Lucene search
K

6 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 6:20 a.m.2 views

SUSE CVE-2004-1012

The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command "bodyp" that is treated as a different command "body.peek" and causes an index increment error that leads to an out-of-bounds memory...

10CVSS7.9AI score0.10245EPSS
Exploits0References5
OSV
OSV
added 2016/12/23 10:59 p.m.1 views

DEBIAN-CVE-2016-7787

A maliciously crafted command line for kdesu can result in the user only seeing part of the commands that will actually get executed as super user...

4.9CVSS5.1AI score0.0054EPSS
Exploits0References1
OSV
OSV
added 2016/09/26 4:59 p.m.1 views

CVE-2016-6901

Format string vulnerability in Huawei AR100, AR120, AR150, AR200, AR500, AR550, AR1200, AR2200, AR2500, AR3200, and AR3600 routers with software before V200R007C00SPC900 and NetEngine 16EX routers with software before V200R007C00SPC900 allows remote authenticated users to cause a denial of servic...

6.5CVSS5.8AI score0.00233EPSS
Exploits0References2
OSV
OSV
added 2005/01/10 5:0 a.m.1 views

DEBIAN-CVE-2004-1012

The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command "bodyp" that is treated as a different command "body.peek" and causes an index increment error that leads to an out-of-bounds memory...

10CVSS7.5AI score0.10245EPSS
Exploits0References1
FreeBSD
FreeBSD
added 2004/11/06 12:0 a.m.35 views

Cyrus IMAPd -- PARTIAL command out of bounds memory corruption

Due to a bug within the argument parser of the partial command an argument like "bodyp" will be wrongly detected as "body.peek". Because of this the bufferposition gets increased by 10 instead of 5 and could therefore point outside the allocated memory buffer for the rest of the parsing process. ...

10CVSS6.7AI score0.10245EPSS
Exploits0References1
securityvulns
securityvulns
added 2001/03/11 12:0 a.m.42 views

Cgisecurity.com advisory #4 The Free On-line Dictionary of Computing

The vendor has been contacted on this issue and it is being fixed. please visit his page for further updates. Just so all the script kids know it does allow partial command execution. The only limit to this is commands with arguements. EX: limited to single commands like ls,ps Debian also has thi...

7.4AI score
Exploits0
Rows per page
Query Builder