CVE-2001-0369

Buffer overflow in lpsched on DGUX version R4.20MU06 and MU02 allows a local attacker to obtain root access via a long command line argument non-existent printer name...

CVE-2001-1329

Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument...

CVE-2001-0187

Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment...

A subject line buffer overflow in Outlook Express (was Re: EML Content Spoofing and Informed Consent)

----- Original Message ----- From: "Dan Kaminsky" [email protected] To: [email protected] Sent: Wednesday, April 04, 2001 5:52 PM Subject: EML Content Spoofing and Informed Consent was: Re: MS patch Q292108 opens a vulnerability snip The short version of this: If I try to open a MP3 file...

CVE-2001-0111

Format string vulnerability in splitvt before 1.6.5 allows local users to execute arbitrary commands via the -rcfile command line argument...

sendtemp.pl - Read Access to Files

sendtemp.pl - Read Access to Files !/usr/bin/perl -w sendtemp.pl: A part of the Amaya Web development server contains a file disclosure vulnerability, which allows remote, read access to files on the servers file system, as whichever user the httpd is running as. The Vulnerability is really quite...

Дырка в man (linux)

Ошиюка форматной строки при разборе агрументов...

Дырка в write в Solaris

Переполнение буфера в аргументе командной строки дает возможность получить egid tty...

Solaris /usr/lib/exrecover buffer overflow

Hi, The /usr/lib/exrecover contains a buffer overflow this command is suid in Solaris 2.4/5/6 The problem occurs when it gets the second argument, it accepts the argument without checking out its lenght and this causes the problem. The overflow seems to be in the heap space. $ /usr/lib/exrecover...

CVE-2000-1108

cons.saver in Midnight Commander mc 4.5.42 and earlier does not properly verify if an output file descriptor is a TTY, which allows local users to corrupt files by creating a symbolic link to the target file, calling mc, and specifying that link as a TTY argument...

CVE-2000-1175

Buffer overflow in Koules 1.4 allows local users to execute arbitrary commands via a long command line argument...

CVE-2000-1147

Buffer overflow in IIS ISAPI .ASP parsing mechanism allows attackers to execute arbitrary commands via a long string to the "LANGUAGE" argument in a script tag...

Дырка в TWIG webmail

Используя ошибку в проверке агрументов можно загрузить и выполнить собственный php3-скрипт...

Переполнение буфера в старых версиях route

Переполнение буфера при разборе аргумента в route add...

CVE-1999-0823

CVE-1999-0823 describes a local privilege-escalation vulnerability in FreeBSD’s xmindpath, caused by a buffer overflow triggered by the -f argument. Affected component: xmindpath (FreeBSD). The impact is local privilege gain with partial confidentiality, integrity, and availability impacts report...

Problems with: xcdroast, gatos, xkobo, xbill, iagno, ++

---------------------------------------------------------------- - A result of too much time - [email protected] anno 2000 - ---------------------------------------------------------------- xcdroast Version 0.96e ======================== Comes with Mandrake 7.0, others? I am not sure about...

CVE-1999-0980

Windows NT Service Control Manager SCM allows remote attackers to cause a denial of service via a malformed argument in a resource enumeration request...

CVE-2000-0099

Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument...

CVE-1999-1008

The CVE-1999-1008 issue affects the xsoldier program and allows a local attacker to gain root privileges by supplying a long argument to the program. The description in the provided sources confirms local access vector with privilege escalation to root, but the connected documents do not provide ...

Локальный root через X-сервер

Переполнение буфера при вызове XFree86 с параметром -xkbmap и длинным аргументом. При этом аргумент может содержать только текстовые символы, что затрудняет эксплоит, но не делает его невозможным...