190 matches found
CVE-2008-1688
CVE-2008-1688 affects GNU m4 up to version 1.4.10, with the issue arising from how filenames are handled when using -F. The vulnerability is described as allowing context-dependent attackers to execute arbitrary code due to improper filename handling in the code paths related to maketemp/mkstemp ...
CVE-2008-1688
Unspecified vulnerability in GNU m4 before 1.4.11 might allow context-dependent attackers to execute arbitrary code, related to improper handling of filenames specified with the -F option. NOTE: it is not clear when this issue crosses privilege boundaries...
[slackware-security] m4
New m4 packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, and -current to fix security issues. More details about the issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-1687...
CVE-2006-3072
M4 Macro Library in Symantec Security Information Manager before 4.0.2.29 HOTFIX 1 allows local users to execute arbitrary commands via crafted "rule definitions", which produces dangerous Java code during M4 transformation...
CVE-2006-3072
M4 Macro Library in Symantec Security Information Manager before 4.0.2.29 HOTFIX 1 allows local users to execute arbitrary commands via crafted "rule definitions", which produces dangerous Java code during M4 transformation...
CVE-2006-3072
CVE-2006-3072 affects Symantec Security Information Manager prior to 4.0.2.29 HOTFIX 1, where the M4 Macro Library processes crafted rule definitions that produce dangerous Java code during M4 transformation, enabling local users to execute arbitrary commands. The vulnerability is local in scope ...
Default credentials
M4 Project enigma-suite before 0.73.3 Windows has a default password of "nominal" for the "enigma-client" account, which allows local users to gain access...
CVE-2006-1009
M4 Project enigma-suite before 0.73.3 Windows has a default password of "nominal" for the "enigma-client" account, which allows local users to gain access...
CVE-2006-1009
CVE-2006-1009 affects M4 Project enigma-suite for Windows prior to 0.73.3. The issue is a default password ("nominal") on the enigma-client account, enabling local access by any local user. CVSS v2 base score is 4.6 (MEDIUM) with LOCAL attack vector and no authentication required; impact is PARTI...