CVE-2004-0689: Improper Link Resolution Before File Access

KDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations, which could allow local users to create or truncate arbitrary files...

RHEL 2.1 : pam (RHSA-2004:304)

Updated pam packages that fix a security vulnerability are now available for Red Hat Enterprise Linux 2.1. PAM Pluggable Authentication Modules is a system security tool that allows system administrators to set an authentication policy without having to recompile programs that handle...

Opera telnet URI handler file creation/truncation vulnerability

Background Opera is a multi-platform web browser. Description The telnet URI handler in Opera does not check for leading '-' characters in the host name. Consequently, a maliciously-crafted telnet:// link may be able to pass options to the telnet program itself. One example would be the following...

Re: [Full-Disclosure] iDEFENSE Security Advisory 05.12.04: Opera Telnet URI Handler File Creation/Truncation Vulnerability

Am 13.05.2004 um 17:16 schrieb Richard Johnson: Opera Telnet URI Handler File Creation/Truncation Vulnerability iDEFENSE Security Advisory 05.12.04 www.idefense.com/application/poi/display?id=104&type=vulnerabilities May 12, 2004 This vulnerability exists under OSX with Safari, Firefox, OmniWeb,...

CVE-2003-1389

RTS CryptoBuddy 1.2 and earlier truncates long passphrases without warning the user, which may make it easier to conduct certain brute force guessing attacks...

SAP Internet Transaction Server

To the List, ============================================================ SEC-CONSULT Security REPORT SAP Internet Transcaction Server ======================OOOOOOOOOOOO========================== Product: ITS ITS, Version 4620.2.0.323011, Build 46B.323011 win32/IIS 5.0 Vulnerablities: -...

CVE-2003-0679

Unknown vulnerability in the libcpr library for the Checkpoint/Restart cpr system on SGI IRIX 6.5.21f and earlier allows local users to truncate or overwrite certain files...

CVE-2003-0679

CVE-2003-0679 concerns a vulnerability in the libcpr library used by SGI’s Checkpoint/Restart (cpr) on IRIX 6.5.x. The issue, reported as a local vulnerability, permits users to truncate or overwrite certain files for which they lack permissions. The SGI Security Advisory 20030802-01-P explains t...

CVE-2003-0679: Undefined Security Weakness

Unknown vulnerability in the libcpr library for the Checkpoint/Restart cpr system on SGI IRIX 6.5.21f and earlier allows local users to truncate or overwrite certain files...

CVE-2002-1513

The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via the -logfile command line option, which overrides file system permissions because the server runs with the SYSPRV and BYPASS privileges...

CVE-2002-2423

Sendmail 8.12.0 through 8.12.6 truncates log messages longer than 100 characters, which allows remote attackers to prevent the IP address from being logged via a long IDENT response...

CVE-2002-0499

The dpath function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on the wrong directories...

CVE-2002-0499

The CVE relates to the Linux kernel vulnerability where the d_path function truncates long pathnames without error in Linux kernel versions 2.2.20 and earlier, and 2.4.18 and earlier. This behavior can cause local users to cause programs to operate on incorrect directories, potentially enabling i...

CVE-2002-0499

The dpath function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on the wrong directories...

CVE-2002-0499: Undefined Security Weakness

The dpath function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on the wrong directories...

[SECURITY] [DSA-129-1] in.uucpd string truncation problem

Package: uucp Vulnerability: remote dos Debian-specific: yes We have received reports that in.uucpd, an authentication agent in the uucp package, does not properly terminate certain long input strings. This has been corrected in uucp package version 1.06.1-11potato3 for Debian 2.2 potato and in...

Linux Kernel 2.2.x2.32.4.x - d_path() Path Truncation

Linux Kernel 2.2.x2.32.4.x - dpath Path Truncation / source: https://www.securityfocus.com/bid/4367/info The Linux kernel dpath function converts a dentry structure into an ASCII path name. The full path to the specified dentry is returned in a fixed length buffer of size PAGESIZE bytes...

Linux Kernel 2.2.x/2.3/2.4.x - 'd_path()' Path Truncation

/ source: https://www.securityfocus.com/bid/4367/info The Linux kernel dpath function converts a dentry structure into an ASCII path name. The full path to the specified dentry is returned in a fixed length buffer of size PAGESIZE bytes. Reportedly, if a dentry structure is passed with a path whi...

Linksys BEFVP41 VPN Server does not follow proper VPN standards

Dear all, A month ago, we discovered a bug in the VPN Server module of the Linksys EtherFast BEFVP41 Cable/DSL VPN Router. Here's the detailed email we sent to Linksys Tech Support: Begin Email Dear Support @ Linksys, We recently heard about your BEFVP41 and thought we'd try it out as we liked th...

ml85p - driver for Samsung ML-85G and /tmp

ml85p - driver for Samsung ML-85G GDI printers seems to use /tmp unsecurely. it seems to use the time function to determine the /tmp files name. root@linux exp strings /usr/bin/ml85p | grep tmp /tmp/ml85gd 401070dd iopl0x3 = 0 400cf2bd timeNULL = 994462668 40100cbf brk0 = 0x8064544 40100cbf...