CVE-2008-1391

Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-dependent attackers to execute arbitrary code via large values of certain integer fields in the format argument to 1 the strfmon function in...

Buffer overflow

Buffer overflow in XnView 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long filename argument on the command line. NOTE: it is unclear whether there are common handler configurations in which this argument is controlled by an attacker...

CVE-2008-1461

Buffer overflow in XnView 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long filename argument on the command line. NOTE: it is unclear whether there are common handler configurations in which this argument is controlled by an attacker...

CVE-2008-1461

CVE-2008-1461 affects XnView 1.92.1. It is a buffer-overflow vulnerability in the command-line filename argument, allowing a user-assisted remote attacker to potentially execute arbitrary code in the context of the running user. Exploit details in public writeups describe an attack condition wher...

GLSA-200803-25 : Dovecot: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200803-25 Dovecot: Multiple vulnerabilities Dovecot uses the group configured via the 'mailextragroups' setting, which should be used to create lockfiles in the /var/mail directory, when accessing arbitrary files CVE-2008-1199...

Buffer overflow

Multiple buffer overflows in securecgi-bin/CSuserCGI.exe in User-Changeable Password UCP before 4.2 in Cisco Secure Access Control Server ACS for Windows and ACS Solution Engine allow remote attackers to execute arbitrary code via a long argument located immediately after the Logout argument, and...

Dovecot passdbs Argument Injection Authentication Bypass

The remote host is running Dovecot, an open source IMAP4 / POP3 server for Linux / Unix. The version of Dovecot installed on the remote host uses a TAB character as a delimiter internally but fails to escape them when they appear in a password. Provided Dovecot is configured to use a blocking...

Design/Logic Flaw

The File Check Utility fcheck.exe in ASG-Sentry Network Manager 7.0.0 and earlier allows remote attackers to cause a denial of service CPU consumption or overwrite arbitrary files via a query string that specifies the -b option, probably due to an argument injection vulnerability...

CVE-2008-1322

The File Check Utility fcheck.exe in ASG-Sentry Network Manager 7.0.0 and earlier allows remote attackers to cause a denial of service CPU consumption or overwrite arbitrary files via a query string that specifies the -b option, probably due to an argument injection vulnerability...

CVE-2008-1319

Untrusted search path and argument injection vulnerability in the VersantD service in Versant Object Database 7.0.1.3 and earlier, as used in Borland CaliberRM and probably other products, allows remote attackers to execute arbitrary commands via a request to TCP port 5019 with a modified...

CVE-2008-1322

The File Check Utility fcheck.exe in ASG-Sentry Network Manager 7.0.0 and earlier allows remote attackers to cause a denial of service CPU consumption or overwrite arbitrary files via a query string that specifies the -b option, probably due to an argument injection vulnerability...

GLSA-200803-13 : VLC: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200803-13 VLC: Multiple vulnerabilities Multiple vulnerabilities were found in VLC: Michal Luczaj and Luigi Auriemma reported that VLC contains boundary errors when handling subtitles in the ParseMicroDvd, ParseSSA, and ParseVplay...

Design/Logic Flaw

Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs, allows remote attackers to bypass the password check via a password containing TAB characters, which are treated as argument delimiters that enable the skippasswordcheck field t...

CVE-2008-1218

Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs, allows remote attackers to bypass the password check via a password containing TAB characters, which are treated as argument delimiters that enable the skippasswordcheck field t...

CVE-2008-1218

Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs, allows remote attackers to bypass the password check via a password containing TAB characters, which are treated as argument delimiters that enable the skippasswordcheck field t...

CVE-2008-1218

Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs, allows remote attackers to bypass the password check via a password containing TAB characters, which are treated as argument delimiters that enable the skippasswordcheck field t...

CVE-2008-1218

Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs, allows remote attackers to bypass the password check via a password containing TAB characters, which are treated as argument delimiters that enable the skippasswordcheck field t...

CVE-2008-1218

Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs, allows remote attackers to bypass the password check via a password containing TAB characters, which are treated as argument delimiters that enable the skippasswordcheck field t...

VulnCheck KEV: CVE-2007-5779

Buffer overflow in the GomManager GomWeb Control ActiveX control in GomWeb3.dll 1.0.0.12 in Gretech Online Movie Player GOM Player 2.1.6.3499 allows remote attackers to execute arbitrary code via a long argument to the OpenUrl method...

CVE-2008-0042

The CVE-2008-0042 issue affects Apple Mac OS X Terminal.app on Mac OS X 10.4.11 and 10.5 up to 10.5.1, due to input validation error when handling URL themes, allowing remote attackers to trigger execution of arbitrary commands. The vulnerability is part of a broader Apple advisory set (multiple ...