40 matches found
CVE-2003-0723
Affected software: gkrellm/gkrellmd; part of the gkrellm monitor package, versions 2.1.x before 2.1.14. Root cause: a buffer overflow in gkrellmd, triggered while reading data from connected clients. Impact: may allow remote arbitrary code execution on the gkrellm server. Evidence: Mandrake MDKSA...
CVE-2003-0723
Buffer overflow in gkrellmd for gkrellm 2.1.x before 2.1.14 may allow remote attackers to execute arbitrary code...
EUVD-2003-0714
Buffer overflow in gkrellmd for gkrellm 2.1.x before 2.1.14 may allow remote attackers to execute arbitrary code...
CVE-2003-0723
Buffer overflow in gkrellmd for gkrellm 2.1.x before 2.1.14 may allow remote attackers to execute arbitrary code...
GKrellM Mailwatch Plugin 2.4.12.4.2 - From Header Remote Buffer Overflow
GKrellM Mailwatch Plugin 2.4.12.4.2 - From Header Remote Buffer Overflow // source: https://www.securityfocus.com/bid/8118/info It has been reported that the Mailwatch plugin for GKrellM is vulnerable to a remotely exploitable buffer overflow. This may permit the execution of arbitrary code with...
GKrellM Mailwatch Plugin 2.4.1/2.4.2 - From Header Remote Buffer Overflow
// source: https://www.securityfocus.com/bid/8118/info It has been reported that the Mailwatch plugin for GKrellM is vulnerable to a remotely exploitable buffer overflow. This may permit the execution of arbitrary code with the privileges of the GKrellM program. / Proof of Concept code for a buff...
Gkrellmd 2.1 - Remote Buffer Overflow (2)
Gkrellmd 2.1 - Remote Buffer Overflow 2 source: https://www.securityfocus.com/bid/8022/info GKrellMd has been reported prone to a remote buffer overflow vulnerability, arbitrary code execution is possible. The issue presents itself due to a lack of sufficient bounds checking performed on...
Gkrellmd 2.1 - Remote Buffer Overflow (1)
Gkrellmd 2.1 - Remote Buffer Overflow 1 source: https://www.securityfocus.com/bid/8022/info GKrellMd has been reported prone to a remote buffer overflow vulnerability, arbitrary code execution is possible. The issue presents itself due to a lack of sufficient bounds checking performed on...
Gkrellmd 2.1 - Remote Buffer Overflow (2)
source: https://www.securityfocus.com/bid/8022/info GKrellMd has been reported prone to a remote buffer overflow vulnerability, arbitrary code execution is possible. The issue presents itself due to a lack of sufficient bounds checking performed on network-based data. If data exceeding the maximu...
CVE-2003-0206
gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to cause a denial of service crash via 1 link or 2 title elements that contain multiple lines...
CVE-2003-0205
gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the ticker title of a URI...
CVE-2003-0206
CVE-2003-0206 affects gkrellm-newsticker: the plugin before version 0.3-3.1 can crash the gkrellm process when a feed’s link or title elements are split across multiple lines, due to an incomplete parser/missing quoting. This is a remote denial of service vector described by Debian’s DSA-294-1 an...
CVE-2003-0206
gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to cause a denial of service crash via 1 link or 2 title elements that contain multiple lines...
CVE-2003-0205
gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the ticker title of a URI...
CVE-2003-0205
CVE-2003-0205 affects the gkrellm-newsticker plugin for gkrellm: before 0.3-3.1, it allows remote attackers to execute arbitrary commands via shell metacharacters in the ticker URI title. The Debian advisory DSA-294-1 fixes this by upgrading to 0.3-3.1. The associated CAN-2003-0205/0206 issues de...
[SECURITY] [DSA 294-1] New gkrellm-newsticker packages fix DoS and arbitrary command execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 294-1 [email protected] http://www.debian.org/security/ Martin Schulze April 23rd, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA 294-1] New gkrellm-newsticker packages fix DoS and arbitrary command execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 294-1 [email protected] http://www.debian.org/security/ Martin Schulze April 23rd, 2003 http://www.debian.org/security/faq -...
gkrellm-newsticker unescaped shell characters problem
Shell characters problem on browser execution...
Security problems in gkrellm-newsticker
Brian Campbell discovered two security-related problems in gkrellm-newsticker, a plugin for the gkrellm system monitor program, which provides a news ticker from RDF feeds. The following IDs were assigned: CAN-2003-0205 gkrellm-newsticker can launch a web browser of the user's choice when the...
