2964 matches found
Mandrake 789 RedHat 6.x7 Bonobo EFSTool - Commandline Argument Buffer Overflow (2)
Mandrake 789 RedHat 6.x7 Bonobo EFSTool - Commandline Argument Buffer Overflow 2 source: https://www.securityfocus.com/bid/5125/info Bonobo is a set of tools and CORBA interfaces included as part of the Gnome infrastructure. It is designed for use on the Linux and Unix operating systems. A boundr...
CVE-2002-0176
CVE-2002-0176 concerns the printf wrappers in libsafe, affected in versions 2.0-11 and earlier. The vulnerability arises because the wrappers do not properly handle argument indexing specifiers, allowing certain calls to proceed with unverified arguments. Mandrake’s MDKSA-2002:026 notes that form...
SGI IRIX 6.x - 'rpc.xfsmd' Remote Command Execution
// source: https://www.securityfocus.com/bid/5075/info Throghout the implementation of the supported remote procedure calls, the server uses the popen libc function. When popen is used, arguments passed to the RPC are included in the command string. These arguments are not sanitized. If shell...
CVE-2001-1355: Undefined Security Weakness
Buffer overflows in NetWin Authentication Module NWAuth 3.0b and earlier, as implemented in DMail, SurgeFTP, and possibly other packages, could allow attackers to execute arbitrary code via long arguments to 1 the -del command or 2 the -lookup command...
CVE-2002-0249: Undefined Security Weakness
PHP for Windows, when installed on Apache 2.0.28 beta as a standalone CGI module, allows remote attackers to obtain the physical path of the php.exe via a request with malformed arguments such as /123, which leaks the pathname in the error message...
CVE-2002-0126
Buffer overflow in BlackMoon FTP Server 1.0 through 1.5 allows remote attackers to execute arbitrary code via a long argument to 1 USER, 2 PASS, or 3 CWD...
Переполнение буфера в Censoft TERM (buffer overflow)
Переполнение буфера при разборе аргументов командной строки...
CVE-2001-0989
Buffer overflows in Pileup before 1.2 allows local users to gain root privileges via 1 long command line arguments, or 2 a long callsign...
CVE-2001-0989: Undefined Security Weakness
Buffer overflows in Pileup before 1.2 allows local users to gain root privileges via 1 long command line arguments, or 2 a long callsign...
Buffer overflow vulnerability in grpck command line utility
Overview The CERT/CC has received a public report of a local buffer overflow vulnerability in the grpck utility. Description The grpck utility performs syntax checking of /etc/group and /etc/gshadow group information files. This utility contains a buffer overflow vulnerability in the section of...
System V Derived /bin/login Extraneous Arguments Buffer Overflow
This exploit connects to a system's modem over dialup and exploits a buffer overflow vulnerability in it's System V derived /bin/login. The vulnerability is triggered by providing a large number of arguments. Module Options msf use exploit/solaris/dialup/manyargs msf undefinedmanyargs show action...
CVE-2001-0826
Buffer overflows in CesarFTPD 0.98b allows remote attackers to execute arbitrary commands via long arguments to 1 HELP, 2 USER, 3 PASS, 4 PORT, 5 DELE, 6 REST, 7 RMD, or 8 MKD...
CVE-2001-0949
Buffer overflows in forms.exe CGI program in ValiCert Enterprise Validation Authority EVA Administration Server 3.3 through 4.2.1 allows remote attackers to execute arbitrary code via long arguments to the parameters 1 Mode, 2 CertificateFile, 3 useExpiredCRLs, 4 listenLength, 5 maxThread, 6...
PT-2001-2102 · Valicert · Valicert Enterprise Validation Authority (Eva) Administration Server
Name of the Vulnerable Software and Affected Versions: ValiCert Enterprise Validation Authority EVA Administration Server versions 3.3 through 4.2.1 Description: The issue allows remote attackers to execute arbitrary code via long arguments to various parameters, including Mode, Certificate File,...
Microsoft Internet Explorer (IE) calls telnet.exe with unsafe command-line arguments ("Telnet Invocation")
Overview A telnet client can be invoked with unsafe options by arbitrary HTML "web" pages when rendered by affected Microsoft Internet Explorer clients. Description This vulnerability is also known as the "telnet logging" or "telnet invocation" or "Microsoft IE Telnet Client File Overwrite"...
CVE-2001-0653
Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privileges via a large value in the 'category' part of debugger -d command line arguments, which is interpreted as a negative number...
CVE-2001-0176: Undefined Security Weakness
The setuid doroot program in Voyant Sonata 3.x executes arbitrary command line arguments, which allows local users to gain root privileges...
NetBSD Security Advisory 2001-015: Insufficient checking of lengths passed to kernel
-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2001-015 ================================= Topic: Insufficient checking of lengths passed from userland to kernel Version: NetBSD-current: source prior to August 5, 2001 NetBSD-1.5.1: affected NetBSD-1.5: affected NetBSD-1.4.: affected...
PT-2001-2170 · Ipswitch · Ws Ftp
Name of the Vulnerable Software and Affected Versions: WS FTP version 2.02 Description: The issue allows remote attackers to execute arbitrary code via long arguments to several commands, including DELE, MDTM, MLST, MKD, RMD, RNFR, RNTO, SIZE, STAT, XMKD, or XRMD. Recommendations: For WS FTP...