8267 matches found
MacOS multiple browsers unauthorized local files access
By using AppleWebKit XMLHttpRequest it's possible to mount disk image with HTML documents to known location...
[Full-disclosure] rsnapshot Security Advisory 001
============================================================================ rsnapshot Security Advisory 001 [email protected] http://www.rsnapshot.org/security/ Apr 10th, 2005 Nathan Rosenquist ============================================================================ Severity: high...
[Full-disclosure] Multiple Vulnerabilities of PY Software Active Webcam WebServer
Multiple Vulnerabilities of PY Software Active Webcam WebServer By Sowhat 04.Jan.2005 http://secway.org/advisory/ad20050104.txt Product: PY Software Active Webcam 5.5 Vendor: PY Software, Inc. 1 Introduction Active WebCam is a popular shareware program for capturing video streams from video devic...
RHEL 4 : ethereal (RHSA-2005:037)
Updated Ethereal packages that fix various security vulnerabilities are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ethereal is a program for monitoring network traffic. A number of security fla...
security flaw
The shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other processes, which could cause sensitive memory to be swapped to disk, which could allow it to be read by other users once it has been released...
CVE-2005-0176
The shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other processes, which could cause sensitive memory to be swapped to disk, which could allow it to be read by other users once it has been released...
CVE-2004-1476
Stack-based buffer overflow in the VideoCD VCD code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label...
security flaw
Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service application hang and possibly fill available disk space via an invalid RTP timestamp...
DSA-656-1 vdr - insecure file access
Bulletin has no description...
CVE-2004-1140
Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service application hang and possibly fill available disk space via an invalid RTP timestamp...
CVE-2004-1476
Stack-based buffer overflow in the VideoCD VCD code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label...
CVE-2004-2392
libuser 0.51.7 allows attackers to cause a denial of service crash or disk consumption via unknown attack vectors, related to read failures and other bugs...
DEBIAN-CVE-2004-1476
Stack-based buffer overflow in the VideoCD VCD code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label...
PT-2004-2747 · Ipswitch · Ipswitch Ws Ftp Server
Name of the Vulnerable Software and Affected Versions: Ipswitch WS FTP Server version 4.0.2 Description: The issue allows remote attackers to cause a denial of service disk consumption and bypass file size restrictions via a REST command with a large size argument, followed by a STOR of a smaller...
PT-2004-2105 · Ethereal +1 · Ethereal +1
Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.0 through 0.10.7 Description: The issue allows remote attackers to cause a denial of service, resulting in an application hang, and possibly fill available disk space via an invalid RTP timestamp. Recommendations: For...
CVE-2004-1233
CVE-2004-1233 concerns Gadu-Gadu’s DCC file transfer capability: an integer overflow in processing a user packet with an invalid file length. This leads to denial of service (disk consumption) when the vulnerable component handles DCC file transfers. Affected software is Gadu-Gadu; the exact vers...
CVE-2002-1266
CVE-2002-1266 affects Mac OS X 10.2.2 and describes a local privilege elevation where a user can gain privileges by mounting a disk image file created on another system. The provided documents do not specify the underlying root cause details, affected components, or any remediation steps. No expl...
CVE-2002-1154
anlgform.pl in Analog before 5.23 does not restrict access to the PROGRESSFREQ progress update command, which allows remote attackers to cause a denial of service disk consumption by using the command to report updates more frequently and fill the web server error log...
CVE-2002-1154
anlgform.pl in Analog before 5.23 does not restrict access to the PROGRESSFREQ progress update command, which allows remote attackers to cause a denial of service disk consumption by using the command to report updates more frequently and fill the web server error log...