CVE-2003-0372

Signed integer vulnerability in libnasl in Nessus before 2.0.6 allows local users with plugin upload privileges to cause a denial of service core dump and possibly execute arbitrary code by causing a negative argument to be provided to the insstr function as used in a NASL script...

WinMX 2.6 - Design Error

WinMX 2.6 - Design Error WinMX Design Error Vendor: Frontcode Technologies Product: WinMX Version: = 2.6 Website: http://www.winmx.com/ BID: 7771 Description: WinMX 2.6 is an older version of the popular file sharing client WinMX. While the current version is 3.31, 2.6 still remains quite popular...

WinMX < 2.6 - Design Error

WinMX Design Error Vendor: Frontcode Technologies Product: WinMX Version: = 2.6 Website: http://www.winmx.com/ BID: 7771 Description: WinMX 2.6 is an older version of the popular file sharing client WinMX. While the current version is 3.31, 2.6 still remains quite popular. Especially amongst user...

RedHat 9.0 / Slackware 8.1 - '/bin/mail' Carbon Copy Field Buffer Overrun

source: https://www.securityfocus.com/bid/7760/info A vulnerability has been discovered in the Linux /bin/mail utility. The problem occurs when processing excessive data within the carbon copy field. Due to insufficient bounds checking while parsing this information it may be possible to trigger ...

RedHat 9.0 Slackware 8.1 - binmail Carbon Copy Field Buffer Overrun

RedHat 9.0 Slackware 8.1 - binmail Carbon Copy Field Buffer Overrun source: https://www.securityfocus.com/bid/7760/info A vulnerability has been discovered in the Linux /bin/mail utility. The problem occurs when processing excessive data within the carbon copy field. Due to insufficient bounds...

Youbin 2.5/3.0/3.4 - 'HOME' Buffer Overflow

source: https://www.securityfocus.com/bid/7503/info It has been reported that youbin is vulnerable to a locally exploitable buffer overflow. The problem is said to occur while processing environment variables. Specifically, an internal memory buffer may be overrun while handling a HOME environmen...

IBM AIX 4.3.x/5.1 - 'ERRPT' Local Buffer Overflow

source: https://www.securityfocus.com/bid/5885/info The IBM AIX errpt command is prone to a locally exploitable buffer overflow condition. It is possible to exploit this condition to execute arbitrary attacker-supplied instructions with root privileges. !/usr/bin/perl FileName: xerrptaix5.pl...

KLA10092 LPE vulnerability in Borland Interbase

A buffer overflow was found in Borland Interbase. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally at a point related to gdslockmgr via specially designed environment variables. Original advisories - Related products Borland-Interba...

CVE-2001-0873

uuxqt in Taylor UUCP package does not properly remove dangerous long options, which allows local users to gain privileges by calling uux and specifying an alternate configuration file with the --config option...

iDEFENSE Security Advisory 02.10.03: Buffer Overflow In NOD32 Antivirus Software for Unix

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 02.10.03: http://www.idefense.com/advisory/02.10.03.txt Buffer Overflow In NOD32 Antivirus Software for Unix February 10, 2003 I. BACKGROUND Eset Software's NOD32 Antivirus System is a cross-platform anti-virus application...

KLA10153 DoS vulnerability in FAR manager

Lack of string length check was found in FAR manager. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited locally via a specially designed path. Original advisories vulnerability Related products FAR-Manager CVE list CVE-2003-1445...

iDEFENSE Security Advisory 11.11.02: Buffer Overflow in KDE resLISa

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 11.11.02: http://www.idefense.com/advisory/11.11.02.txt Buffer Overflow in KDE resLISa November 11, 2002 I. BACKGROUND KDE is a popular open source graphical desktop environment for Unix workstations. Its kdenetwork module...

[SECURITY] [DSA 188-1] New Apache-SSL packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 188-1 [email protected] http://www.debian.org/security/ Martin Schulze November 5th, 2002 http://www.debian.org/security/faq -...

PT-2002-1855 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache versions 1.3.x through 1.3.26 Description: The issue concerns the shared memory scoreboard in the HTTP daemon, which allows any user running as the Apache UID to send a SIGUSR1 signal to any process as root. This can result in a denial...

HP Tru64 UNIX "deliver" contains buffer overflow (SSRT2275)

Overview The HP Tru64 UNIX implementation of "deliver" contains a locally exploitable buffer overflow. Description "deliver" is used to deliver mail to an IMAP mailbox . A locally exploitable buffer overflow in "deliver" may permit a local attacker to gain elevated privileges and execute arbitrar...

HP Tru64 UNIX "lprm" contains buffer overflow (SSRT2260)

Overview The HP Tru64 UNIX implementation of "lprm" contains a locally exploitable buffer overflow. Description "lprm" is used to remove requests from a printer spool queue. A locally exploitable buffer overflow in "lprm" may permit a local attacker to gain elevated privileges and execute arbitra...

HP Tru64 UNIX "lpr" contains buffer overflow (SSRT2275)

Overview The HP Tru64 UNIX implementation of "lpr" contains a locally exploitable buffer overflow. Description "lpr" is used to send files to a print spool. A locally exploitable buffer overflow in "lpr" may permit a local attacker to gain elevated privileges and execute arbitrary code on a...

The ScrollKeeper Root Trap

Release date : September 2 2002 Author : Spybreak [email protected] Package : Scrollkeeper Version : 0.3.4, 0.3.11 Severity : Medium to High Vendor homepage : scrollkeeper.sourceforge.net Status : vendor contacted Problem : Insecure creation of tempfiles in /tmp Local : yes Remote : no 1...

Sun Solaris ptexec does not adequately validate argument passed via -o option

Overview The Sun Solaris ptexec command is subject to a buffer overflow due to not adequately validating arguments passed via the -o option. Description A locally exploitable buffer overflow exists in the ptexec command which is included in the SUNWvts package. This package is not included in the...

Mandrake 789 RedHat 6.x7 Bonobo EFSTool - Commandline Argument Buffer Overflow (2)

Mandrake 789 RedHat 6.x7 Bonobo EFSTool - Commandline Argument Buffer Overflow 2 source: https://www.securityfocus.com/bid/5125/info Bonobo is a set of tools and CORBA interfaces included as part of the Gnome infrastructure. It is designed for use on the Linux and Unix operating systems. A boundr...