CVE-2009-0841

Directory traversal vulnerability in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when running on Windows with Cygwin, allows remote attackers to create arbitrary files via a .. dot dot in the id parameter...

DEBIAN-CVE-2009-0841

Directory traversal vulnerability in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when running on Windows with Cygwin, allows remote attackers to create arbitrary files via a .. dot dot in the id parameter...

Directory traversal

Directory traversal vulnerability in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when running on Windows with Cygwin, allows remote attackers to create arbitrary files via a .. dot dot in the id parameter...

CVE-2009-0841

Directory traversal vulnerability in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when running on Windows with Cygwin, allows remote attackers to create arbitrary files via a .. dot dot in the id parameter...

CVE-2009-0841

Directory traversal vulnerability in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when running on Windows with Cygwin, allows remote attackers to create arbitrary files via a .. dot dot in the id parameter...

CVE-2009-0841

MapServer’s mapserv on Windows with Cygwin is vulnerable to directory traversal via a .. in the id parameter, allowing remote creation of arbitrary files. Affected: MapServer 4.x before 4.10.4 and 5.x before 5.2.2. Several advisories (e.g., Debian DSA-1914-1, Fedora advisories) indicate fixes in ...

Cygwin包处理存在安全漏洞

CVE ID：CVE-2008-3323 CNCVE ID：CNCVE-20083323 Cygwin是一款运行于Windows下的免费的UNIX的子系统。 Cygwin存在安全问题，远程攻击者可以利用漏洞破坏受影响系统。 Tarball软件包通过setup.exe安装和升级，通过明文HTTP或FTP从镜像下载包列表和包存在问题，包列表中博阿含MD5校验来验证包的完整性，如果伪造的服务器回答负责包升级的HTTP请求并使用修改的MD5字符串进行响应， setup.exe就会下载和安装恶意包，导致任意代码以登录用户进程权限执行。 要成功利用此漏洞需要攻击者伪造镜像或进行DNS伪造攻击。...

CVE-2008-3323

setup.exe before 2.573.2.3 in Cygwin does not properly verify the authenticity of packages, which allows remote Cygwin mirror servers or man-in-the-middle attackers to execute arbitrary code via a package list containing the MD5 checksum of a Trojan horse package...

Design/Logic Flaw

setup.exe before 2.573.2.3 in Cygwin does not properly verify the authenticity of packages, which allows remote Cygwin mirror servers or man-in-the-middle attackers to execute arbitrary code via a package list containing the MD5 checksum of a Trojan horse package...

CVE-2008-3323

setup.exe before 2.573.2.3 in Cygwin does not properly verify the authenticity of packages, which allows remote Cygwin mirror servers or man-in-the-middle attackers to execute arbitrary code via a package list containing the MD5 checksum of a Trojan horse package...

CVE-2008-3323

CVE-2008-3323 affects Cygwin: setup.exe prior to 2.573.2.3 does not properly verify package authenticity, allowing remote malicious mirrors or MITM to substitute an MD5 for a Trojaned package. The vulnerability arises from downloading package lists and packages over plaintext HTTP/FTP and trustin...

Cygwin setup.exe安装及升级过程数据验证漏洞

BUGTRAQ ID: 30375 CVECAN ID: CVE-2008-3323 Cygwin是许多自由软件的集合，用于在各种版本的Microsoft Windows上运行UNIX类系统。 Cygwin的Tarball软件包是通过setup.exe安装和升级的，该程序通过明文HTTP或FTP从镜像下载软件包列表和软件包，软件包列表中包含有用于验证完整性的MD5校验和。如果恶意的服务器响应了负责升级软件包的HTTP请求并返回修改的MD5字符串的话，setup.exe就会下载并安装恶意软件包。 Cygwin setup.exe 2.573.2.2 Cygwin ------...

SECOBJADV-2008-02: Cygwin Installation and Update Process can be Subverted Vulnerability

====================================================================== = Security Objectives Advisory SECOBJADV-2008-02 = ====================================================================== Cygwin Installation and Update Process can be Subverted Vulnerability...

Cygwin setup packages spoofing

Package source authentity is not checked during installation procedure...

Heap overflow

Heap-based buffer overflow in cygwin1.dll in Cygwin 1.5.7 and earlier allows context-dependent attackers to execute arbitrary code via a filename with a certain length, as demonstrated by a remote authenticated user who uses the SCP protocol to send a file to the Cygwin machine, and thereby cause...

CVE-2007-6181

Heap-based buffer overflow in cygwin1.dll in Cygwin 1.5.7 and earlier allows context-dependent attackers to execute arbitrary code via a filename with a certain length, as demonstrated by a remote authenticated user who uses the SCP protocol to send a file to the Cygwin machine, and thereby cause...

CVE-2007-6181

Heap-based buffer overflow in cygwin1.dll in Cygwin 1.5.7 and earlier allows context-dependent attackers to execute arbitrary code via a filename with a certain length, as demonstrated by a remote authenticated user who uses the SCP protocol to send a file to the Cygwin machine, and thereby cause...

CVE-2007-6181

CVE-2007-6181: A heap-based buffer overflow in cygwin1.dll affects Cygwin 1.5.7 and earlier. An authenticated remote attacker can exploit a long filename via SCP to trigger overwrite of heap memory in scp.exe, enabling arbitrary code execution on the Cygwin host. Related reports extend exposure t...

Cygwin超长文件名堆溢出漏洞

BUGTRAQ ID: 26557 Cygwin是许多自由软件的集合，用于在各种版本的Microsoft Windows上运行UNIX类系统。 Cygwin处理超长文件名时存在漏洞，恶意用户可能利用此漏洞在系统上执行任意指令。 一般来讲Linux文件系统允许255字节的文件名，但cygwin允许239字节，并执行检查防范大于等于240字节的文件名。尽管执行了这个检查，存储文件名的动态内存缓冲区仅分配了232字节，因此233到239字节的文件名可以绕过检查覆盖堆上最多7个字节，导致执行任意指令。 Cygwin 1.5.7 - 1.5.19...

cygwin-overflow.txt

============================================= INTERNET SECURITY AUDITORS ALERT 2007-005 - Original release date: May 23rd, 2007 - Last revised: November 24th, 2007 - Discovered by: Jesus Olmos Gonzalez - Severity: 5/5 ============================================= I. VULNERABILITY...