5855 matches found
CVE-2003-0281: Undefined Security Weakness
Buffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows local users to execute arbitrary code via a long INTERBASE environment variable when calling 1 gdsinetserver, 2 gdslockmgr, or 3 gdsdrop...
SheerDNS < 1.0.1 Multiple Vulnerabilities
The remote server seems to be running SheerDNS 1.0.0 or older. This version is vulnerable to several flaws allowing : - A remote attacker to read certain files with predefined names A, PTR, CNAME, ... - A local attacker to read the first line of arbitrary files with the privileges of the DNS serv...
CVE-2002-1051
Format string vulnerability in TrACESroute 6.0 GOLD aka NANOG traceroute allows local users to execute arbitrary code via the -T terminator command line argument...
CVE-2001-1375
tcl/tk package tcltk 8.3.1 searches for its libraries in the current working directory before other directories, which could allow local users to execute arbitrary code via a Trojan horse library that is under a user-controlled directory...
CVE-2002-0981: Undefined Security Weakness
Buffer overflow in ndcfg command for UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to execute arbitrary code via a long command line...
CVE-2002-0366: Undefined Security Weakness
Buffer overflow in Remote Access Service RAS phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server RRAS allows local users to execute arbitrary code by modifying the rasphone.pbk file to use a long dial-up entry...
CVE-2002-0965: Undefined Security Weakness
Buffer overflow in TNS Listener for Oracle 9i Database Server on Windows systems, and Oracle 8 on VM, allows local users to execute arbitrary code via a long SERVICENAME parameter, which is not properly handled when writing an error message to a log file...
CVE-2003-0056
Buffer overflow in secure locate slocate before 2.7 allows local users to execute arbitrary code via a long 1 -c or 2 -r command line argument...
CVE-2003-0004
Buffer overflow in the Windows Redirector function in Microsoft Windows XP allows local users to execute arbitrary code via a long parameter...
SECURITY.NNOV: Far buffer overflow
Title: Buffer overflow in Far Manager Affected: Far Manager 1.70beta1 and prior saved EIP overflow 1.70beta4 off-by-one frame pointer overflow Vendor: RARSoft Risk: Average local code execution Exploitable: Yes Remote: No Vendor Notified: January, 30 2003 I. Introduction: FAR is most convinient...
CVE-2003-0034
Buffer overflow in the mtink status monitor, as included in the printer-drivers package in Mandrake Linux, allows local users to execute arbitrary code via a long HOME environment variable...
CVE-2003-0034
Buffer overflow in the mtink status monitor, as included in the printer-drivers package in Mandrake Linux, allows local users to execute arbitrary code via a long HOME environment variable...
CVE-2003-0034
Buffer overflow in the mtink status monitor, as included in the printer-drivers package in Mandrake Linux, allows local users to execute arbitrary code via a long HOME environment variable...
CVE-2003-0034: Undefined Security Weakness
Buffer overflow in the mtink status monitor, as included in the printer-drivers package in Mandrake Linux, allows local users to execute arbitrary code via a long HOME environment variable...
CVE-2003-0035: Undefined Security Weakness
Buffer overflow in escputil, as included in the printer-drivers package in Mandrake Linux, allows local users to execute arbitrary code via a long printer-name command line argument...
DEBIAN-CVE-2002-1384
Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf...
CVE-2002-2282
McAfee VirusScan 4.5.1, when the WebScanX.exe module is enabled, searches for particular DLLs from the user's home directory, even when browsing the local hard drive, which allows local users to run arbitrary code via malicious versions of those DLLs...
CVE-2002-1767
Buffer overflow in tnslsnr of Oracle 8i Database Server 8.1.5 for Linux allows local users to execute arbitrary code as the oracle user via a long command line argument...