8068 matches found
CVE-2002-0702
Format string vulnerabilities in the logging routines for dynamic DNS code print.c of ISC DHCP daemon DHCPD 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malicious DNS servers to execute arbitrary code via format strings in a DNS server response...
Security Advisory FreeBSD-SA-02:30.ktrace
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:30 Security Advisory The FreeBSD Project Topic: Users may trace previously privileged processes Category: core Module: ktrace Announced: 2002-07-12 Credits: Theo DeRaadt...
2fax buffer overflow
Buffer overflow in -bpcx command line option...
Buffer overflow in HP-UX cifslogin
Buffer overflow on oversized -P option...
IBM Net.Commerce orderdspc.d2w order_rn Option SQL Injection
The macro orderdspc.d2w in the remote IBM Net.Commerce 3x is vulnerable to a SQL injection attack via the 'orderrn' option. An attacker may use it to abuse your database in many ways. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
QNX RTOS 6.1 - PKG-Installer Local Buffer Overflow
QNX RTOS 6.1 - PKG-Installer Local Buffer Overflow / source: https://www.securityfocus.com/bid/4918/info It has been reported that the pkg-installer utility for QNX is vulnerable to a buffer overflow condition. The vulnerability is a result of an unbounded string copy of the argument to the "-U"...
QNX RTOS 6.1 - 'PKG-Installer' Local Buffer Overflow
/ source: https://www.securityfocus.com/bid/4918/info It has been reported that the pkg-installer utility for QNX is vulnerable to a buffer overflow condition. The vulnerability is a result of an unbounded string copy of the argument to the "-U" commandline option of pkg-installer to a local...
QNX RTOS 4.25 - CRTTrap File Disclosure
QNX RTOS 4.25 - CRTTrap File Disclosure source: https://www.securityfocus.com/bid/4901/info The QNX RTOS crttrap binary includes a command-line option for specifying a configuration file. crttrap is installed setuid by default. crttrap Local attackers may specify an arbitrary system file in place...
Buffer overflow in Caldera OpenServer sar
Buffer overflow in -o command line option...
CVE-2002-0272
Buffer overflows in mpg321 before 0.2.9 allows local and possibly remote attackers to execute arbitrary code via a long URL to 1 a command line option, 2 an HTTP request, or 3 an FTP request...
CVE-2001-1272: Undefined Security Weakness
wmtv 0.6.5 and earlier does not properly drop privileges, which allows local users to execute arbitrary commands via the -e external command option...
CVE-2002-0272: Undefined Security Weakness
Buffer overflows in mpg321 before 0.2.9 allows local and possibly remote attackers to execute arbitrary code via a long URL to 1 a command line option, 2 an HTTP request, or 3 an FTP request...
eSecurityOnline Security Advisory 2397 - Sun Solaris admintool -d and PRODVERS buffer overflow vulnerabilities
eSO Security Advisory: 2397 Discovery Date: March 28, 2000 ID: eSO:2397 Title: Sun Solaris admintool -d and PRODVERS buffer overflow vulnerabilities Impact: Local attackers can gain root privileges Affected Technology: Solaris 2.5, 2.5.1, 2.6, 7, 8 SPARC and x86 Vendor Status: Patches are availab...
Buffer overflow in slrnpull
Buffer overflow on -d command line option...
Watchguard SOHO DoS
Invalid IP option flood causes device to crash...
AZL-36937 CVE-2002-0129 affecting package efax 0.9a-34
efax 0.9 and earlier, when installed setuid root, allows local users to read arbitrary files via the -d option, which prints the contents of the file in a warning message...
CVE-2002-0089
Buffer overflow in admintool in Solaris 2.5 through 8 allows local users to gain root privileges via long arguments to 1 the -d command line option, or 2 the PRODVERS argument in the .cdtoc file...
CVE-2002-0129: Undefined Security Weakness
efax 0.9 and earlier, when installed setuid root, allows local users to read arbitrary files via the -d option, which prints the contents of the file in a warning message...
CVE-2001-1198: Undefined Security Weakness
RLPDaemon in HP-UX 10.20 and 11.0 allows local users to overwrite arbitrary files and gain privileges by specifying the target file in the -L option...