Lucene search
+L

5586 matches found

UbuntuCve
UbuntuCve
added 2005/10/05 9:2 p.m.23 views

CVE-2005-0023

gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY environment variable. NOTE: the severity of this issue has been disputed...

2.1CVSS5.8AI score0.00894EPSS
Exploits1References1
NVD
NVD
added 2005/10/05 9:2 p.m.16 views

CVE-2005-0023

gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY environment variable. NOTE: the severity of this issue has been disputed...

2.1CVSS6.2AI score0.00894EPSS
Exploits1References7
OSV
OSV
added 2005/10/05 9:2 p.m.7 views

DEBIAN-CVE-2005-0023

gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY environment variable. NOTE: the severity of this issue has been disputed...

2.1CVSS6.5AI score0.00894EPSS
Exploits1References1
OSV
OSV
added 2005/10/05 9:2 p.m.12 views

CVE-2005-0023

gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY environment variable. NOTE: the severity of this issue has been disputed...

6.4AI score
Exploits0References7
Cvelist
Cvelist
added 2005/10/05 4:0 a.m.24 views

CVE-2005-0023

gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY environment variable. NOTE: the severity of this issue has been disputed...

6.2AI score0.00894EPSS
Exploits1References7
CVE
CVE
added 2005/10/05 4:0 a.m.58 views

CVE-2005-0023

CVE-2005-0023 affects gnome-pty-helper within GNOME libzvt2 and libvte4. The root cause is a vulnerability where a modified DISPLAY environment variable allows local users to spoof the logon hostname. Implications are limited to local access with partial confidentiality/availability impact as des...

2.1CVSS6.2AI score0.00894EPSS
Exploits1References7Affected Software2
Debian CVE
Debian CVE
added 2005/10/05 4:0 a.m.18 views

CVE-2005-0023

gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY environment variable. NOTE: the severity of this issue has been disputed...

2.1CVSS4.6AI score0.00894EPSS
Exploits1
securityvulns
securityvulns
added 2005/10/04 12:0 a.m.25 views

Gnome libzvt information spoofing

DISPLAY environment variable is used as a utmp hostname...

1.5AI score
Exploits0References1Affected Software1
exploitpack
exploitpack
added 2005/10/03 12:0 a.m.23 views

Gnome-PTY-Helper UTMP - Hostname Spoofing

Gnome-PTY-Helper UTMP - Hostname Spoofing // source: https://www.securityfocus.com/bid/15004/info 'gnome-pty-helper' is susceptible to a local UTMP hostname spoofing vulnerability. This issue is due to the failure of the application to properly validate user-supplied data prior to using it to...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2005/10/03 12:0 a.m.35 views

Gnome-PTY-Helper UTMP - Hostname Spoofing

// source: https://www.securityfocus.com/bid/15004/info 'gnome-pty-helper' is susceptible to a local UTMP hostname spoofing vulnerability. This issue is due to the failure of the application to properly validate user-supplied data prior to using it to update UTMP records. This vulnerability allow...

7.4AI score
Exploits0
Debian
Debian
added 2005/10/02 6:7 a.m.29 views

[SECURITY] [DSA 837-1] New Mozilla Firefox packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 837-1 [email protected] http://www.debian.org/security/ Martin Schulze October 2nd, 2005 http://www.debian.org/security/faq -...

7.5CVSS0.7AI score0.21112EPSS
Exploits2
RedHat Linux
RedHat Linux
added 2005/09/15 8:58 a.m.4 views

security flaw

Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages...

5CVSS5.8AI score0.02081EPSS
Exploits0References4
0day.today
0day.today
added 2005/09/09 12:0 a.m.25 views

Mozilla Products (Host:) Buffer Overflow Denial of Service String

Exploit for multiple platform in category dos / poc ================================================================= Mozilla Products Host: Buffer Overflow Denial of Service String ================================================================= -- 0day.today 2018-04-02...

7.1AI score
Exploits0
Exploit DB
Exploit DB
added 2005/09/09 12:0 a.m.39 views

Mozilla Products - 'Host:' Buffer Overflow (Denial of Service) (PoC) String

-- milw0rm.com 2005-09-09...

7.4AI score
Exploits0
FreeBSD
FreeBSD
added 2005/09/08 12:0 a.m.26 views

firefox & mozilla -- buffer overflow vulnerability

Tom Ferris reports: A buffer overflow vulnerability exists within Firefox version 1.0.6 and all other prior versions which allows for an attacker to remotely execute arbitrary code on an affected host. The problem seems to be when a hostname which has all dashes causes the NormalizeIDN call in...

7.5CVSS6.4AI score0.21112EPSS
Exploits2References4
CVE
CVE
added 2005/08/05 4:0 a.m.77 views

CVE-2002-2103

CVE-2002-2103 affects Apache before 1.3.24. When writing to the log file, Apache may record a spoofed hostname from reverse DNS for an IP address, even if a double-reverse lookup fails, allowing remote attackers to hide the original source of activities. The provided documents do not include expl...

5CVSS6.7AI score0.06057EPSS
Exploits0References3Affected Software1
seebug.org
seebug.org
added 2005/07/21 12:0 a.m.28 views

Intruder Client 1.00 Remote Command Execution & DoS Exploit

No description provided by source. !/usr/bin/perl Intruder Command Execution DOS Exploit -------------------------------------- Infam0us Gr0up - Securiti Research ? Version: libwww-perl-5.76 + Connecting to 127.0.0.1.. + Connected + Backup for files..DONE + Build malicious pages..DONE + Open CDRo...

7.1AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2005/07/13 12:0 a.m.26 views

FreeBSD : mozilla -- hostname spoofing bug (5360a659-131c-11d9-bc4a-000c41e2cdad)

When processing URIs that contain an unqualified host name-- specifically, a domain name of only one component-- Mozilla will perform matching against the first component of the domain name in SSL certificates. In other words, in some situations, a certificate issued to 'www.example.com' will be...

7.5CVSS5.3AI score0.01035EPSS
Exploits0References3
Cvelist
Cvelist
added 2005/06/28 4:0 a.m.21 views

CVE-2002-1962

Finjan Software SurfinGate 6.0 and 6.0 1 allows remote attackers to bypass URL access restrictions via a URL with an IP address instead of a hostname...

6.7AI score0.01872EPSS
Exploits0References4
Packet Storm
Packet Storm
added 2005/05/27 12:0 a.m.64 views

msmq_deleteobject_ms05_017.pm

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

7.4AI score0.73868EPSS
Exploits10
Rows per page
Query Builder