685 matches found
CVE-2005-0883
CVE-2005-0883 describes two reflected XSS vulnerabilities in DigitalHive 2.0's base.php: (1) mt parameter to membres.php and (2) -afs-1- query string to msg.php. Attackers can inject arbitrary web script/HTML via these inputs. The provided documents do not specify a patch or workaround within thi...
CVE-2001-1279
CVE-2001-1279 affects tcpdump 3.x (likely 3.6x) with a buffer overflow in the AFS RPC decoding path (print-rx.c). Exploitation via crafted AFS RPC packets with invalid lengths can cause a denial of service and may allow remote code execution with the privileges of tcpdump (typically root). The is...
CVE-2001-1279
Buffer overflow in print-rx.c of tcpdump 3.x probably 3.6x allows remote attackers to cause a denial of service and possibly execute arbitrary code via AFS RPC packets with invalid lengths that trigger an integer signedness error, a different vulnerability than CVE-2000-1026...
CVE-2001-1279: Undefined Security Weakness
Buffer overflow in print-rx.c of tcpdump 3.x probably 3.6x allows remote attackers to cause a denial of service and possibly execute arbitrary code via AFS RPC packets with invalid lengths that trigger an integer signedness error, a different vulnerability than CVE-2000-1026...
OpenSSH < 3.2.1 AFS/Kerberos Ticket/Token Passing Overflow
Binary data 1989.prm...
CVE-2003-1007
The CVE-2003-1007 entry concerns Apple File Server (AFS) in Apple Mac OS X 10.2.8 and 10.3.2, which may not properly handle certain malformed requests. The available documents identify the affected component (AFS) and the affected OS versions, with the impact described as unknown in the original ...
CVE-2002-0575: Undefined Security Weakness
Buffer overflow in OpenSSH before 2.9.9, and 3.x before 3.2.1, with Kerberos/AFS support and KerberosTgtPassing or AFSTokenPassing enabled, allows remote and local authenticated users to gain privileges...
security flaw
Ethereal 0.9.4 and earlier allows remote attackers to cause a denial of service and possibly excecute arbitrary code via the 1 SOCKS, 2 RSVP, 3 AFS, or 4 LMP dissectors, which can be caused to core dump...
PT-2002-1842 · Ethereal · Ethereal
Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.4 and earlier Description: The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via the 1 SOCKS, 2 RSVP, 3 AFS, or 4 LMP dissectors, which can be caused to core dump...
CVE-2002-0822: Undefined Security Weakness
Ethereal 0.9.4 and earlier allows remote attackers to cause a denial of service and possibly excecute arbitrary code via the 1 SOCKS, 2 RSVP, 3 AFS, or 4 LMP dissectors, which can be caused to core dump...
CVE-2002-0575
Buffer overflow in OpenSSH before 2.9.9, and 3.x before 3.2.1, with Kerberos/AFS support and KerberosTgtPassing or AFSTokenPassing enabled, allows remote and local authenticated users to gain privileges...
tcpdump vulnerable to buffer overflow via improper decoding of AFS RPC (Rx) packets
Overview A vulnerability exists in tcpdump that could allow an attacker to execute arbitrary code with the privileges of tcpdump, typically root. Description tcpdump is a widely-used network sniffer that is capable of decoding AFS traffic. A buffer overflow vulnerability has been discovered in...
OpenSSH Kerberos TGT/AFS Token Passing Remote Overflow
You are running a version of OpenSSH older than OpenSSH 3.2.1. A buffer overflow exists in the daemon if AFS is enabled on your system, or if the options KerberosTgtPassing or AFSTokenPassing are enabled. Even in this scenario, the vulnerability may be avoided by enabling UsePrivilegeSeparation...
Ошибки в tcpdump (remote root)
Ошибки в утилите tcpdump FreeBSD 4.x при использовании обработчика пакетов AFS RPC позволяют получить удаленный root в результате срыва стека...
tcpdump vulnerable to buffer overflow via parsing of AFS ACL packets
Overview Tcpdump version 3.5 contains a buffer overflow vulnerability permitting unauthorized remote root access. Description Tcpdump version 3.5 added support for handling AFS packets. Unfortunately the code responsible for printing AFS access control lists contains an unchecked buffer that can ...
CVE-2000-1174
CVE-2000-1174 affects Ethereal (now Wireshark) up to version 0.8.13 and earlier, where multiple buffer overflows in the AFS ACL parser allow remote attackers to execute arbitrary commands by sending a crafted packet with a long username. The flaw is in the parser’s handling of AFS ACL data, enabl...
CVE-2000-1174
Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote attackers to execute arbitrary commands via a packet with a long username...
CVE-2000-1174: Undefined Security Weakness
Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote attackers to execute arbitrary commands via a packet with a long username...