2410 matches found
DSA-154 fam - privilege escalation
Bulletin has no description...
CVE-2002-0716
Format string vulnerability in crontab for SCO OpenServer 5.0.5 and 5.0.6 allows local users to gain privileges via format string specifiers in the file name argument...
Various Vulnerabilities in ZoneAlarm MailSafe
Tuesday April 2, 2002 Various Vulnerabilities in ZoneAlarm MailSafe Scope ----------- Edvice recently tested ZoneLabs ZoneAlarm Pro ability to detect and quarantine incoming e-mail attachments that may contain malicious code or viruses. This functionality is provided by ZoneAlarm's MailSafe...
CVE-2002-0024
File Download box in Internet Explorer 5.01, 5.5 and 6.0 allows an attacker to use the Content-Disposition and Content-Type HTML header fields to modify how the name of the file is displayed, which could trick a user into believing that a file is safe to download...
Переполнение буфера в ripmime (buffer overflow)
Переполнение буфера при длинном имени файла...
WU-FTPD does not properly handle file name globbing
Overview SecurityFocus and CORE Security Technologies have reported a vulnerability in WU-FTPD. WU-FTPD does not handle file name globbing properly and may allow an attacker to execute arbitrary code. WU-FTPD is a widely-used FTP daemon that is included in many UNIX and Linux distributions. This...
CVE-2001-0875
Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name of the file in the dialogue in a way that could fool users into thinking that the file type is safe to download...
CVE-2001-0449
Buffer overflow in WinZip 8.0 allows attackers to execute arbitrary commands via a long file name that is processed by the /zipandemail command line option...
Дырка в fcheck (input validation)
При вызове внешней программы с именем файла не проверяется наличией shell-символов в имени файла...
Дырка в WinZip (zipandemail)
Переполнение буфера при длинном имени файла при исопльзовании опции /zipandemail...
Дырка в 24Link Webserver (avoid password protection )
Добавление спец символов к имени файла позволяет обойти защиту файла паролем...
[Update] NSFOCUS SA2000-07: Microsoft IIS 4.0/5.0 CGI File Name Inspection Vulnerability
NSFOCUS Security AdvisorySA2000-07 Topic: Microsoft IIS 4.0/5.0 CGI File Name Inspection Vulnerability Release DateЈє Nov 7th, 2000 Update DateЈє Nov 23rd, 2000 CVE Candidate Numbers: CAN-2000-0886 BUGTRAQ ID : 1912 Affected system: ================ - Microsoft IIS 4.0 - Microsoft IIS 5.0 Impact:...
CVE-2000-0750
Buffer overflow in mopd Maintenance Operations Protocol loader daemon allows remote attackers to execute arbitrary commands via a long file name...
CVE-2000-0481
Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file name...
CVE-2000-0587
The CVE-2000-0587 entry concerns glftpd 1.18, where the privpath directive permits remote attackers to bypass directory access restrictions by abusing filename completion. This constitutes a vulnerability in the directory traversal/access-control mechanism, allowing authorized-appearing access to...
CVE-2000-0587
The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completion capability...
CVE-2000-0481
CVE-2000-0481 describes a buffer overflow in KDE Kmail triggered by an attachment with a long file name, allowing a remote attacker to cause a denial of service. The NVD entry lists a Network-attack vector, low complexity, no authentication, with Availability impact described as Partial. The CVSS...
Переполнение буфера в mopd
Переполнение буфера при длинном имени файла, несколько ошибок форматной строки...