2066 matches found
Yoggie Pico and Pico Pro Backticks Remote Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24743/info Yoggie Pico and Pico Pro are prone to a remote code-execution vulnerability because the device fails to sufficiently sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary code wi...
Battery Life Toolkit 1.0.9 'bltk_sudo' Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37996/info Battery Life Toolkit BLTK is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with superuser privileges, resulting in the complete compromis...
Solaris 2.6/7.0/8 snmpXdmid Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2417/info Versions 2.6, 7, and 8 of Sun Microsystem's Solaris operating environment ship with service called 'snmpXdmid'. This daemon is used to map SNMP management requests to DMI requests and vice versa. SnmpXdmid...
SCO Open Server <= 5.0.5 XBase Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/479/info The XBase package that ships with SCO OpenServer 5.0. is vulnerable to several buffer overflow attacks in many different XBase tools. The tools that are installed setuid root allow local users to gain superuser...
Solaris 2.6/7.0/8 snmpXdmid Buffer Overflow Vulnerability (msf)
No description provided by source. source: http://www.securityfocus.com/bid/2417/info Versions 2.6, 7, and 8 of Sun Microsystem's Solaris operating environment ship with service called 'snmpXdmid'. This daemon is used to map SNMP management requests to DMI requests and vice versa. SnmpXdmid...
Sun Microsystems Solaris SRSEXEC 3.2.x Arbitrary File Read Local Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23915/info Sun Microsystems Solaris is prone to a local information-disclosure vulnerability due to a design error. A local attacker may exploit this issue to access sensitive information, including superuser password...
IBM AIX 5.2/5.3 FTP Client Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25077/info The IBM AIX FTP application is prone to a local buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer. A...
Apple Mac OS X <= 10.4.9 - VPND Local Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24208/info Apple Mac OS X's VPN service daemon is prone to a format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function...
Roxio Toast 7 DejaVu Component PATH Variable Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19596/info Roxio Toast is prone to a local privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. As a result, local users may set their own search path for external applications tha...
UMN Gopherd 2.x Halidate Function Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1591/info It is possible to either execute arbitrary code or crash a remote system running University of Minnesota's Gopher Daemon, depending on the data entered. An unchecked buffer exists in the 'halidate' function of...
Gentoo Webapp-Config 1.10 Insecure File Creation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13780/info Gentoo webapp-config is prone to an insecure file creation vulnerability. This issue is due to a design error that causes the application to fail to verify the existence of a file before writing to it. An...
Novell Identity Manager Arbitrary Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19688/info Novell Identity Manager is prone to an arbitrary command-execution vulnerability. A local attacker can exploit this issue to execute arbitrary commands with superuser privileges. Exploiting this issue allows...
MIT Kerberos 5 'src/kdc/do_tgs_req.c' Ticket Renewal Double Free Memory Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/39599/info MIT Kerberos is prone to a remote memory-corruption vulnerability. An authenticated attacker can exploit this issue by sending specially crafted ticket-renewal requests to a vulnerable computer. Successfully...
Linux Kernel 2.6.17 - Sys_Tee Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22823/info The Linux kernel is prone to a local privilege-escalation vulnerability. Exploiting this issue allows local attackers to gain superuser privileges, facilitating the complete compromise of affected computers...
IBM AIX 5.2/5.3 Capture Command Local Stack Based Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25075/info IBM AIX is prone to a local, stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input to a program that is installed setuid-superuser. Local attacker...
QNX Neutrino RTOS 6.3 'phgrafx' Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30024/info QNX Neutrino RTOS is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. This issue affects the 'phgrafx' utility. Attackers can exploit...
QNX RTOS 6.1/6.3 InputTrap Local Arbitrary File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14656/info QNX RTOS is susceptible to a local arbitrary file disclosure vulnerability. This issue is due to a failure of the 'inputtrap' utility to properly implement access control restrictions. This vulnerability allows...
Sudo 1.6.8 Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11204/info Sudo is reported prone to an information disclosure vulnerability. This vulnerability presents itself when sudo is called with the '-e' option, or the 'sudoedit' command is invoked. In certain circumstances,...
Xi Graphics Maximum CDE 1.2.3,TriTeal TED CDE 4.3,Sun Solaris <= 2.5.1 ToolTalk RPC Service Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/122/info An implementation fault in the ToolTalk object database server allows a remote attacker to run arbitrary code as the superuser on hosts supporting the ToolTalk service. The affected program runs on many popular...
QNX PPPoEd 2.4/4.25/6.2 - Multiple Local Buffer Overrun Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/11104/info QNX PPPoEd is reported to be prone to multiple local buffer overflow vulnerabilities. The issues presents themselves when PPPoEd handles certain command line arguments that are greater than 256 bytes in length...