6533 matches found
[SECURITY] [DSA-364-1] New man-db packages fix buffer overflows, arbitrary command execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 364-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 4th, 2003 http://www.debian.org/security/faq -...
DSA-364 man-db - buffer overflows, arbitrary command execution
Bulletin has no description...
CVE-2003-0620
Multiple buffer overflows in man-db 2.4.1 and earlier, when installed setuid, allow local users to gain privileges via 1 MANDATORYMANPATH, MANPATHMAP, and MANDBMAP arguments to addtodirlist in manp.c, 2 a long pathname to ultsrc in ultsrc.c, 3 a long .so argument to testforinclude in ultsrc.c, 4 ...
CVE-2003-0620
Multiple buffer overflows in man-db 2.4.1 and earlier, when installed setuid, allow local users to gain privileges via 1 MANDATORYMANPATH, MANPATHMAP, and MANDBMAP arguments to addtodirlist in manp.c, 2 a long pathname to ultsrc in ultsrc.c, 3 a long .so argument to testforinclude in ultsrc.c, 4 ...
CVE-2003-0620
CVE-2003-0620 affects the man-db package (versions up to 2.4.1 and earlier) when run setuid. The issue comprises multiple local privilege-escalation bugs in the code paths for add_to_dirlist (manp.c), ult_src (ult_src.c), and test_for_include (ult_src.c), plus oversized MANDATORY_MANPATH/MANPATH_...
CVE-2003-0620: Undefined Security Weakness
Multiple buffer overflows in man-db 2.4.1 and earlier, when installed setuid, allow local users to gain privileges via 1 MANDATORYMANPATH, MANPATHMAP, and MANDBMAP arguments to addtodirlist in manp.c, 2 a long pathname to ultsrc in ultsrc.c, 3 a long .so argument to testforinclude in ultsrc.c, 4 ...
man-db[] multiple(4) vulnerabilities.
part 1: addtodirlist buffer overflow man-db contains a buffer overflow vulnerability do to the lack of bounds checking in multiple sscanf calls. which formats the user supplied file /.manpath. here is the functionsrc/manp.c: static void addtodirlist FILE config, int user char bp; char bufBUFSIZ;...
Multiple man-db problems
Multiple buffer overflows...
Microsoft SQL Server 7.02000 JET Database Engine 4.0 - Buffer Overrun
Microsoft SQL Server 7.02000 JET Database Engine 4.0 - Buffer Overrun source: https://www.securityfocus.com/bid/7541/info Microsoft SQL Server is prone to an exploitable buffer overrun vulnerability via the Jet Database Engine. This can occur while the JET 4.0 OLE DB data provider is querying dat...
Microsoft SQL Server 7.0/2000 JET Database Engine 4.0 - Buffer Overrun
source: https://www.securityfocus.com/bid/7541/info Microsoft SQL Server is prone to an exploitable buffer overrun vulnerability via the Jet Database Engine. This can occur while the JET 4.0 OLE DB data provider is querying data supplied via a remote source and is due to insufficient bounds...
SRT2003-04-22-1336 - SAP DB Development Tools install flaw
Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...
SAP DB development tools privelege escalation
instdbmsrv and instlserver allow chmod/chown for any files...
SAP DB weak permissions
777 permissions are used for executables...
Security holes : PHP Image View, NewsPro, Photo DB, As_web, GuestBook
Hi all : 1 PHP Image View 1.0 http://www.onlinetools.org Problems : - XSS - phpinfo; Exploits : - /phpimageview.php?pw=show - /phpimageview.php?pic=javascript:alertdocument.domain 2 NewsPro 1.01 http://www.aspbin.co.uk Problem : - Admin access Exploit : - Set cookie "logged,true" on the...
CVE-2001-1331
mandb in the man-db package before 2.3.16-3 allows local users to overwrite arbitrary files via the command line options 1 -u or 2 -c, which do not drop privileges and follow symlinks...
CVE-2001-1331
CVE-2001-1331 affects the man-db package’s mandb tool. The vulnerability exists in mandb before version 2.3.16-3, where invoking mandb with -u or -c does not drop privileges and does not drop file-system symlinks, enabling local users to overwrite arbitrary files. Impact is local, potentially ena...
CVE-2001-1331: Undefined Security Weakness
mandb in the man-db package before 2.3.16-3 allows local users to overwrite arbitrary files via the command line options 1 -u or 2 -c, which do not drop privileges and follow symlinks...
Format string bug in AOLServer DB API
Format string bug in NsPdLog API call...
CVE-1999-1330
The CVE-1999-1330 issue affects the db library’s snprintf usage in version 1.85.4, where the size parameter is ignored and could permit buffer overflows that proper snprintf implementation would prevent. This describes a potential local memory corruption risk. Exploitation details or concrete rem...