2618 matches found
CVE-2005-2456
Array index overflow in the xfrmskpolicyinsert function in xfrmuser.c in Linux kernel 2.6 allows local users to cause a denial of service oops or deadlock and possibly execute arbitrary code via a p-dir value that is larger than XFRMPOLICYOUT, which is used as an index in the sock-skpolicy array...
CVE-2005-2456
CVE-2005-2456 refers to an array index overflow in the Linux kernel 2.6, in xfrm_user.c within xfrm_sk_policy_insert. A local user can trigger the overflow by supplying a p->dir value larger than XFRM_POLICY_OUT, causing writes beyond sock->sk_policy and resulting in a kernel crash (DoS) an...
CVE-2005-2456
Array index overflow in the xfrmskpolicyinsert function in xfrmuser.c in Linux kernel 2.6 allows local users to cause a denial of service oops or deadlock and possibly execute arbitrary code via a p-dir value that is larger than XFRMPOLICYOUT, which is used as an index in the sock-skpolicy array...
CVE-2005-2456
Array index overflow in the xfrmskpolicyinsert function in xfrmuser.c in Linux kernel 2.6 allows local users to cause a denial of service oops or deadlock and possibly execute arbitrary code via a p-dir value that is larger than XFRMPOLICYOUT, which is used as an index in the sock-skpolicy array...
CVE-2005-2115
Soldier of Fortune II 1.02x and 1.03 allows remote attackers to cause a denial of service server crash via a large ID value in the ignore command, which is used as an array index and causes an out-of-bounds operation...
Soldier of Fortune II array index overflow
/ignore command array index overflow...
CVE-2005-1514
Removed by vendor...
CVE-2005-1514
commands.c in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long SMTP command without a space character, which causes an array to be referenced with a negative index...
Multiple bugs in TracerouteNG
Buffer overflows, integer array index overflows...
DeleGate array index overflow
Array index overflow on large number of User-Agent in robots.txt...
CVE-2002-1387
The spray mode in traceroute-nanog aka traceroute-ng may allow local users to overwrite arbitrary memory locations via an array index overflow using the nprobes number of probes argument...
CVE-2002-1387
The spray mode in traceroute-nanog aka traceroute-ng may allow local users to overwrite arbitrary memory locations via an array index overflow using the nprobes number of probes argument...
CVE-2002-1387
CVE-2002-1387 affects traceroute-nanog: the spray mode may allow local users to overwrite arbitrary memory locations via an array index overflow when using the nprobes argument. The CVSS/NVD entry indicates local access, low attack complexity, and partial impact to confidentiality, integrity, and...
Отрицательные индексы массива в rsync (negatice array index)
Ошибка отрицательных индексов массива дает возможность удаленного выполнения кода...
rsync 2.3/2.4/2.5 - Signed Array Index Remote Code Execution
// source: https://www.securityfocus.com/bid/3958/info A vulnerability exists within some versions of rsync. Under some circumstances, a remotely supplied signed value is used as an array index, allowing NULL bytes to be written to arbitrary memory locations. Exploitation of this vulnerability...
rsync 2.32.42.5 - Signed Array Index Remote Code Execution
rsync 2.32.42.5 - Signed Array Index Remote Code Execution // source: https://www.securityfocus.com/bid/3958/info A vulnerability exists within some versions of rsync. Under some circumstances, a remotely supplied signed value is used as an array index, allowing NULL bytes to be written to...
CVE-2023-52071
The CVE-2023-52071 entry is tied to curl/libcurl. The IBM bulletin notes a stack-based buffer overflow in tool_cb_wrt within libcurl, caused by improper bounds checking, which could let a remote attacker overflow a buffer and execute code or cause a denial of service. Affected IBM MaaS360 compone...
PT-2005-5552 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Debian GNU/Linux kernel versions 2.4.27 affected versions not specified Description: The issue is related to multiple vulnerabilities in the Debian GNU/Linux kernel, which can lead to a disruption of protected information. These vulnerabiliti...