6471 matches found
JVN#62914675 Ruby vulnerability allowing to bypass safe level 4 as a sandbox
Impact An attacker could possibly execute an arbitrary script. Solution Products Affected Ruby 1.8.2 and earlier...
CVE-2002-2020
The CVE-2002-2020 entry concerns Netgear RP114 Cable/DSL Web Safe Router with Firmware 3.26. According to the provided documents, the vulnerability arises from a default administrator password and the acceptance of admin logins on the external interface, enabling remote attackers to gain privileg...
CVE-2005-0360
The CVE-2005-0360 issue involves the Microsoft Log Sink Class ActiveX control in pkmcore.dll, which is marked as unsafe for scripting yet is labeled safe for scripting. The ActiveX control can create or append to arbitrary files on the local file system when exploited via Internet Explorer, enabl...
Security fix for the ALT Linux 8 package sudo version 1:1.6.7p5-alt5
June 21, 2005 Dmitry V. Levin 1:1.6.7p5-alt5 - Backported upstream fix so a sudoers entry with sudo ALL no longer overwrites the value of safecmnd CAN-2005-1993...
Apple Safari automatically installs Dashboard widgets
Overview Apple Safari on Mac OS X Tiger automatically installs Dashboard widgets without user intervention or notice. Description DashboardDashboard is a new feature introduced in Apple Mac OS X Tiger 10.4. Dashboard is a collection of applications called "widgets." The system-installed widgets a...
IPSwitch IMAP Server LOGON Remote Stack Overflow
Exploit for unknown platform in category remote exploits ================================================ IPSwitch IMAP Server LOGON Remote Stack Overflow ================================================ / IpSwitch IMAP Server LOGON stack overflow. Software Hole discovered by iDEFENSE POC written...
php security update
CentOS Errata and Security Advisory CESA-2005:406 Updated PHP packages that fix various security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache...
CVE-1999-1575: Undefined Security Weakness
The Kodak/Wang 1 Image Edit imgedit.ocx, 2 Image Annotation imgedit.ocx, 3 Image Scan imgscan.ocx, 4 Thumbnail Image imgthumb.ocx, 5 Image Admin imgadmin.ocx, 6 HHOpen hhopen.ocx, 7 Registration Wizard regwizc.dll, and 8 IE Active Setup setupctl.dll ActiveX controls for Internet Explorer IE 4.01...
Mandrake Linux Security Advisory : php (MDKSA-2005:072)
A number of vulnerabilities are addressed in this PHP update : Stefano Di Paolo discovered integer overflows in PHP's pack, unpack, and shmopwrite functions which could allow a malicious script to break out of safe mode and execute arbitrary code with privileges of the PHP interpreter...
USN-99-2: Fixed php4 packages for USN-99-1
USN-99-1 fixed a safe mode bypass which allowed malicious PHP scripts to circumvent path restrictions by creating a specially crafted directory whose length exceeded the capacity of the realpath function CAN-2004-1064. However, this caused severe regressions, some applications like SquirrelMail a...
USN-99-1: PHP4 vulnerabilities
Stefano Di Paola discovered integer overflows in PHP's pack and unpack functions. A malicious PHP script could exploit these to break out of safe mode and execute arbitrary code with the privileges of the PHP interpreter. CAN-2004-1018 Note: The second part of CAN-2004-1018 buffer overflow in the...
CVE-2004-0838
Lexar Safe Guard for JumpDrive Secure 1.0 stores the password insecurely in memory using XOR encryption, which allows local users to read the password directly from the device and access the password protected part of the drive...
CVE-2004-0838
CVE-2004-0838 affects Lexar Safe Guard for JumpDrive Secure 1.0. The issue is that the password is stored insecurely in memory using XOR encryption, allowing a local user to read the password directly from the device and access the password-protected area. The NVD metrics indicate a local attack ...
CVE-2004-0838: Undefined Security Weakness
Lexar Safe Guard for JumpDrive Secure 1.0 stores the password insecurely in memory using XOR encryption, which allows local users to read the password directly from the device and access the password protected part of the drive...
security flaw
Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause a denial of service, or execute arbitrary code via 1 a negative offset value to the shmopwrite function, 2 an "integer overflow/underflow" in the pack function, or 3 an "integer...
CVE-2004-1018
Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause a denial of service, or execute arbitrary code via 1 a negative offset value to the shmopwrite function, 2 an "integer overflow/underflow" in the pack function, or 3 an "integer...
CVE-2004-1063
PHP 4.x to 4.3.9, and PHP 5.x to 5.0.2, when running in safe mode on a multithreaded Unix webserver, allows local users to bypass safemodeexecdir restrictions and execute commands outside of the intended safemodeexecdir via shell metacharacters in the current directory name. NOTE: this issue was...
CVE-2004-1018
Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause a denial of service, or execute arbitrary code via 1 a negative offset value to the shmopwrite function, 2 an "integer overflow/underflow" in the pack function, or 3 an "integer...
CVE-2004-1064
The safe mode checks in PHP 4.x to 4.3.9 and PHP 5.x to 5.0.2 truncate the file path before passing the data to the realpath function, which could allow attackers to bypass safe mode. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute...
CVE-2004-1064
The safe mode checks in PHP 4.x to 4.3.9 and PHP 5.x to 5.0.2 truncate the file path before passing the data to the realpath function, which could allow attackers to bypass safe mode. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute...