2676 matches found
CVE-2005-3352
Cross-site scripting XSS vulnerability in the modimap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps...
[Information Disclosure] NetForce v4.02 Sends NIS Password Maps with passwords hashes over sendmail
Vendor: Procom Technology, Inc. Product: NetFORCE 800, v 4.02 M10 Build 20 Other Versions Vulnerable: unknown, vendorās website sucks so I canāt tell Vulnerability type: Information disclosure Severity: Medium Software Information -------------------- Model : NetFORCE 800 Version : 4.02 M10 Build...
CVE-2005-1265
The mmap function in the Linux Kernel 2.6.10 can be used to create memory maps with a start address beyond the end address, which allows local users to cause a denial of service kernel crash...
CVE-2004-1942
The Solaris 9 patches 113579-02 through 113579-05, and 114342-02 through 114342-05, prevent ypserv and ypxfrd from properly restricting access to secure NIS maps, which allows local users to use ypcat or ypmatch to extract the contents of a secure map such as passwd.adjunct.byname...
CVE-2002-1548
The CVE-2002-1548 entry concerns autofs on AIX 4.3.0. When using executable maps, it may allow an attacker to execute arbitrary commands as root, potentially related to string handling around how the executable map is called. The provided documents do not include explicit remediation steps, affec...
Solaris NIS unauthorized passwords access
After installing 113579-03 patch any user can access secure NIS maps, for example passwd.adjunct.byname...
Solaris 9 patch 113579-03 introduces a NIS security bug
Posted to newsgroup comp.unix.solaris, and mailed to [email protected] Patch 113579-03, which has been in the recommended patch set for Solaris 9 since mid-February, introduces a security bug. If you are not running a NIS server using Solaris 9 you are not affected. If you do, but don't...
CVE-2004-1942
The Solaris 9 patches 113579-02 through 113579-05, and 114342-02 through 114342-05, prevent ypserv and ypxfrd from properly restricting access to secure NIS maps, which allows local users to use ypcat or ypmatch to extract the contents of a secure map such as passwd.adjunct.byname...
Sendmail fails to appropriately initialize data structures for DNS maps
Overview There is an uninitialized data structure in sendmail 8.12.x rrdomain = smstrduphost; \t\tif rr-rrdomain == NULL \t\t A fix for this condition was made in sendmail 8.12.9 in March 2003, but it was not known to be a security issue at that time. --- Impact A remote attacker may be able to...
CVE-2002-1548
Unknown vulnerability in autofs on AIX 4.3.0, when using executable maps, allows attackers to execute arbitrary commands as root, possibly related to "string handling around how the executable map is called."...
DEBIAN-CVE-2002-1232
Memory leak in ypdbopen in ypdb.c for ypserv before 2.5 in the NIS package 3.9 and earlier allows remote attackers to cause a denial of service memory consumption via a large number of requests for a map that does not exist...
CVE-1999-1425
CVE-1999-1425 affects Solaris Solstice AdminSuite (AdminSuite) 2.1. The documented issue is that NIS map source files have incorrect write permissions, enabling local users to modify /etc/passwd and potentially gain privileges. The connected documents do not expand on root cause beyond the stated...
CVE-1999-1425
Solaris Solstice AdminSuite AdminSuite 2.1 incorrectly sets write permissions on source files for NIS maps, which could allow local users to gain privileges by modifying /etc/passwd...
Cisco IOS vulnerable to DoS via unrecognized transitive attribute in BGP UPDATE
Overview There is a denial-of-service vulnerability in several specific but common configurations of Cisco IOS. Description There is a problem involving BGP updates on Cisco routers with BGP4 Prefix Filtering and Inbound Route Maps enabled. A route update with an unrecognized transitive attribute...
