Another flaw in Apache?

Hello. While playing with the SetEnv directive with Apache, I noticed that httpd processes are dying with a signal 11 if the data stored in an environment variable was too long. I simply triggered the bug by creating a .htaccess file so a regular user can do it with : SetEnv DATELOCALE "..." The...

CVE-2001-1514

ColdFusion 4.5 and 5, when running on Windows with the advanced security sandbox type set to "operating system," does not properly pass security context to 1 child processes created with and 2 child processes that call the CreateProcess function and are executed with or end with the CFX extension...

CVE-1999-1482: Undefined Security Weakness

SVGAlib zgv 3.0-7 and earlier allows local users to gain root access via a privilege leak of the iopl3 privileges to child processes...

Пользователь может обойти Inherited Rights Filters (IRF) в Novell Netware

Права на избранные свойства Selected Property Rights в Novell Netware могут наследоваться, но не могут быть блокированы с помощью IRF. Таким образом пользователь, имеющий права на родительский объект может овладеть дочерним объектом NDS, установив права на родительский объект и объявив их...

FreeBSD-SA-96:01.sliplogin

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-96:01 Security Advisory Revised: Wed May 22 00:18:51 PDT 1996 FreeBSD, Inc. Topic: sliplogin unauthorized access vulnerability Category: core Module: sliplogin Announced:...