CVE-2005-1313

CVE-2005-1313 describes a cross-site scripting (XSS) vulnerability in the Horde Passwd module prior to 2.2.2. The issue allows remote attackers to inject arbitrary web script or HTML via the parent frame page title. Affected component: Horde Passwd module. Root cause: insufficient input validatio...

CVE-2005-1313: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Horde Passwd module before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...

CVE-2003-0061

CVE-2003-0061: Buffer overflow in passwd for HP-UX B.10.20 allows local users to gain root privileges via a long LANG environment variable. This is supported by multiple sources in the provided documents (NVD, CVE list, RH advisory). The descriptions do not specify root cause details beyond overf...

CVE-2003-0061: Undefined Security Weakness

Buffer overflow in passwd for HP UX B.10.20 allows local users to execute arbitrary commands with root privileges via a long LANG environment variable...

CVE-2002-1616: Undefined Security Weakness

Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges via 1 su, 2 chsh, 3 passwd, 4 chfn, 5 dxchpwd, and 6 libc...

CVE-2003-1120

The CVE-2003-1120 entry concerns SSH Tectia Server 4.0.3 and 4.0.4 on Unix where the password-change plugin (ssh-passwd-plugin) is enabled. The vulnerability is a race condition that allows local users to obtain the server’s private key. The connected documents confirm the affected product and th...

CVE-2003-1120: Undefined Security Weakness

Race condition in SSH Tectia Server 4.0.3 and 4.0.4 for Unix, when the password change plugin ssh-passwd-plugin is enabled, allows local users to obtain the server's private key...

DEBIAN-CVE-2004-1001

Unknown vulnerability in the passwdcheck function in Shadow 4.0.4.1, and possibly other versions before 4.0.5, allows local users to conduct unauthorized activities when an error from a pamchauthtok function call is not properly handled...

HP-UX PHCO_27373 : HPSBUX0208-210 Sec. Vulnerability in VVOS passwd(1) (rev. 2)

s700800 11.04 VVOS cumulative passwd1 patch : Unexpected behavior using passwd1. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO27373. The text itself is copyright C Hewlett-Packard Development Company, L....

security flaw

lppasswd in CUPS 1.1.22 does not remove the passwd.new file if it encounters a file-size resource limit while writing to passwd.new, which causes subsequent invocations of lppasswd to fail...

Mandrake Linux Security Advisory : cups (MDKSA-2005:008)

A buffer overflow was discovered in the ParseCommand function in the hpgltops utility. An attacker with the ability to send malicious HPGL files to a printer could possibly execute arbitrary code as the 'lp' user CVE-2004-1267. Vulnerabilities in the lppasswd utility were also discovered. The...

RHEL 3 : cups (RHSA-2005:013)

Updated CUPS packages that fix several security issues are now available. The Common UNIX Printing System provides a portable printing layer for UNIXR operating systems. A buffer overflow was found in the CUPS pdftops filter, which uses code from the Xpdf package. An attacker who has the ability ...

security flaw

lppasswd in CUPS 1.1.22, when run in environments that do not ensure that file descriptors 0, 1, and 2 are open when lppasswd is called, does not verify that the passwd.new file is different from STDERR, which allows local users to control output to passwd.new via certain user input that triggers...

security flaw

lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors...

DEBIAN-CVE-2004-1268

lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors...

DEBIAN-CVE-2004-1269

lppasswd in CUPS 1.1.22 does not remove the passwd.new file if it encounters a file-size resource limit while writing to passwd.new, which causes subsequent invocations of lppasswd to fail...

CVE-2004-2394

Off-by-one error in passwd 0.68 and earlier, when using the --stdin option, causes passwd to use the first 78 characters of a password instead of the first 79, which results in a small reduction of the search space required for brute force attacks...

CVE-2004-2395

Memory leak in passwd 0.68 allows local users to cause a denial of service memory consumption via a large number of failed read attempts from the password buffer...

Solaris 8/9 passwd circ() Local Root Exploit

Exploit for solaris platform in category local exploits ============================================ Solaris 8/9 passwd circ Local Root Exploit ============================================ / $Id: raptorpasswd.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorpasswd.c - passwd circ local, Solaris/SPA...

Solaris 8/9 passwd - 'circ()' Local Privilege Escalation

/ $Id: raptorpasswd.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorpasswd.c - passwd circ local, Solaris/SPARC 8/9 Copyright c 2004 Marco Ivaldi Unknown vulnerability in passwd1 in Solaris 8.0 and 9.0 allows local users to gain privileges via unknown attack vectors CAN-2004-0360. "Those of you...