Lucene search
+L

141 matches found

seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•30 views

Halloween Linux 4.0,RedHat Linux 6.1/6.2 imwheel Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/1060/info A vulnerability exists in the 'imwheel' package for Linux. This package is known to be vulnerable to a buffer overrun in its handling of the HOME environment variable. By supplying a sufficiently long string...

7.1AI score
SaveExploits0
Mend
Mend
•added 2014/01/26 1:00 a.m.•2 views

CVE-2013-6891

lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf...

2.9CVSS0.00446EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/01/26 12:00 a.m.•5 views

CVE-2013-6891: Improper Link Resolution Before File Access

lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf...

1.2CVSS5.8AI score0.00446EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2014/01/21 12:00 a.m.•2 views

PT-2014-3215

Name of the Vulnerable Software and Affected Versions CUPS versions prior to 1.7.1 Description The issue allows local users to read portions of arbitrary files through a modified HOME environment variable and a symlink attack involving the .cups/client.conf file. This occurs when the software is...

1.2CVSS0.00446EPSS
SaveExploits1References19
Mend
Mend
•added 2013/09/25 10:00 a.m.•2 views

CVE-2013-1060

A certain Ubuntu build procedure for perf, as distributed in the Linux kernel packages in Ubuntu 10.04 LTS, 12.04 LTS, 12.10, 13.04, and 13.10, sets the HOME environment variable to the buildd directory and consequently reads the system configuration file from the buildd directory, which allows...

7.5CVSS0.00441EPSS
SaveExploits0References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/09/25 12:00 a.m.•4 views

CVE-2013-1060: Undefined Security Weakness

A certain Ubuntu build procedure for perf, as distributed in the Linux kernel packages in Ubuntu 10.04 LTS, 12.04 LTS, 12.10, 13.04, and 13.10, sets the HOME environment variable to the buildd directory and consequently reads the system configuration file from the buildd directory, which allows...

6.9CVSS5.8AI score0.00441EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2013/07/30 12:00 a.m.•2 views

PT-2013-2848

Name of the Vulnerable Software and Affected Versions Ubuntu versions 10.04 LTS, 12.04 LTS, 12.10, 13.04, and 13.10 Description The issue concerns a Ubuntu build procedure for perf, distributed in Linux kernel packages. It sets the HOME environment variable to the buildd directory, causing the...

6.9CVSS0.00441EPSS
SaveExploits0References27
OpenVAS
OpenVAS
•added 2009/02/20 12:00 a.m.•28 views

Wireshark Multiple Vulnerabilities Feb-09 (Windows)

This host is installed with Wireshark and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkmultvulnfeb09win.nasl 4970 2017-01-09 15:00:59Z teissa $ Wireshark Multiple Vulnerabilities Feb-09 Windows Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbone Network...

5CVSS5.9AI score0.02625EPSS
SaveExploits2References3
OSV
OSV
•added 2009/02/16 8:30 p.m.•8 views

DEBIAN-CVE-2009-0601

Format string vulnerability in Wireshark 0.99.8 through 1.0.5 on non-Windows platforms allows local users to cause a denial of service application crash via format string specifiers in the HOME environment variable...

2.1CVSS6.4AI score0.00371EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2009/02/16 8:00 p.m.•42 views

CVE-2009-0601

Format string vulnerability in Wireshark 0.99.8 through 1.0.5 on non-Windows platforms allows local users to cause a denial of service application crash via format string specifiers in the HOME environment variable...

5.8AI score0.00371EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/02/16 12:00 a.m.•3 views

CVE-2009-0601: Use of Externally-Controlled Format String

Format string vulnerability in Wireshark 0.99.8 through 1.0.5 on non-Windows platforms allows local users to cause a denial of service application crash via format string specifiers in the HOME environment variable...

2.1CVSS5.8AI score0.00371EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2008/04/27 9:05 p.m.•38 views

CVE-2008-1994

Multiple stack-based buffer overflows in a acon.c, b menu.c, and c child.c in Acon 1.0.5-5 through 1.0.5-7 allow local users to execute arbitrary code via 1 a long HOME environment variable or 2 a large number of terminal columns...

7.2CVSS6.2AI score0.00463EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/04/27 12:00 a.m.•7 views

CVE-2008-1994: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in a acon.c, b menu.c, and c child.c in Acon 1.0.5-5 through 1.0.5-7 allow local users to execute arbitrary code via 1 a long HOME environment variable or 2 a large number of terminal columns...

7.2CVSS6.7AI score0.00463EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2007/10/24 11:00 p.m.•48 views

CVE-2003-1473

Buffer overflow in LTris 1.0.1 of FreeBSD Ports Collection 2003-02-25 and earlier allows local users to execute arbitrary code with gid "games" permission via a long HOME environment variable...

7.4AI score0.00925EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/10/24 12:00 a.m.•12 views

CVE-2003-1473: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in LTris 1.0.1 of FreeBSD Ports Collection 2003-02-25 and earlier allows local users to execute arbitrary code with gid "games" permission via a long HOME environment variable...

4.6CVSS6.5AI score0.00925EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2007/10/23 1:00 a.m.•39 views

CVE-2003-1446

Buffer overflow in the saveintofile function in save.c for Rogue 5.2-2 allows local users to execute arbitrary code with games group privileges by setting a long HOME environment variable and invoking the save game function with a tilde...

7.5AI score0.00527EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/10/23 12:00 a.m.•7 views

CVE-2003-1446: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the saveintofile function in save.c for Rogue 5.2-2 allows local users to execute arbitrary code with games group privileges by setting a long HOME environment variable and invoking the save game function with a tilde...

4.9CVSS6.5AI score0.00527EPSS
SaveExploits1References2
Prion
Prion
•added 2007/07/03 1:30 a.m.•21 views

Stack overflow

Multiple stack-based buffer overflows in 1 CCEpinyin.c and 2 xlpinyin.c in ImmModules/cce/ in unicon-imc2 3.0.4, as used by zhcon and other applications, allow local users to gain privileges via a long HOME environment variable...

6.8CVSS7.1AI score0.00343EPSS
SaveExploits1References7Affected Software1
OSV
OSV
•added 2007/07/03 1:30 a.m.•19 views

DEBIAN-CVE-2007-2835

Multiple stack-based buffer overflows in 1 CCEpinyin.c and 2 xlpinyin.c in ImmModules/cce/ in unicon-imc2 3.0.4, as used by zhcon and other applications, allow local users to gain privileges via a long HOME environment variable...

6.8CVSS7.3AI score0.00343EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2007/07/03 1:30 a.m.•27 views

CVE-2007-2835

Multiple stack-based buffer overflows in 1 CCEpinyin.c and 2 xlpinyin.c in ImmModules/cce/ in unicon-imc2 3.0.4, as used by zhcon and other applications, allow local users to gain privileges via a long HOME environment variable...

6.8CVSS6.1AI score0.00343EPSS
SaveExploits1References1
Rows per page
Query Builder