CVE-2003-0996

CVE-2003-0996 concerns an unknown “System Security Vulnerability” in Computer Associates (CA) Unicenter Remote Control (URC) 6.0 that could allow a local attacker to gain privileges via the help interface. The NVD entry assigns a CVSSv2 base score of 4.6 (MEDIUM) with LOCAL attack vector and part...

CVE-2003-0998

Technical details about CVE-2003-0998 are not publicly provided in the connected documents. No affected versions, root cause, or remediation are specified here. Monitor for updates in case new details are released.

CVE-2003-0996

Unknown "System Security Vulnerability" in Computer Associates CA Unicenter Remote Control URC 6.0 allows attackers to gain privileges via the help interface...

[Full-Disclosure] Monit 4.1 HTTP interface multiple security vulnerabilities

S-Quadra Advisory 2003-11-24 Topic: Monit 4.1 HTTP interface Multiple Security Vulnerabilities Severity: High Vendor URL: http://www.tildeslash.com/monit/ Advisory URL: http://www.s-quadra.com/advisories/Adv-20031124.txt Release date: 22 Nov 2003 1. DESCRIPTION Monit...

Opera: buffer overflows in 7.11 and 7.20

Background Opera is a multi-platform web browser. Description The Opera browser can cause a buffer allocated on the heap to overflow under certain HREFs when rendering HTML. The mail system is also deemed vulnerable and an attacker can send an email containing a malformed HREF, or plant the...

FreeBSD 4.8 - 'realpath()' Off-by-One Buffer Overflow

source: https://www.securityfocus.com/bid/8315/info The 'realpath' function is a C-library procedure to resolve the canonical, absolute pathname of a file based on a path that may contain values such as '/', './', '../', or symbolic links. A vulnerability that was reported to affect the...

MS Windows (RPC DCOM) Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ==================================================== MS Windows RPC DCOM Remote Buffer Overflow Exploit ==================================================== include include include include include include pragma commentlib,"ws232" unsigned...

Sun Management Center (SunMC) allows user to create or overwrite arbitrary files

Overview The Sun Management Center SunMC contains a vulnerability that could allow an attacker to create or overwrite any file on the system. Description An unknown vulnerability exists in the Sun Management Center SunMC, according to a Sun Alert Notification. According to that document,...

Linux Kernel < 2.4.20 - Module Loader Privilege Escalation

/ Linux Kernel Module Loader Local R00t Exploit Up to 2.4.20 By anonymous KuRaK include include include include include include include include include include include include include define TMPSIZE 4096 define FMAX 768 define UIDNUM 6 define MMSIZE 40961 define MAXSTACK 0xc0000000 // where to pu...

Symbolic links in xfsdump

File is created insecurely in the root of given file system...

Trend Micro Virus Control System 1.8 - Information Disclosure

Trend Micro Virus Control System 1.8 - Information Disclosure source: https://www.securityfocus.com/bid/6618/info An information disclosure vulnerability has been reported for TVCS. Reportedly, it is possible for an attacker to access the log files generated by TVCS. The log files contain very...

Cisco PIX Multiple Vulnerabilities

...

EZ Systems HTTPBench 1.1 - Information Disclosure

source: https://www.securityfocus.com/bid/6153/info An information disclosure vulnerability has been reported for httpbench. Reportedly, httpbench may disclose the contents of web server readable files to remote attackers. Information obtained in this manner may be used to launch further,...

FreeBSD-SA-02:37.kqueue

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:37.kqueue Security Advisory The FreeBSD Project Topic: local users can panic the system using the kqueue mechanism Category: core Module: kqueue Announced: 2002-08-05...

CVE-2002-0354

The XMLHttpRequest object XMLHTTP in Netscape 6.1 and Mozilla 0.9.7 allows remote attackers to read arbitrary files and list directories on a client system by opening a URL that redirects the browser to the file on the client, then reading the result using the responseText property...

OpenBSD 2.9/3.0 - Default Crontab Root Command Injection

/ source: https://www.securityfocus.com/bid/4495/info OpenBSD ships with a number of cron jobs configured by default. The tasks are for the purpose of summarizing system information. The mail1 utility is used to send the summaries to the root user. This utility supports escaped characters in...

Переполнение буфера в telnet сервере Microsoft (buffer overflow)

No description provided...

Несанкционированный доступ в slashcode (unauthorized access)

Зная логин и пароль одного пользователя можно получить права другого, включая администратора...

[RHSA-2001:110-05] Insecure setserial initscript

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Insecure setserial initscript Advisory ID: RHSA-2001:110-05 Issue date: 2001-09-12 Updated on: 2001-09-19 Product: Red Hat Linux Keywords: setserial initscript temporary file...

AVTronics InetServer DoS and BoF Vulnerabilities

Strumpf Noir Society Advisories ! Public release ! -- -= AVTronics InetServer DoS and BoF Vulnerabilities =- Release date: Wednesday, August 22, 2001 Introduction: AVTronics InetServer is a freeware product suite for MS Windows, bundling such services as SMTP, POP3, Daytime and Telnet in 1 produc...