1065 matches found
CVE-2004-0074
Multiple buffer overflows in xsok 1.02 allows local users to gain privileges via 1 a long LANG environment variable, or 2 a long -xsokdir command line argument, a different vulnerability than CVE-2003-0949...
CVE-2003-1082
Buffer overflow in utmpupdate for Solaris 2.6 through 9 allows local users to gain root privileges, as identified by Sun BugID 4705891, a different vulnerability than CVE-2003-1068...
Множество уязвимостей в Ultimate PHP Board (UPB) Version 1.5
Множество уязвимостей в Ultimate PHP Board UPB Version 1.5 Script: Ultimate PHP Board UPB Version 1.5 Author: PHP Outburst http://www.myupb.com/ Exploit: yes В скриптах: adminmembers.php adminban.php adminbannedaddresses.php adminbanuser.php admincat.php adminconfig.php adminconfigdo.php...
Microsoft Security Bulletin MS03-038: Unchecked buffer in Microsoft Access Snapshot Viewer Could Allow Code Execution(827104)
-----BEGIN PGP SIGNED MESSAGE----- - -------------------------------------------------------------------- Title: Unchecked buffer in Microsoft Access Snapshot Viewer Could Allow Code Execution 827104 Date: September 3, 2003 Software: Microsoft Access 97 Microsoft Access 2000 Microsoft Access 2002...
CVE-2003-0584
Format string vulnerability in Backup and Restore Utility for Unix BRU 17.0 and earlier, when running setuid, allows local users to execute arbitrary code via format string specifiers in a command line argument...
DSA-372 netris - buffer overflow
Bulletin has no description...
[sec-labs] Adobe Acrobat Reader <=5.0.7 Buffer Overflow Vulnerability + PoC code
sec-labs team proudly presents: Buffer overflow vulnerability in Adobe Acrobat Reader 5.0.7 and earlier by mcbethh 29/06/2003 I. BACKGROUND quote from documentation: 'The Acrobat Reader allows anyone to view, navigate, and print documents in the Adobe Portable Document Format PDF.' However there ...
[Full-Disclosure] [SECURITY] [DSA-331-1] New imagemagick packages fix insecure temporary file creation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 331-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 27th, 2003 http://www.debian.org/security/faq -...
Important: Red Hat Security Advisory: : : : Updated 2.4 kernel for pSeries and iSeries fixes vulnerabilities
Updated kernel packages, based on the 2.4.18 kernel, are now available for Red Hat Linux 7.1 for iSeries and pSeries systems. Please see the NOTE at the end of the description for important information about booting the new kernel on your system. The Linux kernel handles the basic functions of th...
Tutos 1.1 - File_Select.php Cross-Site Scripting
Tutos 1.1 - FileSelect.php Cross-Site Scripting source: https://www.securityfocus.com/bid/8011/info It has been reported that Tutos does not properly handle input to the fileselect script. Because of this, an attacker may be able to execute code in the browser of another user with the privileges ...
CVE-2003-0194
tcpdump does not properly drop privileges to the pcap user when starting up...
Qpopper v4.0.x poppassd local root exploit
======================================== INetCop Security Advisory 2003-0x82-016 ======================================== Title: Qpopper v4.0.x poppassd local root exploit 0x01. Description Qpopper poppassd is a program that changes system passwords thus allowing users to change their mail...
CVE-2002-0987
X server Xsco in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp using popen, which could allow local users to gain privileges...
CVE-2002-0762
shadow package in SuSE 8.0 allows local users to destroy the /etc/passwd and /etc/shadow files or assign extra group privileges to some users by changing filesize limits before calling programs that modify the files...
CVE-2003-0144
Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as 1 request ID or 2 user name...
[SECURITY] [DSA-259-1] qpopper user privilege escalation
Package: qpopper Vulnerability: mail user privilege escalation Debian-specific: no Florian Heinz [email protected] posted to the Bugtraq mailing list an exploit for qpopper based on a bug in the included vsnprintf implementation. The sample exploit requires a valid user account and password, and...
CVE-2002-2210
The installation of OpenOffice 1.0.1 allows local users to overwrite files and possibly gain privileges via a symlink attack on the USERNAMEautoresponse.conf temporary file...
CVE-2002-2283
Microsoft Windows XP with Fast User Switching FUS enabled does not remove the "show processes from all users" privilege when the user is removed from the administrator group, which allows that user to view processes of other users...
CVE-2002-0762
shadow package in SuSE 8.0 allows local users to destroy the /etc/passwd and /etc/shadow files or assign extra group privileges to some users by changing filesize limits before calling programs that modify the files...