2552 matches found
CVE-2005-0531
The atmgetaddr function in addr.c for Linux kernel 2.6.10 and 2.6.11 before 2.6.11-rc4 may allow local users to trigger a buffer overflow via negative arguments...
CVE-2005-0529
Linux kernel 2.6.10 and 2.6.11rc1-bk6 uses different size types for offset arguments to the procfileread and locksreadproc functions, which leads to a heap-based buffer overflow when a signed comparison causes negative integers to be used in a positive context...
CVE-2000-1220
The line printer daemon lpd in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file...
security flaw
The atmgetaddr function in addr.c for Linux kernel 2.6.10 and 2.6.11 before 2.6.11-rc4 may allow local users to trigger a buffer overflow via negative arguments...
DEBIAN-CVE-2004-1341
Cross-site scripting XSS vulnerability in info2www before 1.2.2.9 allows remote attackers to inject arbitrary web script or HTML via the arguments to info2www...
CVE-2002-1633
Multiple buffer overflows in QNX 4.25 may allow local users to execute arbitrary code via long command line arguments to 1 sample, 2 ex, 3 du, 4 find, 5 lex, 6 mkdir, 7 rm, 8 serserv, 9 tcpserv, 10 termdef, 11 time, 12 unzip, 13 use, 14 wcc, 15 wcc386, 16 wd, 17 wdisasm, 18 which, 19 wlib, 20...
CVE-2002-1598
Buffer overflows in Computer Associates MLink CA-MLink 6.5 and earlier may allow local users to execute arbitrary code via long command line arguments to 1 mlclear or 2 mllock...
DEBIAN-CVE-2005-0160
Multiple buffer overflows in unace 1.2b allow attackers to execute arbitrary code via 1 2 overflows in ACE archives, 2 a long command line argument, or 3 certain "Ready for next volume" messages...
security flaw
Multiple integer signedness errors in the sgscsiioctl function in scsiioctl.c for Linux 2.6.x allow local users to read or modify kernel memory via negative integers in arguments to the scsi ioctl, which bypass a maximum length check before calling the copyfromuser and copytouser functions...
security flaw
Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function gram.y, which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247...
unace -- multiple vulnerabilities
Ulf Härnhammar reports: There are buffer overflows when extracting, testing or listing specially prepared ACE archives. There are directory traversal bugs when extracting ACE archives. There are also buffer overflows when dealing with long 17000 characters command line arguments. Secunia reports:...
CVE-2004-1131
Multiple buffer overflows in the enable command for SCO OpenServer 5.0.6 and 5.0.7 allow local users to execute arbitrary code via long command line arguments...
CVE-2004-1114
Buffer overflow in the handling of command line arguments in Skype 1.0.x.94 through 1.0.x.98 allows remote attackers to execute arbitrary code via a callto:// URL with a long non-existent username, a different vulnerability than CVE-2004-1777...
CVE-2004-0325
TYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service CPU consumption via "//../" arguments to 1 mkd, 2 xmkd, 3 dele, 4 size, 5 retr, 6 stor, 7 appe, 8 rnfr, 9 rnto, 10 rmd, or 11 xrmd, as demonstrated using "//../qwerty"...
CVE-2004-1114
Buffer overflow in the handling of command line arguments in Skype 1.0.x.94 through 1.0.x.98 allows remote attackers to execute arbitrary code via a callto:// URL with a long non-existent username, a different vulnerability than CVE-2004-1777...
[SA13191] Skype "callto:" URI Handler Buffer Overflow Vulnerability
TITLE: Skype "callto:" URI Handler Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA13191 VERIFY ADVISORY: http://secunia.com/advisories/13191/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Skype for Windows 1.x http://secunia.com/product/4250/ DESCRIPTION: A...
CVE-2002-1253
Technical details for CVE-2002-1253 are not publicly available in the provided documents; monitor for updates from official advisories.
CVE-2003-1051
Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via certain command line arguments to 1 db2start, 2 db2stop, or 3 db2govd...
CVE-2003-1051
CVE-2003-1051 affects IBM DB2 Universal Database 8.1. It describes multiple format-string vulnerabilities that could allow local users to execute arbitrary code via certain command-line arguments to db2start, db2stop, or db2govd. Root cause: format string handling issues in the involved binaries....