CVE-2003-0022

CVE-2003-0022 concerns rxvt 2.7.8: the terminal emulator’s screen-dump escape sequence can be used to overwrite arbitrary files when the sequence is echoed to a user’s terminal (e.g., while viewing a file containing the sequence). The vulnerability stems from the screen-dump feature, and the expl...

CVE-2003-0021

The CVE-2003-0021 issue affects Eterm 0.9.1 and earlier, where the terminal’s screen-dump feature can be abused by a crafted escape sequence to overwrite arbitrary files when echoed to a user’s terminal (e.g., during viewing a file containing the sequence). The root cause is a vulnerability in ho...

CVE-2003-0021

The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence...

CVE-2003-0021: Undefined Security Weakness

The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence...

CVE-2001-1200: Undefined Security Weakness

Microsoft Windows XP allows local users to bypass a locked screen and run certain programs that are associated with Hot Keys...

CVE-2003-0022: Undefined Security Weakness

The "screen dump" feature in rxvt 2.7.8 allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence...

Mandrake Linux Security Advisory : screen (MDKSA-2003:113)

A vulnerability was discovered and fixed in screen by Timo Sirainen who found an exploitable buffer overflow that allowed privilege escalation. This vulnerability also has the potential to allow attackers to gain control of another user's screen session. The ability to exploit is not trivial and...

возможность DOS в Agnitum Outpost?

Наблюдал вчера интересную штуку. В момент получения "почтовой бомбы" с помощью the bat! почтовый фильтр mailfilt.dll валит систему w2k sp4 в синий экран. Несмотря на то, что плагин почтового фильтра отключен. Версия Outpost'a 2.1.292.3816 307, версия mailfilt.dll 2.1.307. Может, конечно, случайно...

CVE-2003-1008

Unknown vulnerability in Mac OS X 10.2.8 and 10.3.2 allows local users to bypass the screen saver login window and write a text clipping to the desktop or another application...

CVE-2004-0255

Xlight 1.52, with log to screen enabled, allows remote attackers to cause a denial of service by requesting a long directory consisting of . dot and / slash characters, which causes the server to crash when the administrator views the log file, possibly triggering a buffer overflow...

CVE-2004-0255: Undefined Security Weakness

Xlight 1.52, with log to screen enabled, allows remote attackers to cause a denial of service by requesting a long directory consisting of . dot and / slash characters, which causes the server to crash when the administrator views the log file, possibly triggering a buffer overflow...

CVE-2003-1008

Unknown vulnerability in Mac OS X 10.2.8 and 10.3.2 allows local users to bypass the screen saver login window and write a text clipping to the desktop or another application...

CVE-2003-1008

CVE-2003-1008 describes an unknown vulnerability in Mac OS X 10.2.8 and 10.3.2 where a local user can bypass the screen saver login window and write a text clipping to the desktop or another application. The connected documents corroborate a local-attack scenario with partial confidentiality/inte...

CVE-2003-1008: Undefined Security Weakness

Unknown vulnerability in Mac OS X 10.2.8 and 10.3.2 allows local users to bypass the screen saver login window and write a text clipping to the desktop or another application...

phototool.txt

------------------------------------------------- thePHOTOtool SQL Injection Vulnerability By KingSerb ------------------------------------------------- Please Forgive my spelling or any mistakes i have made, Its my first discovery of a vulnerablity so please understand, and use this file for...

[SECURITY] [DSA 408-1] New screen packages fix group utmp exploit

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 408-1 [email protected] http://www.debian.org/security/ Martin Schulze January 5th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 408-1] New screen packages fix group utmp exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 408-1 [email protected] http://www.debian.org/security/ Martin Schulze January 5th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 408-1] New screen packages fix group utmp exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 408-1 [email protected] http://www.debian.org/security/ Martin Schulze January 5th, 2004 http://www.debian.org/security/faq -...

DSA-408 screen - integer overflow

Bulletin has no description...

PT-2003-2448 · Aol · Aol Instant Messenger

Name of the Vulnerable Software and Affected Versions: AOL Instant Messenger AIM version 5.2.3292 Description: The issue allows remote attackers to execute arbitrary code via an aim:getfile URL with a long screen name. This is a result of a buffer overflow. Recommendations: For AOL Instant...