1569 matches found
[SECURITY] [DSA-391-1] New freesweep packages fix buffer overflow
-------------------------------------------------------------------------- Debian Security Advisory DSA 391-1 [email protected] http://www.debian.org/security/ Matt Zimmerman September 28th, 2003 http://www.debian.org/security/faq -...
Solaris libc getopt(3) contains buffer overflow
Overview Solaris libc getopt3 contains a buffer overflow vulnerability. Please note the date of this report: 1/27/1997. This does not affect current versions of Solaris. Description From :A buffer overflow condition exists in the getopt3 routine in Solaris libc. By supplying an invalid option and...
CVE-2003-0697
Format string vulnerability in lpd in the bos.rte.printers fileset for AIX 4.3 through 5.2, with debug enabled, allows local users to cause a denial of service crash or gain root privileges...
WS_FTP Server vulnerable to buffer overflow when supplied overly long "APPE" command
Overview It has been reported that a vulnerability exists in the processing of a "APPE" command on WSFTP Servers versions 4.x and prior. Exploitation of this vulnerability may lead to an authenticated user executing arbitrary code with the elevated privileges of the server process. Description...
CVE-2003-0742
SCO Internet Manager mana allows local users to execute arbitrary programs by setting the REMOTEADDR environment variable to cause menu.mana to run as if it were called from ncsahttpd, then modifying the PATH environment variable to point to a malicious "hostname" program...
CVE-2003-0603
Bugzilla 2.16.x before 2.16.3, 2.17.x before 2.17.4, and earlier versions allows local users to overwrite arbitrary files via a symlink attack on temporary files that are created in directories with group-writable or world-writable permissions...
CVE-2003-0596
FDclone 2.00a, and other versions before 2.02a, creates temporary directories with predictable names and uses them if they already exist, which allows local users to read or modify files of other fdclone users by creating the directory ahead of time...
DeskSoft CheckMail 1.2 - Password Disclosure
source: https://www.securityfocus.com/bid/8449/info It has been reported that a password disclosure issue exists in CheckMail allowing a local user to access sensitive authentication information through the Windows Registry. The software stores user authentication credentials in a Windows Registr...
phpWebSite 0.7.30.8.20.8.30.9.2 fatcat Module - fatcat_id Cross-Site Scripting
phpWebSite 0.7.30.8.20.8.30.9.2 fatcat Module - fatcatid Cross-Site Scripting source: https://www.securityfocus.com/bid/8393/info PHP Website is a web site content management system that allows for easy maintainance and administration of interactive community-driven websites. Cross-site...
Sun One 5.1 IPlanet 5.05.1 - Administration Server Directory Traversal
Sun One 5.1 IPlanet 5.05.1 - Administration Server Directory Traversal source: https://www.securityfocus.com/bid/8367/info A problem in the checking of input by the Sun ONE Administration Server may lead to remote users escaping into restricted directories. This may allow an attacker to gain acce...
CVE-2003-0620
Multiple buffer overflows in man-db 2.4.1 and earlier, when installed setuid, allow local users to gain privileges via 1 MANDATORYMANPATH, MANPATHMAP, and MANDBMAP arguments to addtodirlist in manp.c, 2 a long pathname to ultsrc in ultsrc.c, 3 a long .so argument to testforinclude in ultsrc.c, 4 ...
CVE-2003-0517
faxrunqd.in in mgetty 1.1.28 and earlier allows local users to overwrite files via a symlink attack on JOB files...
CVE-2003-0390
Multiple buffer overflows in Options Parsing Tool OPT shared library 3.18 and earlier, when used in setuid programs, may allow local users to execute arbitrary code via long command line options that are fed into macros such as optwarn2, as used in functions such as optatoi...
[SECURITY] [DSA-325-1] New eldav packages fix insecure temporary file creation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 325-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 19th, 2003 http://www.debian.org/security/faq -...
Kerio MailServer 5.6.3 - Web Mail ADD_ACL Module Cross-Site Scripting
Kerio MailServer 5.6.3 - Web Mail ADDACL Module Cross-Site Scripting source: https://www.securityfocus.com/bid/7966/info Reportedly, Kerio Mailserver is vulnerable to a cross site-scripting attack. The vulnerability is present in the addacl module of the Kerio Mailserver web mail component. An...
DSA-323 noweb - insecure temporary files
Bulletin has no description...
SGI IRIX vulnerable to DoS when user space program calls the PIOCSWATCH ioctl() function
Overview A vulnerability in the SGI IRIX PIOCSWATCH ioctl function may allow local attackers to crash the operating system. Description SGI states that PIOCSWATCH ioctl "establishes or clears a set of watched areas in the traced process." According to SGI Security Advisory 20030603-01-P, a local...
CVE-2003-0362
Buffer overflow in gPS before 0.10.2 may allow local users to cause a denial of service SIGSEGV in rgpsp via long command lines...