5865 matches found
CVE-2005-1632: Undefined Security Weakness
Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local users to execute arbitrary code via a malicious module in /tmp/...
CVE-2005-0972: Undefined Security Weakness
Integer overflow in the searchfs system call in Mac OS X 10.3.9 and earlier allows local users to execute arbitrary code via crafted parameters...
CVE-2004-2013
The CVE-2004-2013 vulnerability affects Linux kernels 2.4.25 and earlier, caused by an integer overflow in the SCTP_SOCKOPT_DEBUG_NAME SCTP socket option in socket.c. An optlen value of -1 allows kmalloc to allocate 0 bytes, enabling a local attacker to potentially execute arbitrary code. Documen...
CVE-2004-2013: Integer Overflow or Wraparound
Integer overflow in the SCTPSOCKOPTDEBUGNAME SCTP socket option in socket.c in the Linux kernel 2.4.25 and earlier allows local users to execute arbitrary code via an optlen value of -1, which causes kmalloc to allocate 0 bytes of memory...
CVE-2005-0594
The CVE-2005-0594 issue is a local buffer overflow in Apple Mac OS X Server’s NeST (NetInfo Setup Tool) triggered by an overly long -target command-line argument. The flaw allows a local user to execute arbitrary code with the NeST process’s privileges (typically root). Apple addressed this with ...
DEBIAN-CVE-2005-0073
Buffer overflow in queue.c in a support script for sympa 3.3.3, when running setuid, allows local users to execute arbitrary code...
security flaw
Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument...
DEBIAN-CVE-2005-0016
Buffer overflow in the exporteddisplay function in xatitv in gatos before 0.0.5 allows local users to execute arbitrary code...
CVE-2005-1009
Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow 1 remote attackers to execute arbitrary code via a modified computer name and length that leads to a heap-based buffer overflow, or 2 local users to execute arbitrary code via a long Name entry in the configure.cfg file...
CVE-2005-1009: Undefined Security Weakness
Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow 1 remote attackers to execute arbitrary code via a modified computer name and length that leads to a heap-based buffer overflow, or 2 local users to execute arbitrary code via a long Name entry in the configure.cfg file...
CVE-2004-1772: Undefined Security Weakness
Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument...
CVE-2002-1633: Undefined Security Weakness
Multiple buffer overflows in QNX 4.25 may allow local users to execute arbitrary code via long command line arguments to 1 sample, 2 ex, 3 du, 4 find, 5 lex, 6 mkdir, 7 rm, 8 serserv, 9 tcpserv, 10 termdef, 11 time, 12 unzip, 13 use, 14 wcc, 15 wcc386, 16 wd, 17 wdisasm, 18 which, 19 wlib, 20...
CVE-2002-1602
CVE-2002-1602 describes a buffer overflow in the Braille module for GNU Screen 3.9.11 when HAVE_BRAILLE is defined. This vulnerability could allow local users to execute arbitrary code due to the overflow in the Braille support path. The affected component is the Braille module within GNU Screen;...
CVE-2002-1607
The CVE-2002-1607 entry describes a local-privilege escalation vulnerability in HP Tru64 UNIX: a buffer overflow in the ypmatch component affects Tru64 UNIX versions 5.1a, 5.1, 5.0a, 4.0g, and 4.0f, which could allow a local user to execute arbitrary code. The available sources confirm the affect...
CVE-2002-1607: Undefined Security Weakness
Buffer overflow in ypmatch in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code...
CVE-2002-1617: Undefined Security Weakness
Multiple buffer overflows in HP Tru64 UNIX 5.x allow local users to execute arbitrary code via 1 a long -contextDir argument to dtaction, 2 a long -p argument to dtprintinfo, 3 a long -customization argument to dxterm, or 4 a long DISPLAY environment variable to dtterm...
CVE-2005-0716: Undefined Security Weakness
Stack-based buffer overflow in the Core Foundation Library in Mac OS X 10.3.5 and 10.3.6, and possibly earlier versions, allows local users to execute arbitrary code via a long CFCHARSETPATH environment variable...
CVE-2005-0385: Undefined Security Weakness
Buffer overflow in luxman before 0.41, if used with certain insecure svgalib libraries, allows local users to execute arbitrary code via a long -f command line argument...
CVE-2002-1598: Undefined Security Weakness
Buffer overflows in Computer Associates MLink CA-MLink 6.5 and earlier may allow local users to execute arbitrary code via long command line arguments to 1 mlclear or 2 mllock...
