cvs

New cvs packages are available for Slackware 8.1, 9.0, 9.1, and -current to fix a buffer overflow vulnerability which could allow an attacker to run arbitrary programs on the CVS server. Sites running a CVS server should upgrade to the new CVS package right away. More details about this issue may...

CVE-2003-1291

VMware ESX Server 1.5.2 before Patch 4 allows local users to execute arbitrary programs as root via certain modified VMware ESX Server environment variables...

CVE-2003-0742

CVE-2003-0742 affects SCO Internet Manager (mana). Local users can trigger menu.mana to run in the context of ncsa_httpd by exporting REMOTE_ADDR and then modify PATH to point to a malicious hostname program, enabling arbitrary program execution with root privileges on OpenServer 5.0.5–5.0.7. The...

CVE-2002-0532

EMU Webmail allows local users to execute arbitrary programs via a .. dot dot in the HTTP Host header that points to a Trojan horse configuration file that contains a pageroot specifier that contains shell metacharacters...

CVE-2002-2352

The NBActiveX.ocx ActiveX control in NeoBook 4 allows remote attackers to install and execute arbitrary programs...

CVE-2002-0477

Standalone Macromedia Flash Player 5.0 before 5,0,30,2 allows remote attackers to execute arbitrary programs via a .SWF file containing the "exec" FSCommand...

CVE-2002-0476: Undefined Security Weakness

Standalone Macromedia Flash Player 5.0 allows remote attackers to save arbitrary files and programs via a .SWF file containing the undocumented "save" FSCommand...

CVE-1999-1301

The CVE-1999-1301 issue concerns the rzsz implementation of the Z-Modem protocol in FreeBSD prior to 2.1.5. A design flaw in the Z-Modem handling allows the remote sender of a file to execute arbitrary programs on the client, constituting remote code execution at the client side. Affected compone...

CVE-1999-0343

A malicious Palace server can force a client to execute arbitrary programs...

Compaq Java Applet for Presario SpawnApp - Code Execution

source: https://www.securityfocus.com/bid/557/info Some Compaq computers come with a Java applet called SpawnApp. This applet is used to run Compaq diagnostic utilities from the local hard drive when certain Compaq websites are viewed. The problem is that the applet can run any program, and can b...

PT-1998-1082 · Palace · Palace

Name of the Vulnerable Software and Affected Versions: Palace affected versions not specified Description: A malicious server can force a client to execute arbitrary programs. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...