2474 matches found
Qualcomm Eudora 5.05.16.0 - Long Attachment Filename Denial of Service (1)
Qualcomm Eudora 5.05.16.0 - Long Attachment Filename Denial of Service 1 source: https://www.securityfocus.com/bid/7026/info Eudora may crash when handling messages which contain attachments with excessively long filenames. This condition reportedly occurs when messages with malformed attachment...
Qualcomm Eudora 5.0/5.1/6.0 - Long Attachment Filename Denial of Service (1)
source: https://www.securityfocus.com/bid/7026/info Eudora may crash when handling messages which contain attachments with excessively long filenames. This condition reportedly occurs when messages with malformed attachment filenames are stored in the user's mailbox, which could result in a...
Qualcomm Eudora 5.0/5.1/6.0 - Long Attachment Filename Denial of Service (2)
source: https://www.securityfocus.com/bid/7026/info Eudora may crash when handling messages which contain attachments with excessively long filenames. This condition reportedly occurs when messages with malformed attachment filenames are stored in the user's mailbox, which could result in a...
CVE-2002-1393
Multiple vulnerabilities in KDE 2 and KDE 3.x through 3.0.5 do not quote certain parameters that are inserted into a shell command, which could allow remote attackers to execute arbitrary commands via 1 URLs, 2 filenames, or 3 e-mail addresses...
CVE-2002-1393: Undefined Security Weakness
Multiple vulnerabilities in KDE 2 and KDE 3.x through 3.0.5 do not quote certain parameters that are inserted into a shell command, which could allow remote attackers to execute arbitrary commands via 1 URLs, 2 filenames, or 3 e-mail addresses...
CVE-2002-1395: Undefined Security Weakness
Internet Message IM 141-18 and earlier uses predictable file and directory names, which allows local users to 1 obtain unauthorized directory permissions via a temporary directory used by impwagent, and 2 overwrite and create arbitrary files via immknmz...
Multiple FTP clients contain directory traversal vulnerabilities
Overview Multiple File Transfer Protocol FTP clients contain directory traversal vulnerabilities that allow a malicious FTP server to overwrite files on the client host. Description In a typical file transfer operation, one participant the client requests a file while a second participant the...
CVE-2002-0370
Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with long filenames, including 1 Microsoft Windows 98 with Plus! Pack, 2 Windows XP, 3 Windows ME, 4 Lotus Notes R4 through R...
Long filenames buffer overflow in PGP
Buffer overflow on filenames longer than 192 bytes...
ncompress vulnerable to buffer overflow via long filename
Overview Some versions of ncompress contain a buffer-overflow vulnerability. Description Versions 4.2.4 and earlier of ncompress do not properly handle filenames longer than 1023 characters. --- Impact By supplying long filenames to ncompress, an attacker may be able to gain local access to the...
TFTP Long Filename Vulnerability
...
CVE-2001-1146: Undefined Security Weakness
AllCommerce with debugging enabled in EnGarde Secure Linux 1.0.1 creates temporary files with predictable names, which allows local users to modify files via a symlink attack...
CVE-2002-0410
sendmessage.php in AeroMail before 1.45 allows remote attackers to read arbitrary files on the server, instead of just uploaded files, via an attachment that modifies the filename to be uploaded...
CVE-2001-0815
Buffer overflow in PerlIS.dll in Activestate ActivePerl 5.6.1.629 and earlier allows remote attackers to execute arbitrary code via an HTTP request for a long filename that ends in a .pl extension...
PT-2001-1972 · Perception · Perception Liteserve
Name of the Vulnerable Software and Affected Versions: Perception LiteServe version 1.25 Description: The issue allows remote attackers to obtain the source code of CGI scripts via URLs that contain MS-DOS conventions, such as upper case letters or 8.3 file names. Recommendations: For Perception...
CVE-1999-1440: Undefined Security Weakness
Win32 ICQ 98a 1.30, and possibly other versions, does not display the entire portion of long filenames, which could allow attackers to send an executable file with a long name that contains so many spaces that the .exe extension is not displayed, which could make the user believe that the file is...
Дырка в man (symbolic link)
При работе утилиты makewhatis создаются временные файлы с предсказуемыми именами, что позволяет атаку с помощью символьных линков...
[synnergy] - GnuPG remote format string vulnerability
--------------------------------------------------------------------------- Remote arbitrary code execution vulnerability in GnuPG = 1.0.5 Synnergy Networks http://www.synnergy.net/ By: fish stiqz [email protected] Released: 05/29/2001...
CVE-2000-0749: Undefined Security Weakness
Buffer overflow in the Linux binary compatibility module in FreeBSD 3.x through 5.x allows local users to gain root privileges via long filenames in the linux shadow file system...