7851 matches found
Sygate Personal Firewall Pro 5.5 - Local Denial of Service
Sygate Personal Firewall Pro 5.5 - Local Denial of Service source: https://www.securityfocus.com/bid/10542/info A local denial of service vulnerability is reported to affect the Sygate Personal Firewall. It is reported that the smc.exe service may be crashed using the List-View Control in the...
Sygate Personal Firewall Pro 5.5 - Local Denial of Service
source: https://www.securityfocus.com/bid/10542/info A local denial of service vulnerability is reported to affect the Sygate Personal Firewall. It is reported that the smc.exe service may be crashed using the List-View Control in the Sygate Personal Firewall GUI. This issue may be exploited in...
AspDotNetStorefront 3.3 - Access Validation
AspDotNetStorefront 3.3 - Access Validation source: https://www.securityfocus.com/bid/10506/info AspDotNetStorefront is reportedly prone to an access validation vulnerability that may allow a remote attacker to delete arbitrary contents from a vulnerable Web site. The issue occurs because the...
AspDotNetStorefront 3.3 - Access Validation
source: https://www.securityfocus.com/bid/10506/info AspDotNetStorefront is reportedly prone to an access validation vulnerability that may allow a remote attacker to delete arbitrary contents from a vulnerable Web site. The issue occurs because the 'deleteicon.aspx' script does not validate acce...
Irix rpc.mount multiple bugs
Iinformation leak, DoS, access from unprivileged client port...
Microsoft Windows HSC DVD Driver Upgrade Code Execution Vulnerability
Description A security vulnerability has been reported in Microsoft Windows XP and Server 2003 operating systems. This issue exists in the Help and Support Center HSC and is due to how the feature handles HCP invocation URIs for DVD driver upgrades. This issue could be exploited from a malicious...
[Full-Disclosure] CSA-200402-1: Previous Open Webmail vulnerability is exploitable
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cycom AB Security Advisory CSA-200402-1 www.cycom.se Advisory: Previous Open Webmail vulnerability is exploitable Date: Sat Feb 21 15:18:21 CET 2004, updated: Thu May 6 10:37:29 CEST 2004 Application: Open Webmail 2.20, 2.21 and 2.30 and -current...
CVE-2003-0796
Unknown vulnerability in rpc.mountd SGI IRIX 6.5.18 through 6.5.22 allows remote attackers to mount from unprivileged ports even with the -n option disabled...
CVE-2003-0796
The connected SGI advisory (SECURITYVULNS/DOC:5438) confirms a vulnerability in rpc.mountd on SGI IRIX 6.5.18–6.5.22 that permits mount requests from unprivileged ports even when -n is not allowed, potentially enabling unauthorized NFS mounting. The issue is associated with CAN-2003-0796; SGI’s r...
PostgreSQL VACUUM command allows unprivileged user to remove database transaction log data
Overview The PostgreSQL VACUUM command contains a vulnerability that allows an unprivileged user to remove database transaction log data. This may result in unrecoverable data loss. Description PostgreSQL is a database management system. The PostgreSQL VACUUM command is used to clean out records...
[Full-Disclosure] rpc.mountd Vulnerabilities on SGI IRIX
-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: rpc.mountd Vulnerabilities Number: 20031102-01-P Date: November, 21 2003 Reference: SGI BUG 897521, CVE CAN-1999-1225 Reference: SGI BUG 897523, CVE CAN-2003-0796 Reference: SGI BUG 898361, CVE CAN-2003-0797 Fixed in: Future release ...
OpenBSD 3.3/3.4 - 'sysctl' Local Denial of Service
// source: https://www.securityfocus.com/bid/9073/info A denial of service vulnerability has been reported for OpenBSD, specifically when handling malformed calls to sysctl. By invoking systcl and passing a specific flag in conjunction with a negative argument may trigger a kernel panic. This cou...
kpopup 0.9.x - Privileged Command Execution
// source: https://www.securityfocus.com/bid/8915/info It has been alleged that it is possible for local attackers to gain root privileges through kpopup, which is is installed setuid root by default. According to the report, kpopup uses the system3 C-library function insecurely to run other...
VMWare unauthorized access
WMVare unprivileged access...
cdrtools privilege escalation
rscsi utility allows unprivileged user to overwrite any file...
Symantec Norton AntiVirus 20022003 - Device Driver Memory Overwrite
Symantec Norton AntiVirus 20022003 - Device Driver Memory Overwrite source: https://www.securityfocus.com/bid/8329/info It has been reported that a memory corruption vulnerability affects the Symantec Norton AntiVirus Device Driver. According to the report, one of the device control operation...
Symantec Norton AntiVirus 2002/2003 - Device Driver Memory Overwrite
source: https://www.securityfocus.com/bid/8329/info It has been reported that a memory corruption vulnerability affects the Symantec Norton AntiVirus Device Driver. According to the report, one of the device control operation handlers attempts to write data to an address offset from a pointer...
Internet Explorer file:// Request Zone Bypass Vulnerability
Description Internet Explorer is reported to be vulnerable to a zone bypass issue. Allegedly, if Internet Explorer attempts to open a web page containing numerous 'file://' requests each contained in a separate Iframe, the requested file will eventually be executed in the Local Computer zone...
Eye of Gnome contains format string vulnerability in the file name handling of command line arguments
Overview Eye of Gnome contains a format string vulnerability that may allow remote attackers to execute arbitrary code with the privileges of the user running the application, typically an unprivileged system user. Description Eye of Gnome EOG is an image viewing application that is part of the...
