65 matches found
CVE-2007-1401
CVE-2007-1401 describes a buffer overflow in the CrackLib crack_opendict function, affecting PHP bundles (notably PHP 4.4.6 and older than 5.0.0). The overflow is triggered by a long argument and could enable local privilege escalation. The NVD entry lists a MEDIUM base score (6.9, AV:L/AC:M/Au:N...
CVE-2007-1401
Buffer overflow in the crack extension CrackLib, as bundled with PHP 4.4.6 and other versions before 5.0.0, might allow local users to gain privileges via a long argument to the crackopendict function...
CVE-1999-1140
Buffer overflow in CrackLib 2.5 may allow local users to gain root privileges via a long GECOS field...
CVE-1999-1140
CrackLib 2.5 is vulnerable to a local privilege escalation via a buffer overflow caused by a long GECOS field, enabling root privileges. The CVE-1999-1140 entry cites a local attack vector with high impact (C/C/I/A) and a base score of 7.2. No explicit remediation or exploit details are provided ...
