CORE-2003-0304-03: Vulnerability in GNOME's Eye of Gnome

Core Security Technologies Advisory http://www.coresecurity.com Vulnerability in GNOME's Eye of Gnome Date Published: 2003-03-28 Last Update: 2003-03-27 Advisory ID: CORE-2003-0304-03 Bugtraq ID: 7121 CVE Name: CAN-2003-0165 Title: GNOME's Eye Of Gnome incorrect file name handling Class: Input...

CVE-2003-0080

The iptables ruleset in Gnome-lokkit in Red Hat Linux 8.0 does not include any rules in the FORWARD chain, which could allow attackers to bypass intended access restrictions if packet forwarding is enabled...

CVE-2003-0080

The vulnerability is in Red Hat Linux 8.0’s Gnome-lokkit, where the iptables ruleset leaves the FORWARD chain without any rules. This permits bypassing intended access restrictions if packet forwarding is enabled, by an attacker who can trigger forwarding. The affected component is the iptables r...

DEBIAN-CVE-2003-0070

VTE, as used by default in gnome-terminal terminal emulator 2.2 and as an option in gnome-terminal 2.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containin...

CVE-2003-0070

VTE, as used by default in gnome-terminal terminal emulator 2.2 and as an option in gnome-terminal 2.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containin...

CVE-2003-0070

VTE, as used by default in gnome-terminal terminal emulator 2.2 and as an option in gnome-terminal 2.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containin...

gnome-terminal allows arbitrary command execution when viewing files containing crafted escape sequences

Overview gnome-terminal may allow a remote attacker to execute arbitrary commands via crafted escape sequences. Description gnome-terminal affords users the ability to utilize an escape sequence to "export" the title of the current window title directly to the shell command line. By viewing a...

[SECURITY] [DSA 179-1] New gnome-gv packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 179-1 [email protected] http://www.debian.org/security/ Martin Schulze October 18th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 179-1] New gnome-gv packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 179-1 [email protected] http://www.debian.org/security/ Martin Schulze October 18th, 2002 http://www.debian.org/security/faq -...

DSA-179 gnome-gv - buffer overflow

Bulletin has no description...

CVE-2002-0838

Buffer overflow in 1 gv 3.5.8 and earlier, 2 gvv 1.0.2 and earlier, 3 ggv 1.99.90 and earlier, 4 gnome-gv, and 5 kghostview in kdegraphics 2.2.2 and earlier, allows attackers to execute arbitrary code via a malformed a PDF or b PostScript file, which is processed by an unsafe call to sscanf...

CVE-2002-0838

Buffer overflow in 1 gv 3.5.8 and earlier, 2 gvv 1.0.2 and earlier, 3 ggv 1.99.90 and earlier, 4 gnome-gv, and 5 kghostview in kdegraphics 2.2.2 and earlier, allows attackers to execute arbitrary code via a malformed a PDF or b PostScript file, which is processed by an unsafe call to sscanf...

CVE-2002-0838

CVE-2002-0838 concerns a buffer overflow in affected XDG/Preview components: gv 3.5.8 and earlier, gvv 1.0.2 and earlier, ggv 1.99.90 and earlier, gnome-gv, and kdegraphics 2.2.2 and earlier. The vulnerability arises when processing malformed PDF or PostScript files, where an unsafe call to sscan...

Mandrake 789 RedHat 6.x7 Bonobo EFSTool - Commandline Argument Buffer Overflow (1)

Mandrake 789 RedHat 6.x7 Bonobo EFSTool - Commandline Argument Buffer Overflow 1 source: https://www.securityfocus.com/bid/5125/info Bonobo is a set of tools and CORBA interfaces included as part of the Gnome infrastructure. It is designed for use on the Linux and Unix operating systems. A boundr...

Mandrake 7/8/9 / RedHat 6.x/7 Bonobo EFSTool - Commandline Argument Buffer Overflow (2)

source: https://www.securityfocus.com/bid/5125/info Bonobo is a set of tools and CORBA interfaces included as part of the Gnome infrastructure. It is designed for use on the Linux and Unix operating systems. A boundry condition error has been discovered in the efstool program. Due to improper...

PT-2002-1073 · Red Hat +2 · Red Hat +2

Name of the Vulnerable Software and Affected Versions: OpenSSH versions 2.0 through 3.0.2 openssh-askpass-3.1p1 openssh-askpass-gnome-3.1p1 openssh-clients-3.1p1 openssh-server-3.1p1 openssh-3.1p1 Description: The issue is related to an off-by-one error in the channel code of OpenSSH, allowing...

CVE-2001-0927

The CVE-2001-0927 issue affects GNOME libgtop_daemon (libgtop) and was present in libgtop versions 1.0.12 and earlier. The vulnerability is a format-string defect in the libgtop_daemon’s permitted function, allowing remote attackers to execute arbitrary code via arguments containing format specif...

CVE-2001-0928

Buffer overflow in the permitted function of GNOME gtop daemon libgtopdaemon in libgtop 1.0.13 and earlier may allow remote attackers to execute arbitrary code via long authentication data...

CVE-2001-0928

CVE-2001-0928 describes a buffer overflow in the GNOME gtop daemon libgtop (libgtop_daemon) that could allow a remote attacker to execute arbitrary code with the daemon’s privileges. Affected: libgtop up to version 1.0.13 (and related libgtop-daemon components). Root cause: improper handling of a...

CVE-2001-0927

Format string vulnerability in the permitted function of GNOME libgtopdaemon in libgtop 1.0.12 and earlier allows remote attackers to execute arbitrary code via an argument that contains format specifiers that are passed into the 1 syslogmessage and 2 syslogiomessage functions...