CVE-2005-3346

Buffer overflow in the environment variable substitution code in main.c in OSH 1.7-14 allows local users to inject arbitrary environment variables, such as LDPRELOAD, via pathname arguments of the form "$VAR/EVAR=arg", which cause the EVAR portion to be appended to a buffer returned by a getenv...

CVE-2005-3346

CVE-2005-3346 affects osh (OSHevironment) 1.7-14, where a buffer overflow in the environment variable substitution code (main.c) can be triggered by pathname args like "$VAR/EVAR=arg". This allows a local attacker to inject arbitrary environment variables (e.g., LD_PRELOAD) and, per Debian's advi...

Cisco routers weak password encryption

Password is encrypted with substitution table...

PT-2005-3043 · Gaim +1 · Gaim +1

Name of the Vulnerable Software and Affected Versions: Gaim versions prior to 1.5.0 Description: The issue allows remote attackers to cause a denial of service, potentially leading to application crashes, and may also enable the execution of arbitrary code. This is achieved by sending an away...

Portcullis Security Advisory 05-002 Spectrum Cash Receipting System Weak Password Encryption

Portcullis Security Advisory Vulnerable System: Spectrum Cash Receipting System Vulnerability Title: Spectrum Cash Receipting System Weak Password Protection Vulnerability. Vulnerability discovery and development: Portcullis Security Testing Services. Affected systems: All known versions of...

Arbitrary code inclusion in phpShop

A vulnerability has been discovered in the popular E-Commerce package 'phpShop'. The vulnerability's details are available in the attached advisory, or at http://www.fribble.net/advisories/phpshop29-04-04.txt Due to the nature of this vulnerability, I notified the lead programmer for this package...

OracleAS TopLink Mapping Workbench - Weak Encryption Algorithm

OracleAS TopLink Mapping Workbench - Weak Encryption Algorithm source: https://www.securityfocus.com/bid/9515/info OracleAS TopLink Mapping Workbench is a tool included with OracleAS TopLink, a Java-based database integration development framework that is included as a component of various Oracle...

ProtWare weak encryption

Position substitution is used...

Проблема с "Избранными" в Internet Explorer (code execution)

Используя "Favorites" возможно подменить адреc сервера другим URL или названием программы...

PHP-Nuke 5.0 - user.php Form Element Substitution

PHP-Nuke 5.0 - user.php Form Element Substitution source: https://www.securityfocus.com/bid/3107/info PHP-Nuke is a website creation/maintenance tool written in PHP3. If a malicious user may subtitute arbitrary values for image form elements in the PHP-Nuke User Registration Form by saving the...

Слабое шифрование в CCC Harvest (weak encryption)

Используется алгоритм подстановки цезаря...

Проблема в apcupsd

Создается открытый на запись файл, в который записывается pid процесса. Это позволяет подменить pid, в результате чего при попытке остановить демон будет убит другой процесс...

Дырка в dnstool CGI

Некорректная замена метасимволов может привести к возможности удаленного выполнения команд...

Cisco Virtual Central Office 4000 (VCO/4K) 5.1.3 - Remote Username / Password Retrieval

source: https://www.securityfocus.com/bid/1885/info A vulnerability exists in the Cisco Virtual Central Office 4000 VCO/4K programmable voice switch running software versions 5.13 and earlier. The usernames and passwords for the device's SNMP administration interface are protected by a simple...

NetZero ZeroPort 3.0 - Weak Encryption Method

NetZero ZeroPort 3.0 - Weak Encryption Method // source: https://www.securityfocus.com/bid/1483/info Netzero is a free internet service provider which requires its users to run the application ZeroPort in order to log onto the network. The username and password is stored locally in a text file...

NetZero ZeroPort 3.0 - Weak Encryption Method

// source: https://www.securityfocus.com/bid/1483/info Netzero is a free internet service provider which requires its users to run the application ZeroPort in order to log onto the network. The username and password is stored locally in a text file called id.dat and is inadequately encrypted. The...

bash_1.x.txt

Rather dangerous bug is present in output processing after "command substitution" in bash 1.xx. It seems to be NOT present in bash 2.0.x, but I haven't found any bugreport on this vulnerability. I looked for: 'command substitution', 'ff', 'subshell' and '$' CHANGES file, no effects... Seems to be...