aix __ bos.rte.printers __ format string vulnerability

there is a local and possibly remote format string vulnerability in package bos.rte.printers. feeding /usr/bin/enq with arguments containing formatstring characters it can result in segfault. the research of this problem with acknowledgements of exact arguments and configuration types wasn't done...

Switch Off Multiple Vulnerabilities

Switch Off Multiple Vulnerabilities Credit: Author : Peter Winter-Smith Software: Packages : Switch Off Version : 2.3 and prior Vendor : YaSoft Vendor Url : http://yasoft.km.ru/eng/switchoff/ Vulnerability: Bug Type : Denial of Service; Stack-based Buffer Overflow Severity : Less Critical 1...

CVE-2003-1359

Buffer overflow in stmkfont utility of HP-UX 10.0 through 11.22 allows local users to gain privileges via a long command line argument...

Apple QuickTime/Darwin Streaming Server integer overflow in MP3Broadcaster utility

Overview Apple's QuickTime and Darwin Streaming Server DSS package includes a utility called MP3Broadcaster. This utility contains an integer overflow which may be exploited to cause a denial of service. Description Apple's QuickTime and Darwin Streaming Server is software which provides integrat...

[Full-Disclosure] GnuPG 1.2.3, 1.3.3 external HKP interface format string issue

S-Quadra Advisory 2003-12-03 Topic: GnuPG 1.2.3, 1.3.3 external HKP interface format string issue Severity: Low Vendor URL: http://www.gnupg.org Advisory URL: http://www.s-quadra.com/advisories/Adv-20031203.txt Release date: 3 Dec 2003 1. DESCRIPTION GnuPG is a complete and free replacement for...

Morpheus discloses username to remote users

Overview The usernames disclosed by the Morpheus peer-to-peer file sharing application do not present a security vulnerability. Description Morpheus is a peer-to-peer file sharing application that allows users to search for and download files from other Morpheus users. This product allegedly...

FlexWATCH.txt

------------------ u0xa ------------------------ Author: SLAIZER mail: slaizeratphreaker.net Date: Sun/Oct/26/2003 -------"Another way of seeing the things"-------- ------------------------------------------------- Unauthorized access Vulnerability in FlexWATCH camera Server...

Centrinity FirstClass HTTP Server 7.1 - Directory Disclosure

source: https://www.securityfocus.com/bid/8920/info It has been reported that Centrinity FirstClass HTTP server may be prone to an information disclosure vulnerability that may allow a remote attacker to disclose listings for server root and user web directories on a vulnerable system. This issue...

PSCS VPOP3 2.0 Email Server WebAdmin - Cross-Site Scripting

source: https://www.securityfocus.com/bid/8869/info It has been reported that PSCS VPOP3 Email Server may be prone to a cross-site scripting vulnerability that may allow a remote attacker to embed malicious HTML and script code in a link. The issue is reported to be present in the WebAdmin utilit...

Man Utility 2.3.19 - Local Compression Program Privilege Escalation

Man Utility 2.3.19 - Local Compression Program Privilege Escalation source: https://www.securityfocus.com/bid/8675/info A vulnerability has been reported in man that may allow an attacker to gain elevated privileges. The problem lies in man failing to carry out sufficient sanity checks before...

IBM DB2 db2dart - Buffer Overflow

source: https://www.securityfocus.com/bid/8552/info It has been reported that the IBM DB2 db2dart utility is prone to locally exploitable buffer overflow vulnerability. A local attacker, who can authenticate or has access as the db2as user, may exploit this issue to execute arbitrary instructions...

HP-UX "passwd" utility may corrupt password file

Overview The HP-UX "passwd" utility contains a denial-of-service vulnerability. Description The HP-UX "passwd" utility is used to make changes to a user's authentication credentials. A vulnerability in "passwd" may allow a local attacker to corrupt the password file. --- Impact An attacker may be...

CVE-2003-0584

Format string vulnerability in Backup and Restore Utility for Unix BRU 17.0 and earlier, when running setuid, allows local users to execute arbitrary code via format string specifiers in a command line argument...

CVE-2003-0350

The control for listing accessibility options in the Accessibility Utility Manager on Windows 2000 ListView does not properly handle Windows messages, which allows local users to execute arbitrary code via a "Shatter" style message to the Utility Manager that references a user-controlled callback...

CVE-2003-0583

Buffer overflow in Backup and Restore Utility for Unix BRU 17.0 and earlier, when running setuid, allows local users to execute arbitrary code via a long command line argument...

Eudora WorldMail 2.0 - Search Cross-Site Scripting

Eudora WorldMail 2.0 - Search Cross-Site Scripting source: https://www.securityfocus.com/bid/8403/info It has been reported that a cross-site scripting issue exists in the search utility of the software. It is possible that an attacker may create a malicious link containing script code that could...

cdrtools privilege escalation

rscsi utility allows unprivileged user to overwrite any file...

CDRTools 2.0 - RSCSI Debug File Arbitrary Local File Manipulation

CDRTools 2.0 - RSCSI Debug File Arbitrary Local File Manipulation source: https://www.securityfocus.com/bid/8328/info It has been reported that the rscsi utility may provide for the modification of ownership and the corruption of arbitrary attacker specified files. It has been reported that a loc...

CDRTools 2.0 - RSCSI Debug File Arbitrary Local File Manipulation

source: https://www.securityfocus.com/bid/8328/info It has been reported that the rscsi utility may provide for the modification of ownership and the corruption of arbitrary attacker specified files. It has been reported that a local attacker may invoke the rscsi utility to corrupt or seize group...

ManDB Utility 2.32.4 - Local Buffer Overflow

ManDB Utility 2.32.4 - Local Buffer Overflow source: https://www.securityfocus.com/bid/8303/info The mandb utility has been reported to be affected by multiple local buffer overflow vulnerabilities. These issues present themselves due to insufficient bounds checking performed on user-supplied dat...