6726 matches found
CVE-2004-0813
Unknown vulnerability in the SGIO functionality in ide-cd allows local users to bypass read-only access and perform unauthorized write and erase operations...
RHEL 3 : kernel (RHSA-2004:689)
Updated kernel packages that fix several security issues in Red Hat Enterprise Linux 3 are now available. The Linux kernel handles the basic functions of the operating system. This advisory includes fixes for several security issues : Petr Vandrovec discovered a flaw in the 32bit emulation code...
CVE-2004-1148
phpMyAdmin before 2.6.1, when configured with UploadDir functionality, allows remote attackers to read arbitrary files via the sqllocalfile parameter...
CVE-2004-1073
The openexec function in the execve functionality exec.c in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable ELF binaries by using the interpreter PTINTERP functionality...
Nucleus CMS Multiple Vulnerabilities
Binary data 2423.prm...
CVE-2004-0784
The smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of the tar file that is dragged to the smiley selector...
Microsoft Security Bulletin MS04-038 Cumulative Security Update for Internet Explorer (834707)
Microsoft Security Bulletin MS04-038 Cumulative Security Update for Internet Explorer 834707 Issued: October 12, 2004 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Critical...
ASN.1 compiler multiple bugs
No description provided...
[SECURITY] [DSA 458-3] New python2.2 packages really fix buffer overflow and restore functionality
-------------------------------------------------------------------------- Debian Security Advisory DSA 458-3 [email protected] http://www.debian.org/security/ Martin Schulze October 10th, 2004 http://www.debian.org/security/faq -...
[SA12498] Linux Kernel ide-cd SG_IO Functionality Permission Bypass Vulnerability
TITLE: Linux Kernel ide-cd SGIO Functionality Permission Bypass Vulnerability SECUNIA ADVISORY ID: SA12498 VERIFY ADVISORY: http://secunia.com/advisories/12498/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: Local system OPERATING SYSTEM: Linux Kernel 2.6.x http://secunia.com/product/2719...
os-x/PPC simple write() 75 bytes
Exploit for os-x/ppc platform in category shellcode ================================ os-x/PPC simple write 75 bytes ================================ / PPC OSX/Darwin Shellcode by B-r00t. 2003. Does write; exit; See ASM below. 75 Bytes. / char shellcode = "\x7c\x63\x1a\x79\x40\x82\xff\xfd"...
CGI bugs
No description provided...
GLSA-200409-17 : SUS: Local root vulnerability
The remote host is affected by the vulnerability described in GLSA-200409-17 SUS: Local root vulnerability Leon Juranic found a bug in the logging functionality of SUS that can lead to local privilege escalation. A format string vulnerability exists in the log function due to an incorrect call to...
SUS: Local root vulnerability
Background SUS is a utility that allows regular users to be able to execute certain commands as root. Description Leon Juranic found a bug in the logging functionality of SUS that can lead to local privilege escalation. A format string vulnerability exists in the log function due to an incorrect...
[Full-Disclosure] Corsaire Security Advisory - Multiple vendor MIME separator issue
-- Corsaire Security Advisory -- Title: Multiple vendor MIME separator issue Date: 04.08.03 Application: various Environment: various Author: Martin O'Neal [email protected] Audience: General distribution Reference: c030804-006 -- Scope -- The aim of this document is to clearly define a...
CVE-2002-1265
The Sun RPC functionality in multiple libc implementations does not provide a time-out mechanism when reading data from TCP connections, which allows remote attackers to cause a denial of service hang...
Icecast list.cgi User-Agent XSS
The remote server runs a version of Icecast that is as old or older than version 1.3.12. This version is affected by a cross-site scripting vulnerability in the status display functionality. This issue is due to a failure of the application to properly sanitize user-supplied input. As a result of...
CVE-2004-0819
The bridge functionality in OpenBSD 3.4 and 3.5, when running a gateway configured as a bridging firewall with the link2 option for IPSec enabled, allows remote attackers to cause a denial of service crash via an ICMP echo ping packet...