CVE-2004-0677: Undefined Security Weakness

Fastream NETFile FTP Server 6.7.2.1085 and earlier allows remote attackers to cause a denial of service temporary hang via the cd command with an unusual argument, possibly due to multiple leading slashes and/or an access to the floppy drive "A"...

SuSE Live CD unauthorized access

Unauthorized root access via SSH is possible...

SUSE Security Announcement: Live CD 9.1 (SuSE-SA:2004:011)

-----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: Live CD 9.1 Announcement-ID: SuSE-SA:2004:011 Date: Thursday, May 6th 2004 22:30 MEST Affected products: SUSE LINUX 9.1 Personal Edition Live CD Vulnerability Type: remote root access Severity 1-10: 8 SuSE default package: yes...

[Full-Disclosure] iDEFENSE Security Advisory 04.14.04: Buffer Overflow in ISO9660 File System Component of Linux Kernel

Buffer Overflow in ISO9660 File System Component of Linux Kernel iDEFENSE Security Advisory 04.14.04 www.idefense.com/application/poi/display?id=101&type=vulnerabilities April 14, 2004 I. BACKGROUND Linux is a free Unix-type operating system originally created by Linus Torvalds with the assistanc...

cdp buffer overflow vulnerability

Product: cdp - console cd player Versions: All Bug: Buffer overflow Impact: Attackers can execute arbitrary code Risk: Medium/High Date: March 31, 2004 Author: Shaun Colley Email: shaunige yahoo co uk WWW: http://www.nettwerked.co.uk Introduction cdp is... "cdp is a program that plays CDs at the...

cdp buffer overflow

Buffer overflow on oversized CD track name...

Hidden Gamespy code leads to vulnerabilities in diffused games (BF1942, Halo, Dredd and more)

Luigi Auriemma Application: Gamespy SDK used for online cd-keys validation in third party code hidden "security through obscurity" code Games/ver: Battlefield 1942 = 1.6.19 and 1.6rc1 http://www.battlefield1942.com Contract Jack = 1.1 http://nolf.sierra.com Gore = 1.48 1.49 http://gore.cryogame.c...

CVE-2003-1155

X-CD-Roast 0.98 alpha10 through alpha14 allows local users to overwrite arbitrary files via a symlink attack on an unknown file...

[SECURITY] [DSA-366-1] New eroaster packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 366-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 5th, 2003 http://www.debian.org/security/faq -...

CVE-2003-0524

Qt in Knoppix 3.1 Live CD allows local users to overwrite arbitrary files via a symlink attack on the qtplugins3.0rc temporary file in the .qt directory...

CVE-2003-0524: Undefined Security Weakness

Qt in Knoppix 3.1 Live CD allows local users to overwrite arbitrary files via a symlink attack on the qtplugins3.0rc temporary file in the .qt directory...

CVE-2003-0392

The CVE-2003-0392 entry concerns ST FTP Service 3.0, where a vulnerability in the CD command handling enables directory traversal. An attacker can cause the server to list arbitrary directories by supplying a drive-letter argument (for example, CD E:), potentially exposing files outside the FTP j...

CVE-2003-0392: Undefined Security Weakness

Directory traversal vulnerability in ST FTP Service 3.0 allows remote attackers to list arbitrary directories via a CD command with a DoS drive letter argument e.g. E:...

ST FTP directory traversal

It's possible to perform cd to any disk...

CVE-2002-1268

Mac OS X 10.2.2 allows local users to gain privileges via a mounted ISO 9600 CD, aka "User Privilege Elevation via Mounting an ISO 9600 CD."...

[LoWNOISE] "Get Knowledge" SunONE Starter Kit - Sun Microsystems/Astaware

LoWNOISE "Get Knowledge" SunONE Starter Kit - Sun Microsystems/Astaware by Efrain 'ET' Torres, Colombia 2002. [email protected] +Disclaimer: blah. +Product: -SunONE Starter Kit v2.0 Sun Microsystems CD-ROM Version -ASTAware SearchDisk 2002. ASTAWARE Technologies Inc. +Introduction You are one of...

Sun Sunsolve CD Pack sscd_suncourier.pl email Parameter Arbitrary Command Execution

The Sunsolve CD is part of the Solaris Media pack. It is included as a documentation resource, and is available for the Solaris Operating Environment. Sunsolve CD CGI scripts does not validate user input. Crackers may use them to execute some commands on your system. Note: Nessus did not try to...

CVE-2001-1295: Undefined Security Weakness

Directory traversal vulnerability in Cerberus FTP Server 1.5 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the CD command...

CVE-2002-0436

sscdsuncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via shell metacharacters in the email address parameter...

CVE-2002-0436

The CVE-2002-0436 entry maps to the SunSolve CD package: the CGI script sscd_suncourier.pl does not validate the email parameter, enabling remote command execution via shell metacharacters. Documented by NVD/Nessus/OpenVAS references, this is a clientless, remote issue affecting Sunsolve CD CGI i...