3717 matches found
Debian DSA-731-1 : krb4 - buffer overflows
Several problems have been discovered in telnet clients that could be exploited by malicious daemons the client connects to. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-0468 Gael Delalleau discovered a buffer overflow in the envoptadd function...
DEBIAN-CVE-2005-0488
Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENVUSERVAR command...
Information Exposure
Overview Affected versions of this package are vulnerable to Information Exposure. Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENVUSERVAR...
security flaw
Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service application crash via a bin file with format string specifiers in the filename. NOTE: while this issue is triggered on the command line by the gedit user, it has been reported that web browsers and email...
[SECURITY] [DSA 731-1] New krb4 packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 731-1 [email protected] http://www.debian.org/security/ Martin Schulze June 2nd, 2005 http://www.debian.org/security/faq -...
DSA-731-1 krb4 - buffer overflows
Bulletin has no description...
CVE-2005-1686
Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service application crash via a bin file with format string specifiers in the filename. NOTE: while this issue is triggered on the command line by the gedit user, it has been reported that web browsers and email...
gedit -- format string vulnerability
Yan Feng reports a format string vulnerability in gedit. This vulnerability could cause a denial of service with a binary file that contains format string characters within the filename. It had been reported that web browsers and email clients can be configured to provide a filename as an argumen...
CVE-2004-2052
eSeSIX Thintune thin clients running firmware 2.4.38 and earlier accept any password that begins with the actual password, which makes it easier for users to conduct brute force password guessing...
CVE-2004-2050
CVE-2004-2050 concerns eSeSIX Thintune Thin Client firmware 2.4.38 and earlier. Local users can gain privileges by pressing CTRL-SHIFT-ALT-DEL and entering the hard-coded password maertsJ in lshell, enabling a local privilege escalation. OpenVAS notes a backdoor password (jstwo) in Thintune, indi...
CVE-2004-2052
The affected software is eSeSIX Thintune thin clients with firmware up to 2.4.38. The vulnerability arises from an authentication weakness where any password that begins with the actual password is accepted, enabling brute‑force password guessing. Impact is described as partial confidentiality an...
CVE-2004-2049
Summary (CVE-2004-2049) : The eSeSIX Thintune thin clients (firmware
CVE-2004-2048
The CVE-2004-2048 entry concerns eSeSIX Thintune Thin Client devices. A radmin service starts a process on port 25072 in firmware 2.4.38 and earlier, which can be accessed using the default password “jstwo,” enabling remote attackers to gain complete access. Related OpenVAS data corroborates a ba...
[Full-disclosure] Crash in Zoidcom 1.0 beta 4
Luigi Auriemma Application: Zoidcom http://www.zoidcom.com Versions: = 1.0 beta 4 Platforms: Windows and Linux Bug: access to unallocated memory Exploitation: remote, versus server and clients Date: 10 May 2005 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org ...
CVE-2005-0207
Unknown vulnerability in Linux kernel 2.4.x, 2.5.x, and 2.6.x allows NFS clients to cause a denial of service via ODIRECT...
DEBIAN-CVE-2005-0469
Buffer overflow in the slcaddreply function in various BSD-based Telnet clients, when handling LINEMODE suboptions, allows remote attackers to execute arbitrary code via a reply with a large number of Set Local Character SLC commands...
CVE-2005-0469
Buffer overflow in the slcaddreply function in various BSD-based Telnet clients, when handling LINEMODE suboptions, allows remote attackers to execute arbitrary code via a reply with a large number of Set Local Character SLC commands...
CVE-2005-0469
Buffer overflow in the slcaddreply function in various BSD-based Telnet clients, when handling LINEMODE suboptions, allows remote attackers to execute arbitrary code via a reply with a large number of Set Local Character SLC commands...
CVE-2001-1443
CVE-2001-1443 affects KTH Kerberos IV and Kerberos V (Heimdal) used by Telnet clients. The root cause is that the Telnet connection is not encrypted when the server does not support the requested encryption, enabling a man-in-the-middle to read communications. The NVD entry lists a CVSS v2 base s...