1409 matches found
Debian DSA-263-1 : netpbm-free - math overflow errors
Al Viro and Alan Cox discovered several maths overflow errors in NetPBM, a set of graphics conversion tools. These programs are not installed setuid root but are often installed to prepare data for processing. These vulnerabilities may allow remote attackers to cause a denial of service or execut...
CVE-2002-1196
editproducts.cgi in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, when the "usebuggroups" feature is enabled and more than 47 groups are specified, does not properly calculate bit values for large numbers, which grants extra permissions to users via known features of Perl math that set...
CVE-2002-1196
CVE-2002-1196 affects Bugzilla: when using the “usebuggroups” feature and more than 47 groups are specified, editproducts.cgi in Bugzilla 2.14.x (before 2.14.4) and 2.16.x (before 2.16.1) does not correctly calculate bit values for large numbers, allowing extra permissions to be granted via Perl ...
MDKSA-2003:036 - Updated netpbm packages fix math overflow errors
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrake Linux Security Update Advisory Package name: netpbm Advisory ID: MDKSA-2003:036 Date: March 25th, 2003 Affected versions: 8.2, 9.0, 9.1, Corporate Server 2.1, Multi Network Firewall 8.2 Problem Description: Several math overflow errors were...
[SECURITY] [DSA 263-1] New tcpdump packages fix denial of service vulnerability
-------------------------------------------------------------------------- Debian Security Advisory DSA 263-1 [email protected] http://www.debian.org/security/ Martin Schulze March 17th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA 263-1] New tcpdump packages fix denial of service vulnerability
-------------------------------------------------------------------------- Debian Security Advisory DSA 263-1 [email protected] http://www.debian.org/security/ Martin Schulze March 17th, 2003 http://www.debian.org/security/faq -...
DSA-263 netpbm-free - math overflow errors
Bulletin has no description...
CVE-2001-0225
fortran math component in Infobot 0.44.5.3 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters...
Infobot 0.44.5.3/below remotely vulnerable (also in FreeBSD ports tree)
Advisory: Infobot 0.44.5.3 and below vulnerability Hack-X This version and versions from before were also released into the FreeBSD ports tree. Currently there is no patched version even though I emailed the author over a month ago about this and emailed the development list over a week, and them...