GLSA-200512-16 : OpenMotif, AMD64 x86 emulation X libraries: Buffer overflows in libUil library

The remote host is affected by the vulnerability described in GLSA-200512-16 OpenMotif, AMD64 x86 emulation X libraries: Buffer overflows in libUil library xfocus discovered two potential buffer overflows in the libUil library, in the diagissuediagnostic and opensourcefile functions. Impact :...

OpenMotif, AMD64 x86 emulation X libraries: Buffer overflows in libUil library

Background OpenMotif provides a free version of the Motif toolkit for open source applications. The OpenMotif libraries are included in the AMD64 x86 emulation X libraries, which emulate the x86 32-bit architecture on the AMD64 64-bit architecture. Description xfocus discovered two potential buff...

CVE-2005-4079

CVE-2005-4079 affects phpMyAdmin 2.7.0 rc1 via register_globals emulation: an attacker can modify import_blacklist in grab_globals.php to overwrite other variables, potentially leading to remote code execution or file inclusion in vulnerable setups. Several advisories note this as part of multipl...

phpmyadmin -- register_globals emulation "import_blacklist" manipulation

Secunia reports: Stefan Esser has reported a vulnerability in phpMyAdmin, which can be exploited by malicious people to conduct cross-site scripting attacks, disclose sensitive information, and compromise a vulnerable system. The vulnerability is caused due to an error in the registerglobals...

phpSysInfo -- "register_globals" emulation layer overwrite vulnerability

A Secunia Advisory reports: Christopher Kunz has reported a vulnerability in phpSysInfo, which can be exploited by malicious people to manipulate certain information. The vulnerability is caused due to an error in the "registerglobals" emulation layer where certain arrays used by the system can b...

DEBIAN-CVE-2005-3300

The registerglobals emulation layer in grabglobals.php for phpMyAdmin before 2.6.4-pl3 does not perform safety checks on values in the FILES array for uploaded files, which allows remote attackers to include arbitrary files by using direct requests to library scripts that do not use...

AMD64 x86 emulation base libraries: Buffer overflow

Background The x86 emulation base libraries for AMD64 emulate the x86 32-bit architecture on the AMD64 64-bit architecture. Description Earlier versions of emul-linux-x86-baselibs contain a vulnerable version of zlib, which may lead to a buffer overflow. Impact By creating a specially crafted...

CVE-2005-0969

Heap-based buffer overflow in the syscall emulation functionality in Mac OS X before 10.3.9 allows local users to cause a denial of service kernel panic and possibly execute arbitrary code via crafted parameters...

CVE-2005-0868

CVE-2005-0868 affects AS/400 Telnet 5250 terminal emulation clients, including IBM client access, Bosanova, PowerTerm, Mochasoft (and possibly others). The root issue allows a malicious AS/400 server to execute arbitrary commands by sending a STRPCO (Start PC Organizer) command followed by STRPCC...

CVE-2005-0868

AS/400 Telnet 5250 terminal emulation clients, as implemented by 1 IBM client access, 2 Bosanova, 3 PowerTerm, 4 Mochasoft, and possibly other emulations, allows malicious AS/400 servers to execute arbitrary commands via a STRPCO Start PC Organizer command followed by STRPCCMD Start PC command, a...

CVE-2004-1144

Summary: CVE-2004-1144: A local privilege escalation in the Linux 2.4 AMD64 32‑bit emulation code was identified (Petr Vandrovec). The issue affects the AMD64 path in the 2.4 kernel, allowing a local attacker to gain privileges. Affected context (from connected sources): Red Hat and SUSE advisori...

security flaw

Unknown vulnerability in the 32bit emulation code in Linux 2.4 on AMD64 systems allows local users to gain privileges...

CVE-2004-0001

The CVE-2004-0001 issue is described across multiple advisories as a local privilege escalation in the AMD64 Linux kernel ptrace emulation, due to incorrect eflags handling in 32-bit ptrace. Affected: AMD64 Linux kernels; root cause: eflags processing in the ptrace emulation path; impact: local u...

CVE-2002-1319

The Linux kernel 2.4.20 and earlier, and 2.5.x, when running on x86 systems, allows local users to cause a denial of service hang via the emulation mode, which does not properly clear TF and NT EFLAGs...

security flaw

Unknown vulnerability in the eflags checking in the 32-bit ptrace emulation for the Linux kernel on AMD64 systems allows local users to gain privileges...

CVE-2003-0955

OpenBSD kernel 3.3 and 3.4 allows local users to cause a denial of service kernel panic and possibly execute arbitrary code in 3.4 via a program with an invalid header that is not properly handled by 1 ibcs2exec.c in the iBCS2 emulation compatibcs2 or 2 execelf.c, which leads to a stack-based...

CVE-2002-1319

The Linux kernel 2.4.20 and earlier, and 2.5.x, when running on x86 systems, allows local users to cause a denial of service hang via the emulation mode, which does not properly clear TF and NT EFLAGs...

xtelw Detection

The remote host is running xteld, a Minitel emulator, in HyperTerminal mode. This service allows users to connect to the Teletel network. Some of the servers are expensive. Note that by default, xteld forbids access to the most expensive services. C Tenable Network Security, Inc...

CVE-1999-1396

The CVE-1999-1396 entry concerns SunOS 4.1–4.1.2 on SPARC where the integer multiplication emulation code is vulnerable. Local users could gain root privileges or trigger a denial of service (crash) due to the described flaw. Public references exist (e.g., CERT advisory CA-1992-15, SecurityFocus ...

Атака через web-формы (HTML Form Protocol Attack)

Содержимое формы может быть передано в любой порт эмулируя работу какого-либо протокола...