5468 matches found
VERITAS Cluster Server for UNIX buffer overflow
Buffer overflow in 'ha' suid utility on environment variables parsing...
bizdb1-search.cgi located
One of the BizDB scripts, bizdb-search.cgi, passes a variable SPDX-FileCopyrightText: 2000 Roelof Temmingh Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Sympa < 4.1.3 Privilege Escalation Vulnerability
The remote version of Sympa contains a vulnerability which can be exploited by malicious local user to gain escalated privileges. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Symantec Norton AntiVirus and another Symantec security products for Macintosh privilege escalation
Norton Antivirus DiskMountNotify suid utility executes external applications by relative name. LiveUpdate contains suid wrapper for Java interpreter without proper command line check...
flexbackup backup utility symbolic links problem
Symbolic links problem during temporary files creation...
RHEL 4 : wget (RHSA-2005:771)
The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:771 advisory. GNU Wget is a file retrieval utility that can use either the HTTP or FTP protocols. A bug was found in the way wget writes files to the local...
Slackware 10.1 / current : emacs movemail POP utility (SSA:2005-201-02)
New emacs packages are available for Slackware 10.1 and -current to a security issue with the movemail utility for retrieving mail from a POP mail server. If used to connect to a malicious POP server, it is possible for the server to cause the execution of arbitrary code as the user running emacs...
apachetop utility symbolic links problem
Symbolic links problem on temporary filescreation...
GNU Mailutils imap4d 0.6 (search) Remote Format String Exploit (fbsd)
No description provided by source. / Copyright c 2005 Rosiello Security http://www.rosiello.org Permission is granted for the redistribution of this software electronically. It may not be edited in any way without the express written consent of Rosiello Security. Disclaimer: The author published...
Turquoise SuperStat Fidonet / Usenet statistics utility buffer overflow
Buffer overflow on NNTP server reply parsing...
KillProcess administration utility buffer overflow
Buffer overflow on oversized process PE FileDescription field...
CVE-2005-2856
Stack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility before 2.6.0.0, as used in multiple products including 1 ALZip 5.51 through 6.11, 2 Servant Salamander 2.0 and 2.5 Beta 1, 3 WinHKI 1.66 and 1.67, 4 ExtractNow 3.x, 5 Total Commander 6.53, 6 Anti-Trojan 5.5.421,...
CVE-2005-2856
CVE-2005-2856 describes a stack-based buffer overflow in the WinACE UNACEV2.DLL used by many products (e.g., ALZip, Total Commander, IZArc, BitZipper, UltimateZip, etc.). The flaw occurs when extracting an ACE archive with an overly long filename, allowing user-assisted attackers to execute arbit...
CVE-2005-2856
Stack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility before 2.6.0.0, as used in multiple products including 1 ALZip 5.51 through 6.11, 2 Servant Salamander 2.0 and 2.5 Beta 1, 3 WinHKI 1.66 and 1.67, 4 ExtractNow 3.x, 5 Total Commander 6.53, 6 Anti-Trojan 5.5.421,...
KLA10311 ACE vulnerability in multiple software
A buffer overflow was found in the WinACE compression utility, which is used in multiple products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed ACE filename. Original advisories - Related product...
Debian DSA-789-1 : php4 - several vulnerabilities
Several security related problems have been found in PHP4, the server-side, HTML-embedded scripting language. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-1751 Eric Romang discovered insecure temporary files in the shtool utility shipped with PHP...
CVE-2005-2725
The CVE-2005-2725 entry concerns QNX RTOS: vulnerable component is the inputtrap utility, affected in versions including 6.1.0 and 6.3 (possibly earlier). The root cause is improper permission checks when the -t flag is used, enabling local users to read arbitrary files. Impact is limited to loca...
Multiple BFCommand & Control Server Manager game servers management utility vulnerabilities
Authentication bypass, privilege escalation, DoS...
CVE-2004-2435
The vulnerability CVE-2004-2435 affects PeopleSoft HRMS 7.0 when “web enabled” via HTML Access, enabling Cross-site Scripting (XSS) . The issue arises from the handling of (1) debugging and (2) utility scripts, allowing remote attackers to inject arbitrary web script or HTML. Current connected so...
CVE-2004-2435
Cross-site scripting XSS vulnerability in PeopleSoft Human Resources Management System HRMS 7.0, when "web enabled" using HTML Access, allows remote attackers to inject arbitrary web script or HTML via unspecified 1 debugging or 2 utility scripts...