14 matches found
CVE-2026-13048
The Data::MuForm::Localizer Perl module (versions through 0.05 ) is vulnerable to remote code execution due to improper neutralization of directives in dynamically evaluated code. The load_lexicon function fails to validate the language attribute, allowing an attacker to use ../ segments to trave...
CVE-2026-13048 Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because load_lexicon interpolates the language attribute into the catalog filename
Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because loadlexicon interpolates the language attribute into the catalog filename. loadlexicon builds the catalog path by appending Messages/$lang.po to the directory...
EUVD-2007-2022
Malware in sbrugna...
ROS-20250818-06
A vulnerability in the fs/hfs.c file of the hfs component of the Grub2 operating system boot loader is related to writing beyond the buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to execute arbitrary code in the context of the current user using a speciall...
Multiple remote code execution vulnerabilities in php-gettext
php-gettext is a module in PHP that can read MO files directly. Multiple remote code execution vulnerabilities exist in php-gettext. An attacker could exploit this vulnerability to execute arbitrary code in an affected application...
Caldera UnixWare 7.1.1 Message Catalog Environment Variable Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4060/info UnixWare is a commercially available Unix Operating System. It was originally developed by SCO, and is now distributed and maintained by Caldera. A format string vulnerability in the locale subsystem could lead ...
CVE-2007-2027: Use of Externally-Controlled Format String
Untrusted search path vulnerability in the addfilenametostring function in intl/gettext/loadmsgcat.c for Elinks 0.11.1 allows local users to cause Elinks to use an untrusted gettext message catalog .po file in a "../po" directory, which can be leveraged to conduct format string attacks...
CVE-2002-0246: Undefined Security Weakness
Format string vulnerability in the message catalog library functions in UnixWare 7.1.1 allows local users to gain privileges by modifying the LCMESSAGE environment variable to read other message catalogs containing format strings from setuid programs such as vxprint...
Unixware Message catalog exploit code
Hi, I'm jGgM. I was reported this problem Caldera, a few week ago. And, This exploit is fixed already. Hacker can modify message catalog and, It can possible format string exploit. for example $ gcc -o expshell expshell.c $ gcc -o getret getret.c $ gcc -o fmtexp fmtexp.c $ ./expshell $ ./getret...
Ошибка форматной строки в функциях Unixware message catalog (format string)
Ошибка форматной строки почти во всех suid-приложениях...
Security Update: [CSSA-2002-SCO.3] UnixWare 7: message catalog environment variable vulnerability
To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: UnixWare 7: message catalog environment variable vulnerability Advisory number: CSSA-2002-SCO.3 Issue date: 2002 February 7 Cross reference: 1. Problem Descripti...
CVE-1999-1238
Vulnerability in CORE-DIAG fileset in HP message catalog in HP-UX 9.05 and earlier allows local users to gain privileges...
