2528 matches found
PT-2001-2102 · Valicert · Valicert Enterprise Validation Authority (Eva) Administration Server
Name of the Vulnerable Software and Affected Versions: ValiCert Enterprise Validation Authority EVA Administration Server versions 3.3 through 4.2.1 Description: The issue allows remote attackers to execute arbitrary code via long arguments to various parameters, including Mode, Certificate File,...
Microsoft Internet Explorer (IE) calls telnet.exe with unsafe command-line arguments ("Telnet Invocation")
Overview A telnet client can be invoked with unsafe options by arbitrary HTML "web" pages when rendered by affected Microsoft Internet Explorer clients. Description This vulnerability is also known as the "telnet logging" or "telnet invocation" or "Microsoft IE Telnet Client File Overwrite"...
CVE-2001-0653
Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privileges via a large value in the 'category' part of debugger -d command line arguments, which is interpreted as a negative number...
NetBSD Security Advisory 2001-015: Insufficient checking of lengths passed to kernel
-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2001-015 ================================= Topic: Insufficient checking of lengths passed from userland to kernel Version: NetBSD-current: source prior to August 5, 2001 NetBSD-1.5.1: affected NetBSD-1.5: affected NetBSD-1.4.: affected...
PT-2001-2170 · Ipswitch · Ws Ftp
Name of the Vulnerable Software and Affected Versions: WS FTP version 2.02 Description: The issue allows remote attackers to execute arbitrary code via long arguments to several commands, including DELE, MDTM, MLST, MKD, RMD, RNFR, RNTO, SIZE, STAT, XMKD, or XRMD. Recommendations: For WS FTP...
Переполнение буфера в утилитах под SCO (buffer overflow)
Переполнение буфера при разборе аргументов коммандной строки в su, cron, uucp...
Переполнение буфера в su-wrapper (buffer overflow)
Переполнение буфера в агрументе командной строки...
SCO 5.0.6 issues (lpshut)
====================================================================== Strategic Reconnaissance Team Security AdvisorySRT2001-04 Topic: SCO 5.0.6 issues lpshut Vendor: SCO Release Date: 03/27/01 ====================================================================== .: Description SCO OpenServer...
SCO 5.0.6 MMDF issues (deliver)
====================================================================== Strategic Reconnisiance Team Security AdvisorySRT2001-03 Topic: SCO 5.0.6 MMDF issues deliver Vendor: SCO Release Date: 03/27/01 ====================================================================== .: Description SCO...
SCO 5.0.6 issues (lpforms)
====================================================================== Strategic Reconnisiance Team Security AdvisorySRT2001-06 Topic: SCO 5.0.6 issues lpforms Vendor: SCO Release Date: 03/27/01 ====================================================================== .: Description SCO OpenServer...
Format string bug in startinnfeed
Description -------------- The 'startinnfeed' binary contains various format string bugs. Most of the command line options passes user given arguments to 'syslog' as format string. For example: paul@ps:/usr/home/paul /usr/lib/news/bin/startinnfeed -a "xxnnnnnnn" segmentation fault...
CVE-2001-0019
Arrowpoint aka Cisco Content Services, or CSS allows local users to cause a denial of service via a long argument to the "show script," "clear script," "show archive," "clear archive," "show log," or "clear log" commands...
Microsoft Internet Explorer 5.0.15.5 - mstask.exe CPU Consumption (Denial of Service)
Microsoft Internet Explorer 5.0.15.5 - mstask.exe CPU Consumption Denial of Service source: https://www.securityfocus.com/bid/2129/info Microsoft Internet Explorer ships with a task scheduler engine mstask.exe. By default mstask.exe listens between port 1025 to 1220. It is possible for a user to...
Oracle 8.x - cmctl Buffer Overflow
/ source: https://www.securityfocus.com/bid/1968/info cmctl is the Connection Control Manager, part of the Oracle 8i installation. A vulnerability exists that can allow elevation of privileges. The problem occurs in the way cmctl handles the user-supplied command line arguments. The string...
Jan Hubicka Koules 1.4 - 'Svgalib' Local Buffer Overflow
/ source: https://www.securityfocus.com/bid/1967/info Koules is an original, arcade-style game authored by Jan Hubicka. The version using svgalib is usually installed setuid root so that it may access video hardware when being run at the console by regular users. This version contains a buffer...
Jan Hubicka Koules 1.4 - Svgalib Local Buffer Overflow
Jan Hubicka Koules 1.4 - Svgalib Local Buffer Overflow / source: https://www.securityfocus.com/bid/1967/info Koules is an original, arcade-style game authored by Jan Hubicka. The version using svgalib is usually installed setuid root so that it may access video hardware when being run at the...
Oracle 8.x - cmctl Buffer Overflow
Oracle 8.x - cmctl Buffer Overflow / source: https://www.securityfocus.com/bid/1968/info cmctl is the Connection Control Manager, part of the Oracle 8i installation. A vulnerability exists that can allow elevation of privileges. The problem occurs in the way cmctl handles the user-supplied comman...
CVE-2000-0752
Buffer overflows in brouted in FreeBSD and possibly other OSes allows local users to gain root privileges via long command line arguments...
CVE-2000-0752
The CVE-2000-0752 entry concerns a buffer overflow in brouted (FreeBSD and possibly other OSes) that enables local users to gain root privileges via long command line arguments. Affected component: brouted, a routing daemon/util in the OS. Root cause: unchecked/buffer overflow when handling exten...