KDE URI Handler Vulnerabilities

Background The K Desktop Environment KDE is a powerful Free Software graphical desktop environment. KDE makes use of URI handlers to trigger various programs when specific URLs are received. Description The telnet, rlogin, ssh and mailto URI handlers in KDE do not check for '-' at the beginning o...

CVE-2004-0370

The setsockopt call in the KAME Project IPv6 implementation, as used in FreeBSD 5.2, does not properly handle certain IPv6 socket options, which could allow attackers to read kernel memory and cause a system panic...

libgcc contains multiple flaws that allow integer type range vulnerabilities to occur at runtime

Overview The libgcc runtime for the gcc and g++ compilers contain multiple flaws that can result in integer type range vulnerabilities in programs that are compiled using the -ftrapv option. Description Both gcc and g++ provide an -ftrapv compiler option that, according to the gcc man page,...

Symantec personal firewalls DoS

TCP packets with some options of zero langth causes system to hang...

EEYE: Symantec Multiple Firewall TCP Options Denial of Service

Symantec Multiple Firewall TCP Options Denial of Service Release Date: April 23, 2004 Date Reported: March 9th, 2004 Severity: High Remote Denial of Service Vendor: Symantec Systems Affected: Symantec Norton Internet Security 2003 Symantec Norton Internet Security 2004 Symantec Norton Internet...

[VulnWatch] [SHATTER Team Security Alert] Microsoft Windows Utility Manager Vulnerability

Microsoft Windows Utility Manager Vulnerability April 13, 2004 Risk Level: High Summary: A local elevation of privileges vulnerability exists on the Windows Utility Manager that allows to any user to take complete control over the operating system. Versions Affected: All products in the Windows...

FreeBSD-SA-04:06.ipv6

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-04:06.ipv6 Security Advisory The FreeBSD Project Topic: setsockopt2 IPv6 sockets input validation error Category: core Module: kernel Announced: 2004-03-29...

Irix ineffective NFS protection

If any access option contains only wildcards server ignores access checks...

DSA-377 wu-ftpd - insecure program execution

Bulletin has no description...

Microsoft Windows - RPC DCOM Remote (Universal)

Microsoft Windows - RPC DCOM Remote Universal / Windows remote RPC DCOM exploit Coded by oc192 Includes 2 universal targets, 1 for win2k, and 1 for winXP. This exploit uses ExitThread in its shellcode to prevent the RPC service from crashing upon successful exploitation. It also has several other...

NetScreen DoS

DoS on incorrect TCP options...

GNU Chess 5.0 - Local Buffer Overflow

GNU Chess 5.0 - Local Buffer Overflow // source: https://www.securityfocus.com/bid/8097/info A local buffer overflow has been reported for GNU Chess that may result in an attacker obtaining elevated privileges. The vulnerability exists due to insufficient boundary checks performed on some...

GNU AN - Command Line Option Local Buffer Overflow

GNU AN - Command Line Option Local Buffer Overflow // source: https://www.securityfocus.com/bid/8099/info A local buffer overflow has been reported for GNU an that may result in an attacker potentially obtaining elevated privileges. The vulnerability exists due to insufficient boundary checks...

GNU Chess 5.0 - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/8097/info A local buffer overflow has been reported for GNU Chess that may result in an attacker obtaining elevated privileges. The vulnerability exists due to insufficient boundary checks performed on some commandline options. Successful exploitation...

GNU AN - Command Line Option Local Buffer Overflow

// source: https://www.securityfocus.com/bid/8099/info A local buffer overflow has been reported for GNU an that may result in an attacker potentially obtaining elevated privileges. The vulnerability exists due to insufficient boundary checks performed on some commandline options. Successful...

CVE-2003-0390

Multiple buffer overflows in Options Parsing Tool OPT shared library 3.18 and earlier, when used in setuid programs, may allow local users to execute arbitrary code via long command line options that are fed into macros such as optwarn2, as used in functions such as optatoi...

CVE-2003-0390

Multiple buffer overflows in Options Parsing Tool OPT shared library 3.18 and earlier, when used in setuid programs, may allow local users to execute arbitrary code via long command line options that are fed into macros such as optwarn2, as used in functions such as optatoi...

DEBIAN-CVE-2003-0390

Multiple buffer overflows in Options Parsing Tool OPT shared library 3.18 and earlier, when used in setuid programs, may allow local users to execute arbitrary code via long command line options that are fed into macros such as optwarn2, as used in functions such as optatoi...

CVE-2003-0448

Portmon 1.7 (and possibly earlier) contains a local-file-access vulnerability that allows local users to read and write arbitrary files via the command line options -c (host file) or -l (log file). The issue impacts confidentiality and integrity (partial) and requires local access; exploitation d...

Abuse-SDL 0.7 - Command Line Argument Buffer Overflow

Abuse-SDL 0.7 - Command Line Argument Buffer Overflow // source: https://www.securityfocus.com/bid/7982/info A buffer overflow vulnerability has been reported for Abuse-SDL that may result in the execution of attacker-supplied code. The vulnerability exists due to insufficient bounds checking...