5 matches found
Code injection
IBM WebSphere MQ 6.0 before 6.0.2.8 and 7.0 before 7.0.1.0 does not properly handle long group names, which might allow local users to gain privileges by leveraging combinations of group names with the same initial substring...
PT-2011-1300
Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ versions 6.0 through 6.0.2.8 IBM WebSphere MQ versions 7.0 through 7.0.1.0 Description The issue is related to the handling of long group names, which could potentially allow local users to gain privileges by exploiting...
CVE-2009-0905: Improper Input Validation
IBM WebSphere MQ 6.0 before 6.0.2.8 and 7.0 before 7.0.1.0 does not properly handle long group names, which might allow local users to gain privileges by leveraging combinations of group names with the same initial substring...
CVE-2006-6909
Stack-based buffer overflow in http.c in Karl Dahlke Edbrowse aka Command line editor browser 3.1.3 allows remote attackers to execute arbitrary code by operating an FTP server that sends directory listings with 1 long user names or 2 long group names...
yahoo messenger DOS
When adding friends to your yahoo messenger you can click a link on their profile. and it will put it in the friends group. The problem is with all versions of yahoo messenger it cannot handle long group names. So if where to visit...