8582 matches found
CVE-2002-0851
Removed by vendor...
CVE-2002-0916
This CVE (CVE-2002-0916) affects Squid 2.4.STABLE6 and earlier, in the Stellar-X msntauth authentication module. The issue is a format string vulnerability in the allowuser code that handles the user name, where untrusted input is used in a syslog call, enabling remote code execution. Documents c...
CVE-2002-0412
NTOP is affected by CVE-2002-0412 due to a format string vulnerability in the TraceEvent function prior to version 2.1. The issue allows remote attackers to execute arbitrary code by injecting format strings into syslog calls. Attack vectors include an HTTP GET request, or credentials supplied in...
CVE-2002-0716
Format string vulnerability in crontab for SCO OpenServer 5.0.5 and 5.0.6 allows local users to gain privileges via format string specifiers in the file name argument...
CVE-2002-0598
Foundstone FScan 1.12 with banner grabbing enabled is affected by a format string vulnerability in the server banner that can allow remote code execution. The issue is documented with a CVE listing and a CVSS v2 base score of 7.5 (HIGH); impact is partial on confidentiality, integrity, and availa...
CVE-2002-0851
The CVE-2002-0851 issue affects the ISDN4Linux (i4l) package, specifically the PPP daemon ipppd. A format string vulnerability in the device name command line argument is not properly sanitized in a syslog call, allowing a local user to exploit the flaw and gain root privileges. The connected doc...
DEBIAN-CVE-2003-0165
Format string vulnerability in Eye Of Gnome EOG allows attackers to execute arbitrary code via format string specifiers in a command line argument for the file to display...
CVE-2002-1051
The CVE-2002-1051 entry concerns NANOG traceroute (traceroute-nanog). A format string vulnerability exists in TrACESroute 6.0 GOLD that allows local users to execute arbitrary code via the -T (terminator) argument. The issue is tied to NANOG traceroute’s handling of input leading to potential cod...
CVE-2002-0573
Format string vulnerability in RPC wall daemon rpc.rwalld for Solaris 2.5.1 through 8 allows remote attackers to execute arbitrary code via format strings in a message that is not properly provided to the syslog function when the wall command cannot be executed...
CVE-2002-0817
Format string vulnerability in super for Linux allows local users to gain root privileges via a long command line argument...
CVE-2001-0891
Format string vulnerability in NQS daemon nqsdaemon in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX allows a local user to gain root privileges by using qsub to submit a batch job whose name contains formatting characters...
CVE-2003-0165
Format string vulnerability in Eye Of Gnome EOG allows attackers to execute arbitrary code via format string specifiers in a command line argument for the file to display...
CVE-2003-0165
Format string vulnerability in Eye Of Gnome EOG allows attackers to execute arbitrary code via format string specifiers in a command line argument for the file to display...
CVE-2003-0165
Eye of GNOME (EOG) 2.2.0 and earlier is affected by a format-string vulnerability in the command-line filename handling, allowing an attacker to execute arbitrary code with the user’s privileges. Exploitation would require a crafted filename passed to EOG (e.g., via mailcap/mail clients). Patches...
Format string bug in GNOME Eye of Gnome
Format stirng bug in filename parsing...
GNOME Eye Of Gnome 1.0.x1.1.x2.2 - Format String
GNOME Eye Of Gnome 1.0.x1.1.x2.2 - Format String source: https://www.securityfocus.com/bid/7121/info GNOME Eye of Gnome EOG image viewer is prone to a format string vulnerability. This condition may lead to execution of arbitrary code if malicious format specifiers are supplied to the program via...
Tanne netzio.c logger Function Remote Format String
The remote tanned server contains a format string vulnerability. An attacker may use this flaw to gain a shell on this host. C Tenable Network Security, Inc. Ref: From: "dong-h0un yoU" To: [email protected] Date: Tue, 07 Jan 2003 16:59:11 +0800 Subject: VulnWatch INetCop Security Advisory...
GNOME Eye Of Gnome 1.0.x/1.1.x/2.2 - Format String
source: https://www.securityfocus.com/bid/7121/info GNOME Eye of Gnome EOG image viewer is prone to a format string vulnerability. This condition may lead to execution of arbitrary code if malicious format specifiers are supplied to the program via the command line. As some utilities may be...
CVE-2002-1415
CVE-2002-1415 describes a format-string vulnerability in the SMTP service of WebEasyMail 3.4.2.2 and earlier. The flaw allows remote attackers to crash the service and potentially execute arbitrary code by sending crafted format strings in SMTP requests. The accessible impact via the NVD entry is...
CVE-2002-0690
McAfee Security ePolicy Orchestrator (ePO) 2.5.1 is affected by CVE-2002-0690, a format-string vulnerability in the HTTP GET request path that can allow remote code execution with SYSTEM privileges. The issue stems from processing of network requests (port 8081) and can enable arbitrary code exec...