Lucene search
+L

4155 matches found

RedHat Linux
RedHat Linux
added 2007/10/02 8:55 p.m.9 views

nfs-utils-lib NFSv4 user id mapping flaw

The NFSv4 ID mapper nfsidmap before 0.17 does not properly handle return values from the getpwnamr function when performing a username lookup, which can cause it to report a file as being owned by "root" instead of "nobody" if the file exists on the server but not on the client...

6.2CVSS5.8AI score0.00341EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2007/09/05 1:17 a.m.35 views

CVE-2007-4135

The NFSv4 ID mapper nfsidmap before 0.17 does not properly handle return values from the getpwnamr function when performing a username lookup, which can cause it to report a file as being owned by "root" instead of "nobody" if the file exists on the server but not on the client...

6.2CVSS5.9AI score0.00341EPSS
SaveExploits0References1
OSV
OSV
added 2007/09/05 1:17 a.m.3 views

DEBIAN-CVE-2007-4135

The NFSv4 ID mapper nfsidmap before 0.17 does not properly handle return values from the getpwnamr function when performing a username lookup, which can cause it to report a file as being owned by "root" instead of "nobody" if the file exists on the server but not on the client...

6.2CVSS6.5AI score0.00341EPSS
SaveExploits0References1
Prion
Prion
added 2007/09/05 1:17 a.m.21 views

Code injection

The NFSv4 ID mapper nfsidmap before 0.17 does not properly handle return values from the getpwnamr function when performing a username lookup, which can cause it to report a file as being owned by "root" instead of "nobody" if the file exists on the server but not on the client...

6.2CVSS6.4AI score0.00341EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2007/09/05 1:17 a.m.9 views

CVE-2007-4135

The NFSv4 ID mapper nfsidmap before 0.17 does not properly handle return values from the getpwnamr function when performing a username lookup, which can cause it to report a file as being owned by "root" instead of "nobody" if the file exists on the server but not on the client...

6.2AI score
SaveExploits0References10
CVE
CVE
added 2007/09/05 1:0 a.m.67 views

CVE-2007-4135

CVE-2007-4135 affects the NFSv4 ID mapper (libnfsidmap) prior to 0.17. The root cause is improper handling of return values from getpwnam_r during username lookup, which can cause a file to be reported as owned by root instead of nobody when the file exists on the server but not on the client. Pu...

6.2CVSS6AI score0.00341EPSS
SaveExploits0References9Affected Software1
Tenable Nessus
Tenable Nessus
added 2007/08/13 12:0 a.m.21 views

MDKA-2007:083 : imap

Due to the configuration of the xinetd configuration files included in the imap package, initial connections to the IMAP and/or POP3 services would have a substantial delay due to xinetd attempting to perform ident lookups. This update has corrected xinetd configuration files that remove the iden...

SaveExploits0References1
zdt
zdt
added 2007/06/14 12:0 a.m.31 views

win32 download and execute 124 bytes

Exploit for win32 platform in category shellcode ==================================== win32 download and execute 124 bytes ==================================== ; ; relocateable dynamic runtime assembly code example using hash lookup for IE exploits only ; the URLMON.DLL must already be loaded int...

7AI score
SaveExploits0
Exploit DB
Exploit DB
added 2007/06/14 12:0 a.m.48 views

win32 download and execute 124 bytes

win32 download and execute 124 bytes. Shellcode exploit for win32 platform ; ; relocateable dynamic runtime assembly code example using hash lookup for IE exploits only ; the URLMON.DLL must already be loaded into the process space for this to work, so do not run on its own!! ; ; to test use...

SaveExploits0
seebug.org
seebug.org
added 2007/06/14 12:0 a.m.18 views

win32 download and execute 124 bytes

No description provided by source. ; ; relocateable dynamic runtime assembly code example using hash lookup for IE exploits only ; the URLMON.DLL must already be loaded into the process space for this to work, so do not run on its own!! ; ; to test use /DTESTCODE in ml command line ; ;...

7.1AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2007/05/16 6:32 p.m.9 views

infinite recursion in netlink

The nlfiblookup function in net/ipv4/fibfrontend.c in Linux Kernel before 2.6.20.8 allows attackers to cause a denial of service kernel panic via NETLINKFIBLOOKUP replies, which trigger infinite recursion and a stack overflow...

4.9CVSS5.9AI score0.01024EPSS
SaveExploits1References4
Check Point Advisories
Check Point Advisories
added 2007/03/30 12:0 a.m.2 views

SUN-RPC Programs Lookup

...

7AI score
SaveExploits0
Prion
Prion
added 2007/03/19 7:19 p.m.17 views

Design/Logic Flaw

The ndeb-binary feature in Lookup lookup-el allows local users to overwrite arbitrary files via a symlink attack on temporary files...

4.6CVSS6.3AI score0.00367EPSS
SaveExploits0References10
OSV
OSV
added 2007/03/19 7:19 p.m.9 views

CVE-2007-0237

The ndeb-binary feature in Lookup lookup-el allows local users to overwrite arbitrary files via a symlink attack on temporary files...

6AI score
SaveExploits0References12
UbuntuCve
UbuntuCve
added 2007/03/19 7:19 p.m.21 views

CVE-2007-0237

The ndeb-binary feature in Lookup lookup-el allows local users to overwrite arbitrary files via a symlink attack on temporary files...

4.6CVSS6AI score0.00367EPSS
SaveExploits0References5
NVD
NVD
added 2007/03/19 7:19 p.m.13 views

CVE-2007-0237

The ndeb-binary feature in Lookup lookup-el allows local users to overwrite arbitrary files via a symlink attack on temporary files...

4.6CVSS6.1AI score0.00367EPSS
SaveExploits0References10
OSV
OSV
added 2007/03/19 7:19 p.m.4 views

DEBIAN-CVE-2007-0237

The ndeb-binary feature in Lookup lookup-el allows local users to overwrite arbitrary files via a symlink attack on temporary files...

4.6CVSS6.7AI score0.00367EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2007/03/19 7:0 p.m.29 views

CVE-2007-0237

The ndeb-binary feature in Lookup lookup-el allows local users to overwrite arbitrary files via a symlink attack on temporary files...

4.6CVSS6.1AI score0.00367EPSS
SaveExploits0
Cvelist
Cvelist
added 2007/03/19 7:0 p.m.21 views

CVE-2007-0237

The ndeb-binary feature in Lookup lookup-el allows local users to overwrite arbitrary files via a symlink attack on temporary files...

6AI score0.00367EPSS
SaveExploits0References10
CVE
CVE
added 2007/03/19 7:0 p.m.74 views

CVE-2007-0237

CVE-2007-0237 affects the ndeb-binary feature of Lookup (lookup-el). The vulnerability arises from insecure temporary file handling, allowing a local attacker to perform a symlink attack to overwrite arbitrary files. Affected advisories/documentation: Gentoo GLSA 200712-07, GLSA 200712-07 (Gentoo...

4.6CVSS5.9AI score0.00367EPSS
SaveExploits0References10Affected Software1
Rows per page
Query Builder