CVE-2005-0098

The CVE-2005-0098 entry concerns abuse, the SDL port of the Abuse game. Official advisories (CAN-2005-0098 and CAN-2005-0099) describe local, pre-2.00 buffer overflows in command-line handling that could let an attacker gain arbitrary code execution with elevated privileges, and file-creation fla...

CVE-2005-0099

The CVE relates to the SDL port of abuse (abuse-SDL) prior to version 2.00, where privileges were not dropped before creating certain files. This allows local users to create or overwrite arbitrary files. Debian and SUSE advisories confirm the issue as CAN-2005-0099 with a local-priority impact; ...

CVE-2005-0098

Multiple buffer overflows in the SDL port of abuse abuse-SDL before 2.00 allow local users to execute arbitrary code via the command line...

CVE-2005-0099

The SDL port of abuse abuse-SDL before 2.00 does not properly drop privileges before creating certain files, which allows local users to create or overwrite arbitrary files...

CVE-2005-0098

Multiple buffer overflows in the SDL port of abuse abuse-SDL before 2.00 allow local users to execute arbitrary code via the command line...

CVE-2005-0099

The SDL port of abuse abuse-SDL before 2.00 does not properly drop privileges before creating certain files, which allows local users to create or overwrite arbitrary files...

Debian DSA-691-1 : abuse - several vulnerabilities

Several vulnerabilities have been discovered in abuse, the SDL port of the Abuse action game. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-0098 Erik Sjolund discovered several buffer overflows in the command line handling, which could lead to the...

[SECURITY] [DSA 691-1] New abuse packages fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 691-1 [email protected] http://www.debian.org/security/ Martin Schulze March 7th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 691-1] New abuse packages fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 691-1 [email protected] http://www.debian.org/security/ Martin Schulze March 7th, 2005 http://www.debian.org/security/faq -...

DSA-691-1 abuse - several

Bulletin has no description...

TYPO3 Security Bulletin

Unless the default encryption key settings have been changed by the administrator, the TYPO3 mailform can be compromised to send mail to a wrong receipient. Thus, spam mails may be sent from a remote site. Component Type: Core Affected Component: mailforms Version: 3.7.0 and earlier Vulnerability...

[SECURITY] [DSA 691-1] New abuse packages fix local root exploit

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 691-1 [email protected] http://www.debian.org/security/ Martin Schulze March 7th, 2005 http://www.debian.org/security/faq -...

security flaw

The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows remote attackers to use InstallTrigger to spoof the hostname of the host performing the installation via a long "user:pass" sequence in the URL, which appears before the real...

Biz Mail Form 2.x - Unauthorized Mail Relay

Biz Mail Form 2.x - Unauthorized Mail Relay source: https://www.securityfocus.com/bid/12620/info Biz Mail Form is prone to a vulnerability that allows the application to be abused as a mail relay. An attacker can exploit this issue to inject arbitrary SMTP headers by using CR and LF sequences. If...

BizMail 2.1 Spam Exploit

Greetings all, Over the course of the last few months I've been the victim of repeated abuses of a web-based form commonly used for customer requests. This form can be downloaded here : http://www.bizmailform.com This form allowed a hacker to directly call the cgi, forge a referer url, and, with...

security flaw

Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline "%0a" before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command...

Oracle Trigger Abuse (#NISR2122004I)

NGSSoftware Insight Security Research Advisory Name: Oracle 10g/9i Trigger Abuse Systems Affected: Oracle 10g/9i on all operating systems Severity: High risk Vendor URL: http://www.oracle.com/ Author: David Litchfield davidl at ngssoftware.com Relates to:...

Netbilling nbmember.cgi cmd Parameter Information Disclosure

nbmember.cgi is installed on the remote host. The remote version of this software is vulnerable to an information disclosure flaw which may allow an attacker to access sensitive system information resulting in a loss of confidentiality. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Fedora Core 2 : squid-2.5.STABLE5-4.fc2 (2004-330)

This update fixes a potential DoS against squid that was reported by Secunia. See http://secunia.com/advisories/12508/ for details. - Fri Oct 1 2004 Jay Fenlason 7:2.5.STABLE3-4.fc2.1 - Modify the entry for /etc/squid.conf in this spec file to set the permissions to 640 owned by root:squid. This...

CVE-2002-1253

Abuse 2.00 and earlier allows local users to gain privileges via command line arguments that specify alternate Lisp scripts that run at escalated privileges, which can contain functions that execute commands or modify files...