DEBIAN-CVE-2004-1772

Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument...

NetBSD Security Advisory 2004-010: Insufficient argument validation in compat code

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2004-010 ================================= Topic: Insufficient argument validation in compat code Version: NetBSD-current: source prior to Oct 27, 2004 NetBSD 2.0: not affected NetBSD 1.6.2: affected NetBSD 1.6.1: affected NetBSD 1.6:...

CVE-2004-1212

The CVE-2004-1212 entry describes a directory traversal vulnerability in Blog Torrent Preview 0.8, specifically in btdownload.php. An attacker can use a .. sequence in the file parameter to download arbitrary files from the affected server. The issue is exploitable remotely (no authentication req...

CVE-2004-0480

Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via a notes: URI that uses a UNC network share pathname to provide an alternate notes.ini configuration file to notes.exe...

[SA13352] FreeBSD procfs/linprocfs Process Argument Vector Handling Vulnerability

TITLE: FreeBSD procfs/linprocfs Process Argument Vector Handling Vulnerability SECUNIA ADVISORY ID: SA13352 VERIFY ADVISORY: http://secunia.com/advisories/13352/ CRITICAL: Less critical IMPACT: Exposure of system information, Exposure of sensitive information, DoS WHERE: Local system OPERATING...

CVE-2004-1012

The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command "bodyp" that is treated as a different command "body.peek" and causes an index increment error that leads to an out-of-bounds memory...

CVE-2004-1013

The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as 1 "bodyp", 2 "binaryp", or 3 "binaryp" that cause an index increment error that leads to an out-of-bounds memory corruption...

CVE-2004-1012

The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command "bodyp" that is treated as a different command "body.peek" and causes an index increment error that leads to an out-of-bounds memory...

Cyrus IMAP Server: Multiple remote vulnerabilities

Background The Cyrus IMAP Server is an efficient, highly-scalable IMAP e-mail server. Description Multiple vulnerabilities have been discovered in the argument parsers of the 'partial' and 'fetch' commands of the Cyrus IMAP Server CAN-2004-1012, CAN-2004-1013. There are also buffer overflows in t...

GLSA-200411-34 : Cyrus IMAP Server: Multiple remote vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200411-34 Cyrus IMAP Server: Multiple remote vulnerabilities Multiple vulnerabilities have been discovered in the argument parsers of the 'partial' and 'fetch' commands of the Cyrus IMAP Server CAN-2004-1012, CAN-2004-1013. There...

CVE-2004-0330

Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time zone argument to the MDTM command...

Cyrus IMAPd -- PARTIAL command out of bounds memory corruption

Due to a bug within the argument parser of the partial command an argument like "bodyp" will be wrongly detected as "body.peek". Because of this the bufferposition gets increased by 10 instead of 5 and could therefore point outside the allocated memory buffer for the rest of the parsing process. ...

QNX PPPoEd buffer overflows

Multipel buffer overflows on arguments parsing...

CVE-2002-0985

CVE-2002-0985 : Argument injection vulnerability in PHP 4.x mail() up to 4.2.2 may bypass safe_mode and alter the MTA command-line arguments (e.g., the 5th argument), potentially changing MTA behavior and enabling command execution. OpenVAS and Debian advisories confirm the issue affects PHP4.x a...

CVE-2004-1372

Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute arbitrary code via 1 a long third argument to the rec2xml function or 2 a long filename argument to the generatedistfile procedure...

CVE-2004-0121

Technical details about CVE-2004-0121 are not publicly available in the provided connected documents. The material only restates the issue in Outlook 2002 without specifics. Monitor for updates.

CVE-2002-1250

Buffer overflow in Abuse 2.00 and earlier allows local users to gain root privileges via a long -net command line argument...

CVE-2004-0121

Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling OUTLOOK.EXE, which allows remote attackers to use script code in the Local Machine zone and execute arbitrary programs...

WS_FTP Server CWD Command Remote DoS

According to its banner, the version of WSFTP running on the remote host has a denial of service vulnerability. Sending a 'CWD' command followed by a long argument causes the service to crash. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid14586; scriptversion"1.16";...

CVE-2004-0458

CVE-2004-0458 affects mah-jong prior to 1.6.2. A missing-argument condition allows remote attackers to trigger a NULL pointer dereference, causing a denial of service (server crash) over the network. Debian’s DSA-503 advisory and OpenVAS entries confirm the issue and advise updating mah-jong to a...