1371 matches found
CVE-2006-0646
ld in SUSE Linux 9.1 through 10.0, and SLES 9, in certain circumstances when linking binaries, can leave an empty RPATH or RUNPATH, which allows local attackers to execute arbitrary code as other users via by running an ld-linked application from the current directory, which could contain an...
CVE-2006-0646
ld in SUSE Linux 9.1 through 10.0, and SLES 9, in certain circumstances when linking binaries, can leave an empty RPATH or RUNPATH, which allows local attackers to execute arbitrary code as other users via by running an ld-linked application from the current directory, which could contain an...
Microsoft Windows 2000 kernel Asynchronous Procedure Call privilege escalation
Double removal of structure from linked list allows memory manipulation...
Replace the small bamboo of the NBSI2: the Opendatasource And Openrowset-vulnerability warning-the black bar safety net
Currently on the market of SQL Injection tools a lot, the most respected is the NBSI2. SQL Injection method on the Internet is everywhere, everyone serious to learn it will soon become the script of the invasion“master”it. But whether it is tools, or numerous methods, to guess the SQL data when t...
Mandrake Linux Security Advisory : zlib (MDKSA-2005:124)
A previous zlib update MDKSA-2005:112; CVE-2005-2096 fixed an overflow flaw in the zlib program. While that update did indeed fix the reported overflow issue, Markus Oberhumber discovered additional ways that a specially crafted compressed stream could trigger an overflow. An attacker could creat...
CVE-2004-1349
CVE-2004-1349 affects gzip releases 1.3 and earlier on Solaris 8. The vulnerability occurs when gzip is invoked with the -f or -force flags, causing it to alter permissions of files that are hard linked to the target, enabling local users to view or modify those linked files. Connected sources co...
Sun Solaris gzip may change permissions of hard linked files
Overview Sun Solaris gzip contains a vulnerability that may change the permissions of hard linked files. The specific impact may allow hard linked files compressed by gzip to become readable and able to be modified by unprivileged users. Description Gzip is a utility used for compressing and...
PT-2004-2266 · Gnu +1 · Gzip +1
Name of the Vulnerable Software and Affected Versions: gzip version 1.3 and earlier in Solaris 8 Description: The issue allows local users to view or modify files that are hard linked to the target files when gzip is called with the -f or -force flags. Recommendations: For gzip version 1.3 and...
[SECURITY] [DSA 137-1] New mm packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 137-1 [email protected] http://www.debian.org/security/ Martin Schulze July 30th, 2002 - -------------------------------------------------------------------------- Package : mm Vulnerability...
IBM AIX eNetwork Firewall 3.23.3 - Insecure Temporary File Creation
IBM AIX eNetwork Firewall 3.23.3 - Insecure Temporary File Creation soure: https://www.securityfocus.com/bid/287/info IBM's eNetwork Firewall for AIX contains a number of vulnerability in scripts which manipulate files insecurely. When fwlsuser script is run it creates a temporary file called...
