CVE-2005-2483

Eval injection vulnerability in Karrigell before 2.1.8 allows remote attackers to execute arbitrary Python code via modified arguments to a Karrigell services .ks script, which can reference functions from libraries that are used by that script...

CVE-2005-2236

Format string vulnerability in the paginit command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary code via format strings in command line arguments...

CVE-2005-2236

CVE-2005-2236 describes a format string vulnerability in the paginit command for IBM AIX 5.3 (and possibly other versions). The issue could allow local users to execute arbitrary code via format strings supplied in command line arguments. This is a local privilege concern with an impact described...

CVE-2005-2235: Undefined Security Weakness

Buffer overflow in the diagTasksWebSM command in IBM AIX 5.1, 5.2 and 5.3, might allow local users to execute arbitrary code via long command line arguments...

[SA15544] Fast n Furious DtDNS Updater Command Line Argument Disclosure

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Fast n Furious DtDNS Updater information leak

Command line arguments are visible in process list...

CVE-2005-0974

Unknown vulnerability in the nfsmount call in Mac OS X 10.3.9 and earlier allows local users to gain privileges via crafted arguments...

CVE-2005-0974

Unknown vulnerability in the nfsmount call in Mac OS X 10.3.9 and earlier allows local users to gain privileges via crafted arguments...

CVE-2005-0973

Unknown vulnerability in the setsockopt system call in Mac OS X 10.3.9 and earlier allows local users to cause a denial of service memory exhaustion via crafted arguments...

CVE-2005-0971: Undefined Security Weakness

Stack-based buffer overflow in the semop system call in Mac OS X 10.3.9 and earlier allows local users to gain privileges via crafted arguments...

GLSA-200505-05 : gzip: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200505-05 gzip: Multiple vulnerabilities The gzip and gunzip programs are vulnerable to a race condition when setting file permissions CAN-2005-0988, as well as improper handling of filename restoration CAN-2005-1228. The zgrep...

CVE-2004-1915

Buffer overflow in the parseallclientmessages function in LCDproc 0.4.x up to 0.4.4 allows remote attackers to execute arbitrary code via a large number of arguments...

CVE-2004-1915

Buffer overflow in the parseallclientmessages function in LCDproc 0.4.x up to 0.4.4 allows remote attackers to execute arbitrary code via a large number of arguments...

CVE-2005-1393

Multiple buffer overflows in ArcGIS for ESRI ArcInfo Workstation 9.0 allow local users to execute arbitrary code via long command line arguments to 1 asmaster, 2 asuser, 3 asutility, 4 se, or 5 asrecovery...

CVE-2004-1777: Improper Input Validation

A "range check error" in Skype for Windows before 0.98.0.28 allows local and remote attackers to cause a denial of service application crash via long command line arguments or a long callto:// URL, a different vulnerability than CVE-2004-1114...

CVE-2005-0529

Linux kernel 2.6.10 and 2.6.11rc1-bk6 uses different size types for offset arguments to the procfileread and locksreadproc functions, which leads to a heap-based buffer overflow when a signed comparison causes negative integers to be used in a positive context...

CVE-2005-0531

The atmgetaddr function in addr.c for Linux kernel 2.6.10 and 2.6.11 before 2.6.11-rc4 may allow local users to trigger a buffer overflow via negative arguments...

CVE-2005-0529

Linux kernel 2.6.10 and 2.6.11rc1-bk6 uses different size types for offset arguments to the procfileread and locksreadproc functions, which leads to a heap-based buffer overflow when a signed comparison causes negative integers to be used in a positive context...

CVE-2005-0531

The atmgetaddr function in addr.c for Linux kernel 2.6.10 and 2.6.11 before 2.6.11-rc4 may allow local users to trigger a buffer overflow via negative arguments...

CVE-2005-1393: Undefined Security Weakness

Multiple buffer overflows in ArcGIS for ESRI ArcInfo Workstation 9.0 allow local users to execute arbitrary code via long command line arguments to 1 asmaster, 2 asuser, 3 asutility, 4 se, or 5 asrecovery...