434 matches found
PT-2001-1478 · Oracle · Solaris
Name of the Vulnerable Software and Affected Versions: Solaris 8 Description: The issue is related to a heap overflow in the FTP daemon, which allows remote attackers to execute arbitrary commands. This is achieved by creating a long pathname and calling the LIST command, which utilizes glob to...
CVE-2000-1074
CVE-2000-1074 affects the csstart program in iCal 2.1 Patch 2. It uses relative pathnames to install libsocket and libnsl, enabling the icsuser account to gain root privileges by placing a Trojan Horse library in the current or parent directory. The available documents state the vulnerability and...
CVE-2000-1074
csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could allow the icsuser account to gain root privileges by creating a Trojan Horse library in the current or parent directory...
CVE-2000-0679: Undefined Security Weakness
The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files...
CVE-2000-1074: Undefined Security Weakness
csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could allow the icsuser account to gain root privileges by creating a Trojan Horse library in the current or parent directory...
CVE-2000-0079
The W3C CERN httpd HTTP server allows remote attackers to determine the real pathnames of some commands via a request for a nonexistent URL...
CVE-2000-0071
IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions...
[SECURITY] New version of proftpd fixes remote exploits
The proftpd version that was distributed in Debian GNU/Linux 2.1 had several buffer overruns that could be exploited by remote attackers. A short list of problems: user input was used in snprintf without sufficient checks there was an overflow in the logxfer routine you could overflow a buffer by...
Muhammad M. Saggaf Seyon 2.14b - Relative Path
source: https://www.securityfocus.com/bid/780/info Seyon uses relative pathnames to spawn two other programs which it requires. It is possible to exploit this vulnerability to obtain the priviliges which seyon runs with. It is installed by default setgid dialer on FreeBSD and root on Irix...
CVE-1999-0314
ioconfig on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames...
CVE-1999-0314: Undefined Security Weakness
ioconfig on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames...
CVE-1999-0313: Undefined Security Weakness
diskbandwidth on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames...
WU-FTPD 2.4.2 / SCO Open Server 5.0.5 / ProFTPd 1.2 pre1 - 'realpath' Remote Buffer Overflow (1)
/ source: https://www.securityfocus.com/bid/113/info There is a vulnerability in ProFTPD versions 1.2.0pre1 and earlier and in wu-ftpd 2.4.2 beta 18 VR9 and earlier. This vulnerability is a buffer overflow triggered by unusually long path names directory structures. For example, if a user has wri...