5257 matches found
CVE-2004-0080: Undefined Security Weakness
The login program in util-linux 2.11 and earlier uses a pointer after it has been freed and reallocated, which could cause login to leak sensitive data...
GLSA-200404-06 : Util-linux login may leak sensitive data
The remote host is affected by the vulnerability described in GLSA-200404-06 Util-linux login may leak sensitive data In some situations the login program could leak sensitive data due to an incorrect usage of a reallocated pointer. NOTE: Only users who have PAM support disabled on their systems...
isec-0016-procleaks.txt
Synopsis: Linux kernel file offset pointer handling Product: Linux kernel Version: 2.4 up to to and including 2.4.26, 2.6 up to to and including 2.6.7 Vendor: http://www.kernel.org/ URL: http://isec.pl/vulnerabilities/isec-0016-procleaks.txt CVE: CAN-2004-0415 Author: Paul Starzetz Date: Aug 04,...
Linksys BEFSR41 DHCP vulnerability server leaks network data
On May 2nd 2004 I sent an email detailed below to Linksys concerning this vulnerability. Linksys has posted the vulnerability and a fix for the Revision 3 router since then here:...
[SECURITY] [DSA 471-1] New interchange packages fix information leak
-------------------------------------------------------------------------- Debian Security Advisory DSA 471-1 [email protected] http://www.debian.org/security/ Martin Schulze April 2nd, 2004 http://www.debian.org/security/faq -...
CVE-2004-0080
The login program in util-linux 2.11 and earlier uses a pointer after it has been freed and reallocated, which could cause login to leak sensitive data...
CVE-2003-0984: Undefined Security Weakness
Real time clock RTC routines in Linux kernel 2.4.23 and earlier do not properly initialize their structures, which could leak kernel data to user space...
Moderate: Red Hat Security Advisory: postgresql security update
Updated PostgreSQL packages that correct a buffer overflow in the toascii routines are now available. PostgreSQL is an advanced Object-Relational database management system DBMS. Two bugs that can lead to buffer overflows have been found in the PostgreSQL abstract data type to ASCII conversion...
Sun Management Center 3.03.5 - Error Message Information Disclosure
Sun Management Center 3.03.5 - Error Message Information Disclosure source: https://www.securityfocus.com/bid/8873/info A problem in the handling of error messages has been identified in Sun Management Center. Because of this, an attacker may be able to gain sensitive information about vulnerable...
Microsoft Security Bulletin MS03-034: Flaw in NetBIOS Could Lead to Information Disclosure (Q824105)
-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Flaw in NetBIOS Could Lead to Information Disclosure 824105 Date: 03 September 2003 Software: - Microsoft Windows NT 4.0 Server - Microsoft Windows NT 4.0, Terminal Server Edition -...
Authentication data leak in Congueror
Referer: field may contain URL with authentication data...
Linux ICMP information leak
Because of invalid size calculation for SMTP packet with error code, it contains data from memory...
[FTP Voyager] File List Buffer Overflow Vulnerability
----------------------------------------------------------------------- SUMMARY : FTP Voyager File List Buffer Overflow Vulnerability PRODUCT : FTP Voyager VERSIONS : 9.1.0.3 10.0.0.0 VENDOR : Rhino Software http://www.rhinosoft.com/ SEVERITY : Critical. Code Execution. DISCOVERED BY : nesumin...
CVE-2002-0120
Apple Palm Desktop 4.0b76 and 4.0b77 are affected by CVE-2002-0120: during a hotsync, world-readable backup files/folders can be created, allowing a local user to access sensitive information. The underlying cause is not detailed in the provided documents beyond the behavior. Exploitation status ...
Nokia SGSN DX200 - Remote SNMP Information Disclosure
Nokia SGSN DX200 - Remote SNMP Information Disclosure source: https://www.securityfocus.com/bid/7081/info It has been reported that some models of the SGSN made by Nokia do not properly handle remote requests for information. Vulnerable devices may disclose sensitive information which could enabl...
fws160.txt
Multible vulnerabilities found in Forum Web Server v1.60 http://www.minihttpserver.net Discovered by Dennis Rand www.Infowarfare.dk ------------------------------------------------------------------------ SUMMARY WebForums Server allows you to setup a bulletin board and photo/file xchange web...
FreeBSD-SA-02:39.libkvm
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:39.libkvm Security Advisory The FreeBSD Project Topic: Applications using libkvm may leak sensitive descriptors Category: core Module: libkvm Announced: 2002-09-16...
CVE-2002-0770
Quake 2 Q2 server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory listings, and execute Q2 server admin commands via a client that does not expand "$" macros, which causes the server to expand the macros and leak the information, as demonstrated...
CVE-2002-0798: Undefined Security Weakness
Vulnerability in swinstall for HP-UX 11.00 and 11.11 allows local users to view obtain data views for files that cannot be directly read by the user, which reportedly can be used to cause a denial of service...