PT-2016-7987

Name of the Vulnerable Software and Affected Versions yTree version 1.94-1.1 Description A stack-based buffer overflow allows local attackers to execute arbitrary code by providing an excessively long argument to the application. This is achieved by crafting a malicious command-line argument...

PT-2015-3407 · Xfce +1 · Thunar +1

Name of the Vulnerable Software and Affected Versions: Thunar versions prior to 4.16.7 Thunar versions 4.17.x prior to 4.17.2 Description: An issue was discovered in Thunar where it delegates to a different program based on the file type without user confirmation when called with a regular file a...

Sun Java Web Start Plugin Command Line Argument Injection

No description provided by source. $Id: javawsarginjectaltjvm.rb 10404 2010-09-21 00:13:30Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

Sun Java Web Start Plugin Command Line Argument Injection (2012)

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

CVE-2011-3198: Undefined Security Weakness

Domain Technologie Control DTC before 0.34.1 includes a password in the -b command line argument to htpasswd, which might allow local users to read the password by listing the process and its arguments...

CVE-2014-2533

/sbin/ifwatchd in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to gain privileges by providing an arbitrary program name as a command-line argument...

CVE-2014-2533: Undefined Security Weakness

/sbin/ifwatchd in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to gain privileges by providing an arbitrary program name as a command-line argument...

Amazon Linux AMI : php (ALAS-2012-77)

A flaw was found in the way the php-cgi executable processed command line arguments when running in CGI mode. A remote attacker could send a specially crafted request to a PHP script that would result in the query string being parsed by php-cgi as command line options and arguments. This could le...

Tcptrack Command Line Parsing Heap Based Buffer Overflow Vulnerability

This host is installed with Tcptrack and is prone to heap based buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbtcptracklongcommandbofvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Tcptrack Command Line Parsing Heap Based Buffer Overflow Vulnerability Authors: Antu Sanadi Copyright...

CVE-2011-2903

Heap-based buffer overflow in tcptrack before 1.4.2 might allow attackers to execute arbitrary code via a long command line argument. NOTE: this is only a vulnerability in limited scenarios in which tcptrack is "configured as a handler for other applications." This issue might not qualify for...

CVE-2011-2903: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in tcptrack before 1.4.2 might allow attackers to execute arbitrary code via a long command line argument. NOTE: this is only a vulnerability in limited scenarios in which tcptrack is "configured as a handler for other applications." This issue might not qualify for...

CVE-2011-1074

crontab.c in crontab in FreeBSD allows local users to determine the existence of arbitrary directories via a command-line argument composed of a directory name concatenated with a directory traversal sequence that leads to the /etc/crontab pathname...

CVE-2011-1074

crontab.c in crontab in FreeBSD allows local users to determine the existence of arbitrary directories via a command-line argument composed of a directory name concatenated with a directory traversal sequence that leads to the /etc/crontab pathname...

UBUNTU-CVE-2010-4695

A certain Fedora patch for gif2png.c in gif2png 2.5.1 and 2.5.2, as distributed in gif2png-2.5.1-1200.fc12 on Fedora 12 and gif2png2.5.2-1 on Debian GNU/Linux, truncates a GIF pathname specified on the command line, which might allow remote attackers to create PNG files in unintended directories...

Design/Logic Flaw

A certain Fedora patch for gif2png.c in gif2png 2.5.1 and 2.5.2, as distributed in gif2png-2.5.1-1200.fc12 on Fedora 12 and gif2png2.5.2-1 on Debian GNU/Linux, truncates a GIF pathname specified on the command line, which might allow remote attackers to create PNG files in unintended directories...

CVE-2010-4695

Removed by vendor...

Stack overflow

Stack-based buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to execute arbitrary code via a long command-line argument, as demonstrated by a CGI program that launches gif2png...

CVE-2010-4695

The CVE-2010-4695 issue affects gif2png in versions 2.5.1 and 2.5.2 as distributed in Fedora 12 and Debian packaging. A patch for CVE-2009-5018 truncates the GIF pathname on the command line, which could allow a remote attacker to cause gif2png to create PNG files in unintended directories, demon...

CVE-2009-5018: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to execute arbitrary code via a long command-line argument, as demonstrated by a CGI program that launches gif2png...

SuSE 11 Security Update : Sun Java 1.6.0 (SAT Patch Number 2340)

Oracle has released JRE 6 Update 20 in order to fix potential remote code execution vulnerabilities CVE-2010-0887. Please refer to Oracle's site for more information: http://www.oracle.com/technology/deploy/security/alerts/alert-cve-2010 -0886.html %NASLMINLEVEL 70300 C Tenable Network Security,...