694 matches found
Дырка в NetScreen
Переполнение буфера при длинной URL в Web-интерфейсе...
poll_it.txt
The CGI is available from: http://www.cgi-world.com/pollit.html The bug takes place when calling the CGI and passing it parameters that overwrite settings initialized in the CGI: /cgi-bin/pollit/PollItSSIv2.0.cgi?datadir=/etc/passwd%00 Because the CGI initializes it's internal variables before...
Re: rh 6.2 - gid compromises, etc
slrnpull setgid: news - using eg. NNTPSERVER environmental variable, you can cause nice SEGV... egid==news, of course. On systems running innd server and probably other newsservers as well, group 'news' can be used to control content of whole spool, and to elevate privledges, gaining euid news...
CVE-1999-0623
CVE-1999-0623 is rejected/not used; this entry does not represent an active vulnerability.
EUVD-1999-0509
IP forwarding is enabled on a machine which is not a router or firewall...
SHGetPathFromIDList.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Windows Api SHGetPathFromIDList Buffer Overflow To all those people who sent email to us asking for more information about the SHGetPathFromIDList Windows Api overflow. Here is a more specific description about the problem. All Structure lengths, or...
Admiral Systems EmailClub 1.0.0.5 - Remote Buffer Overflow
// source: https://www.securityfocus.com/bid/801/info Certain versions of EmailClub, a mail server package by Admiral Systems Inc. are vulnerable to a remote buffer overflow. This overflow is exploitable via EmailClub's POP3 server which fails to perform proper bounds checking on the 'From:' head...
debian.apache.txt
An issue with Apache on Debian Andrei D. Caraman [email protected] Mon, 5 Apr 1999 19:53:35 +0300 Aleph1, I don't remember this being posted on Bugtraq, but feel free to kill it, if it's yesterday's news. This pertains to the Apache configuration as shipped with Debian 2.1 codename slink. The...
sun.cc.compiler.txt
Date: Tue, 15 Jun 1999 00:17:12 +1000 From: Darren Reed To: [email protected] Subject: big brother in your cc Whilst this isn't strictly speaking a security bug, it borders on Sun acting in a very "big brother" manner which is frightening! For those of you using Sun's SUNWspro C compiler...
CVE-2026-9611
CVE-2026-9611 entry is rejected/not used; this candidate was issued in error.
Attackers can trigger deserialization of arbitrary data via the phar:// wrapper.
Fix for security vulnerability: Using the phar:// wrapper it was possible to trigger the unserialization of user provided data...