CVE-2003-0358

Buffer overflow in 1 nethack 3.4.0 and earlier, and 2 falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line option...

Xaos 3.0 - Language Option Local Buffer Overflow

Xaos 3.0 - Language Option Local Buffer Overflow / source: https://www.securityfocus.com/bid/7838/info It has been reported that Xaos is vulnerable to a boundary condition error in the command option processing. Because of this, an attacker may be able to gain elevated privileges, potentially...

CVE-2003-0358

Buffer overflow in 1 nethack 3.4.0 and earlier, and 2 falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line option...

CVE-2003-0358: Buffer Copy without Checking Size of Input

Buffer overflow in 1 nethack 3.4.0 and earlier, and 2 falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line option...

REVISED quotacheck security fix in rc.M

NOTE: The original advisory quotes a section of the Slackware ChangeLog which had inadvertently reversed the options to quotacheck. The correct option to use is 'm'. A corrected advisory follows: An upgraded sysvinit package is available which fixes a problem with the use of quotacheck in...

Nessus 2.0.x - LibNASL Arbitrary Code Execution

source: https://www.securityfocus.com/bid/7664/info Nessus has reported that various flaws have been discovered in the 'libnasl' library used by the Nessus application. As a result, a malicious NASL script may be able to break outside of the established sandbox environment and execute arbitrary...

CVE-2002-1478

Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode...

CVE-2002-1413

RCONAG6 for Novell Netware SP2, while running RconJ in secure mode, allows remote attackers to bypass authentication using the RconJ "Secure IP" SSL option during a connection...

CVE-2002-0169

The CVE-2002-0169 issue concerns the default DocBook stylesheet shipped with Red Hat Linux 6.2–7.2. The insecure option in the stylesheet allowed an untrusted DocBook document to cause file writes outside the current directory by using a full pathname as an element identifier, potentially affecti...

CVE-2001-1380: Undefined Security Weakness

OpenSSH before 2.9.9, while using keypairs and multiple keys of different types in the /.ssh/authorizedkeys2 file, may not properly handle the "from" option associated with a key, which could allow remote attackers to login from unauthorized IP addresses...

CVE-2002-0169: Undefined Security Weakness

The default stylesheet for DocBook on Red Hat Linux 6.2 through 7.2 is installed with an insecure option enabled, which could allow users to overwrite files outside of the current directory from an untrusted document by using a full pathname as an element identifier...

HP-UX disable buffer overflow

Buffer overflow in -r option...

DEBIAN-CVE-2002-1653

Farm9 Cryptcat, when started in server mode with the -e option, does not enable encryption, which allows clients to communicate without encryption despite intended configuration, and may allow remote attackers to sniff sensitive information...

DEBIAN-CVE-2002-1896

Buffer overflow in Alsaplayer 0.99.71, when installed setuid root, allows local users to execute arbitrary code via a long 1 -f or 2 -o command line argument...

PT-2002-2419 · Pgp +1 · Pgp +1

Name of the Vulnerable Software and Affected Versions: Microsoft Outlook plug-in PGP versions 7.0, 7.0.3, and 7.0.4 Description: The issue arises when the "Automatically decrypt/verify when opening messages" option is checked and the "Always use Secure Viewer when decrypting" option is not checke...

X11 vulnerable to buffer overflow in handling of -xrm option

Overview The X11 library included with many UNIX variants contains a buffer-overflow vulnerability that may allow attackers to gain root privileges. Description The X11 library contains an unspecified buffer-overflow vulnerability. Programs that use this library and accept the -xrm option includi...

CVE-2002-0918: Undefined Security Weakness

CGIScript.net csPassword.cgi leaks sensitive information such as the pathname of the server in debug messages that are presented when the script fails, which allows remote attackers to obtain the information via a "remove" option in the command parameter, which generates an error...

NOVL-2002-2963349 - Rconag6 Secure IP Login Vulnerability - NW6SP2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 For Immediate Disclosure ============================== Summary ============================== Security Alert: NOVL-2002-2963349 Title: Rconag6 Secure IP Login Vulnerability - NW6SP2 Date: 21-Aug-2002 Revision: Original Product Name: Netware 6 Service...

CVE-2002-0702

Format string vulnerabilities in the logging routines for dynamic DNS code print.c of ISC DHCP daemon DHCPD 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malicious DNS servers to execute arbitrary code via format strings in a DNS server response...

Security Advisory FreeBSD-SA-02:30.ktrace

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:30 Security Advisory The FreeBSD Project Topic: Users may trace previously privileged processes Category: core Module: ktrace Announced: 2002-07-12 Credits: Theo DeRaadt...