационных файлов...

Basilix Webmail 0.9.7 - Incorrect File Permissions

Basilix Webmail 0.9.7 - Incorrect File Permissions source: https://www.securityfocus.com/bid/2198/info A vulnerability has been reported in basilix webmail v. 0.9.7b. Basilix Webmail ships with several configuration files that have the file extensions '.class' and '.inc'. Among other things, thes...

Basilix Webmail 0.9.7 - Incorrect File Permissions

source: https://www.securityfocus.com/bid/2198/info A vulnerability has been reported in basilix webmail v. 0.9.7b. Basilix Webmail ships with several configuration files that have the file extensions '.class' and '.inc'. Among other things, these files contain the authentication information for...

buffer overflow vulnerability in Pine

Pine versions 4.21 and before contain a buffer overflow vulnerability which allows a remote user to execute arbitrary code on the local client by the sending of a special-crafted email message. The overflow occurs during the periodic "new mail" checking of an open folder. By upgrading to Pine 4.3...

CVE-2000-0723

Helix GNOME Updater helix-update 0.5 and earlier does not properly create /tmp directories, which allows local users to create empty system configuration files such as /etc/config.d/bashrc, /etc/config.d/csh.cshrc, and /etc/rc.config...

CVE-2000-0723

The CVE-2000-0723 entry concerns Helix GNOME Updater (helix-update) version 0.5 and earlier, where improper handling of /tmp leads to local users creating empty system configuration files (e.g., /etc/config.d/bashrc, /etc/config.d/csh.cshrc, /etc/rc.config). This vulnerability arises from inadequ...

CVE-2000-0723

Helix GNOME Updater helix-update 0.5 and earlier does not properly create /tmp directories, which allows local users to create empty system configuration files such as /etc/config.d/bashrc, /etc/config.d/csh.cshrc, and /etc/rc.config...

Очередная дырка в KDE

Класс KApplication некорректно работает с конфиуграционными файлами не проверяются символьные линки, что позволяет атаковать любое приложение, использующее данный класс например ktvision и ktuner...

KDE 1.1.2 KApplication configfile - Local Privilege Escalation (2)

KDE 1.1.2 KApplication configfile - Local Privilege Escalation 2 source: https://www.securityfocus.com/bid/1291/info The KDE configuration-file management has a bug which could result in root compromise. Due to insecure creation of configuration rc files via KApplication-class, local users can...

Дыра в AllManage

Возможно обойти авторизацию пользователя, получить доступ к административному паролю и конфигурационным файлам...

citrix.winframe.txt

Date: Fri, 28 May 1999 12:26:59 -0700 From: David Terrell To: [email protected] Subject: Citrix Winframe client for Linux presumably this holds true for the other unix clients as well, but all I have is linux to test on The Citrix Winframe linux client used for accessing Winframe and Windows N...

Netscape Enterprise Server 3.513.6 - JHTML View Source

Netscape Enterprise Server 3.513.6 - JHTML View Source source: https://www.securityfocus.com/bid/559/info Netscape Enterprise Server 3.51 and above includes a search engine by default. The results it generates can be tailored using various configuration files, and one of the options is whether or...

Netscape Enterprise Server 3.51/3.6 - JHTML View Source

source: https://www.securityfocus.com/bid/559/info Netscape Enterprise Server 3.51 and above includes a search engine by default. The results it generates can be tailored using various configuration files, and one of the options is whether or not the full text of a resultant page is displayed. Th...

Majordomo 1.891.90 - lists Command Execution

Majordomo 1.891.90 - lists Command Execution source: https://www.securityfocus.com/bid/2310/info Majordomo is a perl-based Internet e-mail list server. Versions prior to 1.91 are vulnerable to an attack whereby specially crafted e-mail headers are incorrectly processed, yielding the ability to...

Majordomo 1.89/1.90 - 'lists' Command Execution

source: https://www.securityfocus.com/bid/2310/info Majordomo is a perl-based Internet e-mail list server. Versions prior to 1.91 are vulnerable to an attack whereby specially crafted e-mail headers are incorrectly processed, yielding the ability to execute arbitrary commands with the privileges ...

ROS-2-2182

2.2182 Vulnerability in SpamAssassin spam filtering tool CVE-2020-1946 1. Vulnerability Description: CVE-2020-1946 A vulnerability in the SpamAssassin spam filtering tool, is related to improper input validation when processing rule configuration .cf files. Exploitation of the vulnerability could...