2811 matches found
DEBIAN-CVE-2006-1550
Multiple buffer overflows in the xfig import code xfig-import.c in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid 1 color index, 2 number of points, or 3 depth...
CVE-2006-1550
Multiple buffer overflows in the xfig import code xfig-import.c in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid 1 color index, 2 number of points, or 3 depth...
CVE-2005-1952
CVE-2005-1952 affects Pico Server (pServ) 3.3. A directory traversal flaw allows remote attackers to read arbitrary files and, via a crafted URL containing /./ before each .. sequence, potentially execute arbitrary commands due to an incorrect directory depth count. Exploitation details are not p...
CVE-2003-0444: Undefined Security Weakness
Heap-based buffer overflow in GTKSee 0.5 and 0.5.1 allows remote attackers to execute arbitrary code via a PNG image of certain color depths...
Sendmail 8.11.x (Linux/i386) - Local Privilege Escalation
/ sendmail 8.11.x exploit i386-Linux by [email protected] sd@ircnet This code exploits well-known local-root bug in sendmail 8.11.x, 8.12.x may be vulnerable too, but I didn't test it. It gives instant root shell with +s sendmail 8.11.x, x 6 We're using objdump, gdb & grep in order to obtain VECT, so make...
Sendmail 8.11.x Exploit (i386-Linux)
Exploit for linux platform in category local exploits ==================================== Sendmail 8.11.x Exploit i386-Linux ==================================== / sendmail 8.11.x exploit i386-Linux by email protected email protected This code exploits well-known local-root bug in sendmail 8.11....
Атаки через tmpwatch
При удалении каталога tmpwatch запускает отдельный процесс на каждый уровень вложенности. Это позволяет вызвать остановку системы, создав временную директорию с большим уровенм вложенности. Кроме того, при вызове внешнего приложения не проверяются shell-символы в имени файла...
nt4+sp4.filename.length.txt
Bug in WinNT 4.0 SP4 Alvaro Gilabert [email protected] Mon, 19 Apr 1999 15:15:36 +-200 Hi, I supose it is a bug and I will explain why do I think so You can exceed the limit in the number of chars allowed in a filename. WinNT does allow it. You can move a folder to a deeper one exceeding it. But,...
MS07-047: Vulnerability in Windows Media Player could allow remote code execution
None None...
