7784 matches found
[SECURITY] [DSA 226-1] New xpdf-i packages fix arbitrary command execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 226-1 [email protected] http://www.debian.org/security/ Martin Schulze January 10th, 2003 http://www.debian.org/security/faq -...
xpdf-i - integer overflow
iDEFENSE discovered an integer overflow in the pdftops filter from the xpdf and xpdf-i packages that can be exploited to gain the privileges of the target user. This can lead to gaining unauthorized access to the 'lp' user if the pdftops program is part of the print filter. For the current stable...
Sun i-Runbook 2.5.2 - Directory and File Content Disclosure
Sun i-Runbook 2.5.2 - Directory and File Content Disclosure source: https://www.securityfocus.com/bid/5209/info Sun i-Runbook is a single point of technical and administration management for Sun production environments. i-Runbook provides a web interface. i-Runbook can be led to disclose the...
Sun i-Runbook 2.5.2 - Directory and File Content Disclosure
source: https://www.securityfocus.com/bid/5209/info Sun i-Runbook is a single point of technical and administration management for Sun production environments. i-Runbook provides a web interface. i-Runbook can be led to disclose the contents of a known resource. This is accomplished by submitting...
CVE-2002-0572
CVE-2002-0572 affects BSD-based systems (notably FreeBSD 4.5 and earlier); the issue arises when a local user closes standard input/output/error (FDs 0–2) and a subsequent setuid-invoked I/O operation reuses those descriptors, allowing read/write access to restricted files. Connected records corr...
CVE-2001-1135
The CVE-2001-1135 issue affects ZyXEL Prestige 642R and 642R-I routers. According to the connected documents, these devices can be reconfigured if the internal user knows the password and there is evidence of default credentials being present (HTTP web interface). The OpenVAS/Nessus entries indic...
CVE-1999-1214
The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local users to cause a denial of service by using certain ioctl and fcntl calls to cause the signal to be sent to an arbitrary process ID...
CVE-1999-1214
The CVE-1999-1214 issue affects the 4.4 BSD kernel’s asynchronous I/O facility. It does not validate credentials when setting the recipient of I/O notification, allowing a local user to trigger a signal to an arbitrary process ID via specific ioctl/fcntl calls, causing a denial of service. The do...
squirrelmail: squirrelspell plugin check_me.mod.php bug
In-Reply-To: [email protected] Squirrelspell v0.3.1 is know to be affected, vulnerability of other versions is unknown. The buggy code extraction: --------------------- // Define the command used to spellcheck the document. $sqspellcommand=$SQSPELLAPP...
Microsoft Windows NT 34.0 - CSRSS Memory Access Violation
Microsoft Windows NT 34.0 - CSRSS Memory Access Violation // source: https://www.securityfocus.com/bid/3478/info CSRSS.EXE is the Windows NT Client Server Run-time Subsystem. It is responsible for console windows and the creation and deletion of threads. The Windows NT kernel is dependant on this...
Microsoft Windows NT 3/4.0 - CSRSS Memory Access Violation
// source: https://www.securityfocus.com/bid/3478/info CSRSS.EXE is the Windows NT Client Server Run-time Subsystem. It is responsible for console windows and the creation and deletion of threads. The Windows NT kernel is dependant on this service and will halt if the service stops for any reason...
CVE-2000-1007
CVE-2000-1007 affects I-gear 3.5.7 and earlier; the issue stems from improper processing of log entries where a URL exceeds 255 characters, which can cause reporting errors. The available references describe the vulnerability as a processing flaw in log handling, with no explicit exploitation det...
CVE-2000-1007
I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters, which allows an attacker to cause reporting errors...
CVE-2000-1007
I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters, which allows an attacker to cause reporting errors...
I-gear 3.5.x for Microsoft Proxy logging vulnerability + temporary fix.
Hello everyone, this message is generated after several hours with Symantec Tech support and my personal research of the issue. The issue is confirmed to be a problem by Symantec® . Platform: I-gear 3.5.6 and 3.5.7-x for MSP Proxy 2.0 ; Windows NT 4.0 SP6; MSP 2.0 SP1; PowerEdge 2300 dual 450; 51...
Небольшая дырка в I-Gear
Слишком длинные записи в log-Файлах приводят к невозможности просмотреть журнал...
CVE-2000-0376
CVE-2000-0376 affects i-drive Filo: when the setup installs an HTTP proxy server, an attacker can send an overly long HTTP GET request, overflowing a heap buffer and enabling remote code execution. Affected: Filo 1.0.0.1 for Windows NT (SP5). Mitigation: upgrade to Filo 1.5.3. The vulnerability i...
CVE-2000-0376
Buffer overflow in the HTTP proxy server for the i-drive Filo software allows remote attackers to execute arbitrary commands via a long HTTP GET request...
ISSalert: Internet Security Systems Security Advisory: Buffer Overflow in i-drive Filo (tm) software
TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security...