8070 matches found
CVE-2004-0342
WFTPD Pro Server 3.21 Release 1, with the XeroxDocutech option enabled, allows local users to cause a denial of service crash via a 1 MKD or 2 XMKD command that causes an absolute path of 260 characters to be used, which overwrites a cookie with a null character, possibly due to an off-by-one err...
PT-2004-1119 · Unarj · Unarj
Name of the Vulnerable Software and Affected Versions: unarj affected versions not specified Description: The issue is related to a directory traversal vulnerability in the -x extract command line option. This vulnerability allows remote attackers to overwrite arbitrary files by using an arj...
Samhain privilege escalation
Privilege escalation if "-t update" option is used...
Cyrus IMAPd -- IMAPMAGICPLUS preauthentification overflow
When the option imapmagicplus is activated on a server the PROXY and LOGIN commands suffer a standard stack overflow, because the username is not checked against a maximum length when it is copied into a temporary stack buffer. This bug is especially dangerous because it can be triggered before a...
CVE-2004-0750
Unknown vulnerability in redhat-config-nfs before 1.0.13, when shares are exported to multiple hosts, can produce incorrect permissions and prevent the allsquash option from being applied...
Cisco VPN Concentrator "No Encryption" Option Remote DoS (Bug ID CSCdx39981)
Binary data 2235.prm...
Cisco VPN Concentrator "No Encryption" Option Remote DoS (Bug ID CSCdx39981)
Binary data 2234.prm...
CVE-2001-0485: Undefined Security Weakness
Unknown vulnerability in netprint in IRIX 6.2, and possibly other versions, allows local users with lp privileges attacker to execute arbitrary commands via the -n option...
CVE-2002-1438: Undefined Security Weakness
The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to obtain Perl version information via the -v option...
CVE-2000-0797: Undefined Security Weakness
Buffer overflow in grosview in IRIX 6.2 and 6.3 allows local users to gain privileges via a long -D option...
GLSA-200405-23 : Heimdal: Kerberos 4 buffer overflow in kadmin
The remote host is affected by the vulnerability described in GLSA-200405-23 Heimdal: Kerberos 4 buffer overflow in kadmin A buffer overflow was discovered in kadmind, a server for administrative access to the Kerberos database. Impact : By sending a specially formatted message to kadmind, a remo...
WU-FTPD MAIL_ADMIN Function Remote Overflow
Th remote Wu-FTPD server fails to properly check bounds on a pathname when Wu-Ftpd is compiled with MAILADMIN enabled resulting in a buffer overflow. With a specially crafted request, an attacker can possibly execute arbitrary code as the user Wu-Ftpd runs as usually root resulting in a loss of...
OpenSSH < 2.1.1 UseLogin Local Privilege Escalation
Binary data 1991.prm...
courier-imap: Remote Format String Vulnerability
Background Courier-IMAP is an IMAP server which is part of the Courier mail system. It provides access only to maildirs. Description There is a format string vulnerability in the authdebug function which can be exploited remotely, potentially leading to arbitrary code execution as the user runnin...
CVE-2004-0375
SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service infinite loop via a TCP packet with 1 SACK option or 2 Alternate Checksum Dat...
rsync: Potential information leakage
Background rsync is a utility that provides fast incremental file transfers. It is used to efficiently synchronize files between hosts and is used by emerge to fetch Gentoo's Portage tree. rsyncd is the rsync daemon, which listens to connections from rsync clients. Description The paths sent by t...
DEBIAN-CVE-2004-0548
Multiple stack-based buffer overflows in the word-list-compress functionality in compress.c for Aspell allow local users to execute arbitrary code via a long entry in the wordlist that is not properly handled when using the 1 "c" compress option or 2 "d" decompress option...
CVE-2004-0674
Enterasys XSR-1800 series Security Routers, when running firmware 7.0.0.0 and using Policy-Based Routing, allow remote attackers to cause a denial of service crash via a packet with the IP record route option set...
CVE-2004-0771: Undefined Security Weakness
Buffer overflow in the extractone function from lhext.c in LHA may allow attackers to execute arbitrary code via a long w working directory command line option, a different issue than CVE-2004-0769. NOTE: this issue may be REJECTED if there are not any cases in which LHA is setuid or is otherwise...