70 matches found
CVE-2008-6549: Undefined Security Weakness
The passwordchecker function in config/multiconfig.py in MoinMoin 1.6.1 uses the cracklib and python-crack features even though they are not thread-safe, which allows remote attackers to cause a denial of service segmentation fault and crash via unknown vectors...
CVE-2007-1401
Buffer overflow in the crack extension CrackLib, as bundled with PHP 4.4.6 and other versions before 5.0.0, might allow local users to gain privileges via a long argument to the crackopendict function...
Buffer overflow
Buffer overflow in the crack extension CrackLib, as bundled with PHP 4.4.6 and other versions before 5.0.0, might allow local users to gain privileges via a long argument to the crackopendict function...
CVE-2007-1401
CVE-2007-1401 describes a buffer overflow in the CrackLib crack_opendict function, affecting PHP bundles (notably PHP 4.4.6 and older than 5.0.0). The overflow is triggered by a long argument and could enable local privilege escalation. The NVD entry lists a MEDIUM base score (6.9, AV:L/AC:M/Au:N...
CVE-2007-1401
Buffer overflow in the crack extension CrackLib, as bundled with PHP 4.4.6 and other versions before 5.0.0, might allow local users to gain privileges via a long argument to the crackopendict function...
CVE-2007-1401: Undefined Security Weakness
Buffer overflow in the crack extension CrackLib, as bundled with PHP 4.4.6 and other versions before 5.0.0, might allow local users to gain privileges via a long argument to the crackopendict function...
CVE-1999-1140
Buffer overflow in CrackLib 2.5 may allow local users to gain root privileges via a long GECOS field...
CVE-1999-1140
CrackLib 2.5 is vulnerable to a local privilege escalation via a buffer overflow caused by a long GECOS field, enabling root privileges. The CVE-1999-1140 entry cites a local attack vector with high impact (C/C/I/A) and a base score of 7.2. No explicit remediation or exploit details are provided ...