Irix rpc.mount multiple bugs

Iinformation leak, DoS, access from unprivileged client port...

Microsoft Windows HSC DVD Driver Upgrade Code Execution Vulnerability

Description A security vulnerability has been reported in Microsoft Windows XP and Server 2003 operating systems. This issue exists in the Help and Support Center HSC and is due to how the feature handles HCP invocation URIs for DVD driver upgrades. This issue could be exploited from a malicious...

[Full-Disclosure] CSA-200402-1: Previous Open Webmail vulnerability is exploitable

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cycom AB Security Advisory CSA-200402-1 www.cycom.se Advisory: Previous Open Webmail vulnerability is exploitable Date: Sat Feb 21 15:18:21 CET 2004, updated: Thu May 6 10:37:29 CEST 2004 Application: Open Webmail 2.20, 2.21 and 2.30 and -current...

CVE-2003-0796

Unknown vulnerability in rpc.mountd SGI IRIX 6.5.18 through 6.5.22 allows remote attackers to mount from unprivileged ports even with the -n option disabled...

CVE-2003-0796

The connected SGI advisory (SECURITYVULNS/DOC:5438) confirms a vulnerability in rpc.mountd on SGI IRIX 6.5.18–6.5.22 that permits mount requests from unprivileged ports even when -n is not allowed, potentially enabling unauthorized NFS mounting. The issue is associated with CAN-2003-0796; SGI’s r...

CVE-2003-0796: Undefined Security Weakness

Unknown vulnerability in rpc.mountd SGI IRIX 6.5.18 through 6.5.22 allows remote attackers to mount from unprivileged ports even with the -n option disabled...

PostgreSQL VACUUM command allows unprivileged user to remove database transaction log data

Overview The PostgreSQL VACUUM command contains a vulnerability that allows an unprivileged user to remove database transaction log data. This may result in unrecoverable data loss. Description PostgreSQL is a database management system. The PostgreSQL VACUUM command is used to clean out records...

[Full-Disclosure] rpc.mountd Vulnerabilities on SGI IRIX

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: rpc.mountd Vulnerabilities Number: 20031102-01-P Date: November, 21 2003 Reference: SGI BUG 897521, CVE CAN-1999-1225 Reference: SGI BUG 897523, CVE CAN-2003-0796 Reference: SGI BUG 898361, CVE CAN-2003-0797 Fixed in: Future release ...

OpenBSD 3.3/3.4 - 'sysctl' Local Denial of Service

// source: https://www.securityfocus.com/bid/9073/info A denial of service vulnerability has been reported for OpenBSD, specifically when handling malformed calls to sysctl. By invoking systcl and passing a specific flag in conjunction with a negative argument may trigger a kernel panic. This cou...

kpopup 0.9.x - Privileged Command Execution

// source: https://www.securityfocus.com/bid/8915/info It has been alleged that it is possible for local attackers to gain root privileges through kpopup, which is is installed setuid root by default. According to the report, kpopup uses the system3 C-library function insecurely to run other...

VMWare unauthorized access

WMVare unprivileged access...

cdrtools privilege escalation

rscsi utility allows unprivileged user to overwrite any file...

Symantec Norton AntiVirus 20022003 - Device Driver Memory Overwrite

Symantec Norton AntiVirus 20022003 - Device Driver Memory Overwrite source: https://www.securityfocus.com/bid/8329/info It has been reported that a memory corruption vulnerability affects the Symantec Norton AntiVirus Device Driver. According to the report, one of the device control operation...

Symantec Norton AntiVirus 2002/2003 - Device Driver Memory Overwrite

source: https://www.securityfocus.com/bid/8329/info It has been reported that a memory corruption vulnerability affects the Symantec Norton AntiVirus Device Driver. According to the report, one of the device control operation handlers attempts to write data to an address offset from a pointer...

Internet Explorer file:// Request Zone Bypass Vulnerability

Description Internet Explorer is reported to be vulnerable to a zone bypass issue. Allegedly, if Internet Explorer attempts to open a web page containing numerous 'file://' requests each contained in a separate Iframe, the requested file will eventually be executed in the Local Computer zone...

Eye of Gnome contains format string vulnerability in the file name handling of command line arguments

Overview Eye of Gnome contains a format string vulnerability that may allow remote attackers to execute arbitrary code with the privileges of the user running the application, typically an unprivileged system user. Description Eye of Gnome EOG is an image viewing application that is part of the...

CVE-2002-0875

Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group...

CVE-2002-0875

Removed by vendor...

CVE-2002-0875: Undefined Security Weakness

Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group...

Linux Kernel 2.2 - mmap() Local Denial of Service

Linux Kernel 2.2 - mmap Local Denial of Service / source: https://www.securityfocus.com/bid/6420/info A denial of service vulnerability has been discovered in the Linux 2.2 kernel. It has been reported that it is possible for an unprivileged user to cause the kernel to stop responding due to a bu...