35 matches found
Description of the security update for SharePoint Server 2019: March 9, 2021 (KB4493230)
None None...
dip-caceres.es XSS vulnerability
Open Bug Bounty ID: OBB-238791 Description| Value ---|--- Affected Website:| dip-caceres.es Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
dip-san.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-238536 Description| Value ---|--- Affected Website:| dip-san.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Debian DLA-74-1 : ppp security update
This updates fixes a potential integer overflow in option parsing. A user in the group 'dip' could provide a specially crafted configuration file of more than 2G and generate an integer overflow. This may enable an attacker to overwrite the heap and thereby corrupt security-relevant variables. Se...
[SECURITY] [DLA 74-1] ppp security update
Package : ppp Version : 2.4.5-4+deb6u1 CVE ID : CVE-2014-3158 Debian Bug : http://bugs.debian.org/762789 This updates fixes a potential integer overflow in option parsing. A user in the group "dip" could provide a specially crafted configuration file of more than 2G and generate an integer...
Fred N. van Kempen dip 3.3.7 - Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/86/info A buffer overflow resides in 'dip-3.3.7o' and derived programs. This is a problem only on systems where 'dip' is installed setuid. The culpable code is an 'sprintf' in line 192 in 'main.c': sprintfbuf, %s/LCK..%s,...
Fred N. van Kempen dip 3.3.7 - Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/86/info A buffer overflow resides in 'dip-3.3.7o' and derived programs. This is a problem only on systems where 'dip' is installed setuid. The culpable code is an 'sprintf' in line 192 in 'main.c': sprintfbuf, %s/LCK..%s,...
hacking the mitsubishi GB-50A
Hi All, Well, it's been over 4 months since my plea for a security contact at Mitsubishi Electric to come forward. Since no one has, I thought I'd release a POC for hacking one. It's not exactly hard, the web controller uses a nasty set of Java applets to interact with itself. The shocking thing ...
CVE-1999-0137
CVE-1999-0137 describes a local privilege escalation in the dip program on many Linux systems, caused by a buffer overflow that allows a local user to gain root privileges. The core affected component is the dip utility; the underlying flaw is a buffer overflow vulnerability. Public reports consi...
Fred N. van Kempen dip 3.3.7 - Local Buffer Overflow (1)
// source: https://www.securityfocus.com/bid/86/info A buffer overflow resides in 'dip-3.3.7o' and derived programs. This is a problem only on systems where 'dip' is installed setuid. The culpable code is an 'sprintf' in line 192 in 'main.c': sprintfbuf, "%s/LCK..%s", PATHLOCKD, nam; -----...
Fred N. van Kempen dip 3.3.7 - Local Buffer Overflow (1)
Fred N. van Kempen dip 3.3.7 - Local Buffer Overflow 1 // source: https://www.securityfocus.com/bid/86/info A buffer overflow resides in 'dip-3.3.7o' and derived programs. This is a problem only on systems where 'dip' is installed setuid. The culpable code is an 'sprintf' in line 192 in 'main.c':...
Fred N. van Kempen dip 3.3.7 - Local Buffer Overflow (2)
// source: https://www.securityfocus.com/bid/86/info A buffer overflow resides in 'dip-3.3.7o' and derived programs. This is a problem only on systems where 'dip' is installed setuid. The culpable code is an 'sprintf' in line 192 in 'main.c': sprintfbuf, "%s/LCK..%s", PATHLOCKD, nam; / Linux x86...
Fred N. van Kempen dip 3.3.7 - Local Buffer Overflow (2)
Fred N. van Kempen dip 3.3.7 - Local Buffer Overflow 2 // source: https://www.securityfocus.com/bid/86/info A buffer overflow resides in 'dip-3.3.7o' and derived programs. This is a problem only on systems where 'dip' is installed setuid. The culpable code is an 'sprintf' in line 192 in 'main.c':...
CVE-1999-0137
The dip program on many Linux systems allows local users to gain root access via a buffer overflow...
PT-1996-1027 · Linux · Dip
Name of the Vulnerable Software and Affected Versions: dip affected versions not specified Description: The issue allows local users to gain root access via a buffer overflow in the dip program on many Linux systems. Recommendations: At the moment, there is no information about a newer version th...