DEBIAN-CVE-2005-0071

vdr before 1.2.6 does not securely create files, which allows attackers to overwrite arbitrary files...

MacOS multiple browsers unauthorized local files access

By using AppleWebKit XMLHttpRequest it's possible to mount disk image with HTML documents to known location...

[Full-disclosure] rsnapshot Security Advisory 001

============================================================================ rsnapshot Security Advisory 001 [email protected] http://www.rsnapshot.org/security/ Apr 10th, 2005 Nathan Rosenquist ============================================================================ Severity: high...

[Full-disclosure] Multiple Vulnerabilities of PY Software Active Webcam WebServer

Multiple Vulnerabilities of PY Software Active Webcam WebServer By Sowhat 04.Jan.2005 http://secway.org/advisory/ad20050104.txt Product: PY Software Active Webcam 5.5 Vendor: PY Software, Inc. 1 Introduction Active WebCam is a popular shareware program for capturing video streams from video devic...

RHEL 4 : ethereal (RHSA-2005:037)

Updated Ethereal packages that fix various security vulnerabilities are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ethereal is a program for monitoring network traffic. A number of security fla...

security flaw

The shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other processes, which could cause sensitive memory to be swapped to disk, which could allow it to be read by other users once it has been released...

CVE-2005-0176

The shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other processes, which could cause sensitive memory to be swapped to disk, which could allow it to be read by other users once it has been released...

CVE-2004-1476

Stack-based buffer overflow in the VideoCD VCD code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label...

security flaw

Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service application hang and possibly fill available disk space via an invalid RTP timestamp...

DSA-656-1 vdr - insecure file access

Bulletin has no description...

CVE-2004-1140

Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service application hang and possibly fill available disk space via an invalid RTP timestamp...

CVE-2004-1476

Stack-based buffer overflow in the VideoCD VCD code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label...

DEBIAN-CVE-2004-1476

Stack-based buffer overflow in the VideoCD VCD code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label...

CVE-2004-2392

libuser 0.51.7 allows attackers to cause a denial of service crash or disk consumption via unknown attack vectors, related to read failures and other bugs...

PT-2004-2747 · Ipswitch · Ipswitch Ws Ftp Server

Name of the Vulnerable Software and Affected Versions: Ipswitch WS FTP Server version 4.0.2 Description: The issue allows remote attackers to cause a denial of service disk consumption and bypass file size restrictions via a REST command with a large size argument, followed by a STOR of a smaller...

CVE-2004-1140: Undefined Security Weakness

Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service application hang and possibly fill available disk space via an invalid RTP timestamp...

PT-2004-2105 · Ethereal +1 · Ethereal +1

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.0 through 0.10.7 Description: The issue allows remote attackers to cause a denial of service, resulting in an application hang, and possibly fill available disk space via an invalid RTP timestamp. Recommendations: For...

CVE-2004-1233

CVE-2004-1233 concerns Gadu-Gadu’s DCC file transfer capability: an integer overflow in processing a user packet with an invalid file length. This leads to denial of service (disk consumption) when the vulnerable component handles DCC file transfers. Affected software is Gadu-Gadu; the exact vers...

CVE-2004-1233: Undefined Security Weakness

Integer overflow in Gadu-Gadu allows remote attackers to cause a denial of service disk consumption via a user packet to the DCC file transfer capability with an invalid file length...

CVE-2002-1266

CVE-2002-1266 affects Mac OS X 10.2.2 and describes a local privilege elevation where a user can gain privileges by mounting a disk image file created on another system. The provided documents do not specify the underlying root cause details, affected components, or any remediation steps. No expl...