CVE-2003-0944

SAP DB web-tools : The vulnerability set includes a buffer overflow in the default waecho service of SAP DB’s web-tools, and related issues in Web Agent Administration, Web SQL, and Web DBM. The root cause is improper handling of long requestURIs and related inputs, enabling remote code execution...

CVE-2003-0942: Undefined Security Weakness

Buffer overflow in Web Agent Administration service in web-tools for SAP DB before 7.4.03.30 allows remote attackers to execute arbitrary code via a long Name parameter to waadmin.wa...

CVE-2003-0940: Undefined Security Weakness

Directory traversal vulnerability in sqlfopenc for web-tools in SAP DB before 7.4.03.30 allows remote attackers to read arbitrary files via .. dot dot sequences in a URL...

CVE-2003-0941: Undefined Security Weakness

web-tools in SAP DB before 7.4.03.30 allows remote attackers to access the Web Agent Administration pages and modify configuration via a direct request to waadmin.wa...

CVE-2003-0945: Undefined Security Weakness

The Web Database Manager in web-tools for SAP DB before 7.4.03.30 generates predictable session IDs, which allows remote attackers to conduct unauthorized activities...

CVE-2003-0943: Undefined Security Weakness

web-tools in SAP DB before 7.4.03.30 installs several services that are enabled by default, which could allow remote attackers to obtain potentially sensitive information or redirect attacks against internal databases via 1 waecho, 2 Web SQL Interface websql, or 3 Web Database Manager webdbm...

CVE-2003-0944: Undefined Security Weakness

Buffer overflow in the WAECHO default service in web-tools in SAP DB before 7.4.03.30 allows remote attackers to execute arbitrary code via a URL with a long requestURI...

SAP DB priv. escalation/remote code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: SAP DB priv. escalation/remote code execution Release Date: 11/17/2003 Application: SAP DB 7.4.03.27 23-June-2003 and before Platform: Microsoft Windows NT4/2000/XP 1 and 2 Linux IA32 2 SUN...

SAP DB web-tools multiple issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: SAP DB web-tools multiple issues Release Date: 11/17/2003 Application: SAP DB 7.4.03.30 Platform: Linux IA32 Microsoft Windows NT4/2000/XP SUN Solaris HPUX Compaq True64 Severity: Remote fi...

CVE-2003-0620

Multiple buffer overflows in man-db 2.4.1 and earlier, when installed setuid, allow local users to gain privileges via 1 MANDATORYMANPATH, MANPATHMAP, and MANDBMAP arguments to addtodirlist in manp.c, 2 a long pathname to ultsrc in ultsrc.c, 3 a long .so argument to testforinclude in ultsrc.c, 4 ...

CVE-2003-0645

man-db 2.3.12 and 2.3.18 to 2.4.1 uses certain user-controlled DEFINE directives from the /.manpath file, even when running setuid, which could allow local users to gain privileges...

CVE-2003-0645

man-db 2.3.12 and 2.3.18 to 2.4.1 uses certain user-controlled DEFINE directives from the /.manpath file, even when running setuid, which could allow local users to gain privileges...

CVE-2003-0620

Multiple buffer overflows in man-db 2.4.1 and earlier, when installed setuid, allow local users to gain privileges via 1 MANDATORYMANPATH, MANPATHMAP, and MANDBMAP arguments to addtodirlist in manp.c, 2 a long pathname to ultsrc in ultsrc.c, 3 a long .so argument to testforinclude in ultsrc.c, 4 ...

[SECURITY] [DSA-364-3] New man-db packages fix segmentation fault

-------------------------------------------------------------------------- Debian Security Advisory DSA 364-3 [email protected] http://www.debian.org/security/ Matt Zimmerman August 18th, 2003 http://www.debian.org/security/faq -...

CVE-2003-0645

man-db 2.3.12 and 2.3.18 to 2.4.1 uses certain user-controlled DEFINE directives from the /.manpath file, even when running setuid, which could allow local users to gain privileges...

CVE-2003-0645

CVE-2003-0645 affects man-db 2.3.12 and 2.3.18 up to 2.4.1, where user-controlled DEFINE directives in ~/.manpath are honored even when running setuid, allowing local escalation to the 'man' user. The vulnerability is described across multiple sources (Debian SUSE OSV/openvas/NVD) with local-priv...

CVE-2003-0645

man-db 2.3.12 and 2.3.18 to 2.4.1 uses certain user-controlled DEFINE directives from the /.manpath file, even when running setuid, which could allow local users to gain privileges...

CVE-2003-0645: Undefined Security Weakness

man-db 2.3.12 and 2.3.18 to 2.4.1 uses certain user-controlled DEFINE directives from the /.manpath file, even when running setuid, which could allow local users to gain privileges...

[SECURITY] [DSA-364-2] New man-db packages fix problem with DSA-364-1

-------------------------------------------------------------------------- Debian Security Advisory DSA 364-2 [email protected] http://www.debian.org/security/ Matt Zimmerman August 8th, 2003 http://www.debian.org/security/faq -...

man-db 2.4.1 - open_cat_stream() Local uidman

man-db 2.4.1 - opencatstream Local uidman !/bin/bash xmandb.sh: shell command file. man-dbv2.4.1-: local uid=man exploit. by: vade79/v9 v9 fakehalo deadpig org fakehalo opencatstream privileged call exploit. i've been conversing with the new man-db maintainer, and after the initial post sent to...