3773 matches found
CVE-2004-1021: Undefined Security Weakness
iCal before 1.5.4 on Mac OS X 10.2.3, and other later versions, does not alert the user when handling calendars that use alarms, which allows attackers to execute programs and send e-mail via alarms...
security flaw
FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service server crash by sending an Ascend-Send-Secret attribute without the required leading packet...
CVE-2004-0938
FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service server crash by sending an Ascend-Send-Secret attribute without the required leading packet...
DEBIAN-CVE-2004-0938
FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service server crash by sending an Ascend-Send-Secret attribute without the required leading packet...
CVE-2004-0938
FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service server crash by sending an Ascend-Send-Secret attribute without the required leading packet...
[SA12967] Kerberos V5 "send-pr.sh" Script Insecure Temporary File Creation
TITLE: Kerberos V5 "send-pr.sh" Script Insecure Temporary File Creation SECUNIA ADVISORY ID: SA12967 VERIFY ADVISORY: http://secunia.com/advisories/12967/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Kerberos V5 http://secunia.com/product/556/ DESCRIPTION: A...
GLSA-200410-24 : MIT krb5: Insecure temporary file use in send-pr.sh
The remote host is affected by the vulnerability described in GLSA-200410-24 MIT krb5: Insecure temporary file use in send-pr.sh The send-pr.sh script creates temporary files in world-writeable directories with predictable names. Impact : A local attacker could create symbolic links in the...
MIT krb5: Insecure temporary file use in send-pr.sh
Background MIT krb5 is the free implementation of the Kerberos network authentication protocol written by the Massachusetts Institute of Technology. Description The send-pr.sh script creates temporary files in world-writeable directories with predictable names. Impact A local attacker could creat...
CVE-2004-0971
The krb5-send-pr script in the kerberos5 krb5 package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...
CVE-2004-0971
The krb5-send-pr script in the kerberos5 krb5 package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...
CVE-2004-0971: Undefined Security Weakness
The krb5-send-pr script in the kerberos5 krb5 package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...
CVE-2004-0938
CVE-2004-0938 affects FreeRADIUS prior to 1.0.1. The issue arises when processing certain RADIUS messages (out-of-sequence/out-of-order handling and specifically an Ascend-Send-Secret attribute without the required leading packet), which can trigger a memory exception and cause a denial of servic...
CVE-2004-0938
FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service server crash by sending an Ascend-Send-Secret attribute without the required leading packet...
CVE-2004-0938: Undefined Security Weakness
FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service server crash by sending an Ascend-Send-Secret attribute without the required leading packet...
Mozilla "send page" feature contains a buffer overflow vulnerability
Overview There is a buffer overflow vulnerability in the Mozilla "send page" feature that could allow a remote attacker to execute arbitrary code. Description Mozilla is an open-source web browser, email/newsgroup client, IRC client, and HTML editor available for a number of platforms including...
Gadu-Gadu buffer overflow
Heap overflow in image send feature...
[Full-Disclosure] Gadu-Gadu (all versions with image-send feature) Heap Overflow
Sec-Labs Team proudly presents: Gadu-Gadu all versions with image-send feature Heap Overflow by Lord YuP 12/09/2004 Severity: High / Critical - Remote Code Execution Version affected: Probably all versions with image-send feature Tested on ver. 6.0 build 149 the newest one released two days befor...
iss_pam1.dll remote exploits
/ 557isspamexp - RealSecure / Blackice isspam1.dll remote overflow exploit Copyright c SST 2004 All rights reserved. Public version code by Sam Sam@efnet and 2004/03/26 [email protected] [email protected] Compile: gcc -o 557isspamexp 557isspamexp.c how works? root@core exp ./557isspamexp...
CVE-2003-1135
Buffer overflow in Yahoo! Messenger 5.6 allows remote attackers to cause a denial of service crash via a file send request sendfile with a large number of "%" percent characters after the Yahoo ID...