94 matches found
CVE-2021-22925
curl supports the -t command line option, known as CURLOPTTELNETOPTIONSin libcurl. This rarely used option is used to send variable=content pairs toTELNET servers.Due to flaw in the option parser for sending NEWENV variables, libcurlcould be made to pass on uninitialized data from a stack based...
grub2: Stack buffer overflow in grub_parser_split_cmdline()
A flaw was found in grub2. Variable names present are expanded in the supplied command line into their corresponding variable contents, using a 1kB stack buffer for temporary storage, without sufficient bounds checking. If the function is called with a command line that references a variable with...
sudo: Heap buffer overflow in argument parsing
A flaw was found in sudo. A heap-based buffer overflow was found in the way sudo parses command line arguments. This flaw is exploitable by any local user who can execute the sudo command by default, any local user can execute sudo without authentication. Successful exploitation of this flaw coul...
The vulnerability of the web server performance testing tool ab arises due to buffer overflows when processing command-line parameters, allowing attackers to cause service failures.
The vulnerability of the web server performance testing tool ab arises due to buffer overflows when processing command-line parameters. Exploiting this vulnerability can allow an attacker to cause a service failure by entering a specially crafted sequence of data in the command line...
Advantech WebAccess bwmail Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of the command line in the bwmail utility. The issue results from the...
Advantech WebAccess DrawCMD Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of the command line in the DrawCMD utility. The issue results from the...
IBM U2 UniVerse 10.0 .0.9 UVADMSH Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8209/info Under certain configurations, UniVerse allows the 'uvadm' user to perform certain administration tasks for the software. It has been reported that the uvadmsh binary does not perform bounds checking when parsing...
IRIX 6.5.x gr_osview Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1526/info Under certain versions of IRIX, the 'grosview' command contains a buffer overflow that local attackers can exploit to gain root privileges. The grosview command produces a graphical display of memory-management...
Tcptrack Command Line Parsing Heap Based Buffer Overflow Vulnerability
Tcptrack is prone to heap based buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Tcptrack Command Line Parsing Heap Based Buffer Overflow Vulnerability
This host is installed with Tcptrack and is prone to heap based buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbtcptracklongcommandbofvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Tcptrack Command Line Parsing Heap Based Buffer Overflow Vulnerability Authors: Antu Sanadi Copyright...
KVIrc 3.4.2 Shiny (uri handler) remote command execution exploit
!-- KVIrc 3.4.2 Shiny uri handler remote command execution exploit by Nine:Situations:Group::strawdog Tested against IE8beta/WINxpsp3 software site: http://www.kvirc.net/?lang=en description: "KVIrc is a Multilanguage, graphical IRC-Client for Windows, Linux, Unix and Mac OS..." A command line...
KVIrc 3.4.2 Shiny (uri handler) Remote Command Execution Exploit
No description provided by source. !-- KVIrc 3.4.2 Shiny uri handler remote command execution exploit by Nine:Situations:Group::strawdog Tested against IE8beta/WINxpsp3 software site: http://www.kvirc.net/?lang=en description: "KVIrc is a Multilanguage, graphical IRC-Client for Windows, Linux, Un...
kvirc-exec.txt
Heaven and Earth are impartial They see the ten thousand things as straw dogs The wise are impartial...
KVIrc 3.4.2 Shiny - URI handler Remote Command Execution
KVIrc 3.4.2 Shiny - URI handler Remote Command Execution Heaven and Earth are impartial They see the ten thousand things as straw dogs The wise are impartial/a...
KVIrc 3.4.2 Shiny - URI handler Remote Command Execution
Heaven and Earth are impartial They see the ten thousand things as straw dogs The wise are impartial a href='ircs6:///"%20--nosplash%20-e%20"run%20c...
ifenslave / iwconfig network device management utilities buffer overflow
Buffer overflow on parsing command lines arguments...
ePSXe Sony PlayStation emulator buffer overflow
Buffer overflow on command line parsing...
SCO OpenServer scosession buffer overflow
Buffer overflow on command line parsing...
RHEL 2.1 : lynx (RHSA-2003:030)
Updated Lynx packages fix an error in the way Lynx parses its command line arguments which can lead to faked headers being sent to a Web server. Lynx is a character-cell Web browser, suitable for running on terminals such as the VT100. Lynx constructs its HTTP queries from the command line or...