CVE-2003-1050

Multiple buffer overflows in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via long command line arguments to 1 db2start, 2 db2stop, or 3 db2govd...

Mandrake Linux Security Advisory : fileutils/coreutils (MDKSA-2003:106)

A memory starvation denial of service vulnerability in the ls program was discovered by Georgi Guninski. It is possible to allocate a huge amount of memory by specifying certain command-line arguments. It is also possible to exploit this remotely via programs that call ls such as wu-ftpd although...

RHEL 2.1 : fileutils (RHSA-2003:310)

Updated fileutils packages that close a potential denial of service vulnerability are now available. The fileutils package contains several basic system utilities. One of these utilities is the 'ls' program, which is used to list information about files and directories. Georgi Guninski discovered...

Lotus Notes URI command line modification

notes: URI allows to execute notes.exe with any arguments, for example to cpecify .ini file location...

Security flaw in rssh

rssh is a small shell whose purpose is to restrict users to using scp or sftp, and also provides the facilities to place users in a chroot jail. It can also be used to lock users out of a system completely. William F. McCaw identified a minor security flaw in rssh when used with chroot jails. The...

Mollensoft Lightweight FTP Server 3.6 - Remote Denial of Service

source: https://www.securityfocus.com/bid/10409/info A denial of service condition is reported to exist in the MollenSoft Lightweight FTP Server that may allow a remote user to deny service to legitimate FTP users. The vulnerability is due to a lack of sufficient boundary checks performed on CWD...

Mollensoft Lightweight FTP Server 3.6 - Remote Denial of Service

Mollensoft Lightweight FTP Server 3.6 - Remote Denial of Service source: https://www.securityfocus.com/bid/10409/info A denial of service condition is reported to exist in the MollenSoft Lightweight FTP Server that may allow a remote user to deny service to legitimate FTP users. The vulnerability...

KDE URI handling problem

During external URI handler invocation ability to insert handler arguments via '-' is not checked...

DEBIAN-CVE-2004-1915

Buffer overflow in the parseallclientmessages function in LCDproc 0.4.x up to 0.4.4 allows remote attackers to execute arbitrary code via a large number of arguments...

CVE-2003-0612

Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group "games" privileges via long command line arguments to crafty.bin...

DEBIAN-CVE-2003-0612

Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group "games" privileges via long command line arguments to crafty.bin...

CVE-2003-0612

Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group "games" privileges via long command line arguments to crafty.bin...

CVE-2004-0325

TYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service CPU consumption via "//../" arguments to 1 mkd, 2 xmkd, 3 dele, 4 size, 5 retr, 6 stor, 7 appe, 8 rnfr, 9 rnto, 10 rmd, or 11 xrmd, as demonstrated using "//../qwerty"...

Apple Mac OS X "cd9660.util" buffer overflow

Overview A component utility in Apple's Mac OS X operating system suffers from a buffer overflow vulnerability in its handling of command-line arguments. This vulnerability could allow a local attacker to gain elevated privileges on the vulnerable system. Description Apple's Mac OS X operating...

CVE-2003-0612

Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group "games" privileges via long command line arguments to crafty.bin...

CVE-2003-0612

Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group "games" privileges via long command line arguments to crafty.bin...

Apple Mac OS X Point-to-Point Protocol daemon (pppd) contains format string vulnerability

Overview Apple Mac OS X Point-to-Point Protocol daemon contains a format string vulnerability in the handling of invalid command line arguments. Description The Point-to-Point Protocol PPP provides a method for transmitting datagrams over serial point-to-point links. There is a format string...

SX Design sipd 0.1.20.1.4 - Remote Format String

SX Design sipd 0.1.20.1.4 - Remote Format String source: https://www.securityfocus.com/bid/9236/info sipd has been reported prone to a format string vulnerability that may be triggered remotely. It has been reported that sip URI arguments passed to the affected server are not sufficiently handled...

CVE-2003-0622

The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to cause a denial of service hang via pathname arguments that contain MS-DOS device names such as CON and AUX...

IBM DB2 - db2govd Command Line Argument Local Overflow

IBM DB2 - db2govd Command Line Argument Local Overflow source: https://www.securityfocus.com/bid/8990/info IBM DB2 has been reported to be prone to multiple buffer overflow vulnerabilities that present themselves in binaries that are shipped with DB2. The vulnerabilities are likely caused due to ...