41 matches found
CVE-2008-2266
uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on a temporary filename generated by the tempnam function. NOTE: this may be a CVE-2004-2265 regression...
CVE-2008-2266
uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on a temporary filename generated by the tempnam function. NOTE: this may be a CVE-2004-2265 regression...
CVE-2004-2265
UUDeview 0.5.20 and earlier insecurely handles temporary files during decoding in the UUDeview code path (uulib/uunconc.c), enabling local users to overwrite arbitrary files via a symlink/temporary filename issue, as used in nzbget before 0.3.0 and potentially other products. The vulnerability st...
CVE-2004-2265
UUDeview 0.5.20 and earlier handles temporary files insecurely during decoding, with unknown attack vectors and impact...
CVE-2004-2265
UUDeview 0.5.20 and earlier handles temporary files insecurely during decoding, with unknown attack vectors and impact...
DEBIAN-CVE-2004-2265
UUDeview 0.5.20 and earlier handles temporary files insecurely during decoding, with unknown attack vectors and impact...
CVE-2004-2265
UUDeview 0.5.20 and earlier handles temporary files insecurely during decoding, with unknown attack vectors and impact...
CVE-2004-2265
UUDeview 0.5.20 and earlier handles temporary files insecurely during decoding, with unknown attack vectors and impact...
CVE-2004-2265
UUDeview 0.5.20 and earlier handles temporary files insecurely during decoding, with unknown attack vectors and impact...
DEBIAN-CVE-2004-0333
Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters...
CVE-2004-0333
Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters...
CVE-2004-0333
Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters...
GLSA-200403-05 : UUDeview MIME Buffer Overflow
The remote host is affected by the vulnerability described in GLSA-200403-05 UUDeview MIME Buffer Overflow By decoding a MIME archive with excessively long strings for various parameters, it is possible to crash UUDeview, or cause it to execute arbitrary code. This vulnerability was originally...
FreeBSD : uudeview buffer overflows (198)
The following package needs to be updated: uudeview %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg6c7661ff791211d896450020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...
UUDeview MIME Buffer Overflow
Background UUDeview is a program which is used to transmit binary files over the Internet in a text-only format. It is commonly used for email and Usenet attachments. It supports multiple encoding formats, including Base64, BinHex and UUEncoding. Description By decoding a MIME archive with...
CVE-2004-0333
Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters...
CVE-2004-0333
CVE-2004-0333 describes a buffer overflow in the UUDeview component used by WinZip 6.2–8.1 SR-1 (and possibly other packages). The overflow can be triggered by decoding a MIME archive with long MIME parameters, allowing remote code execution. Multiple sources corroborate the same core issue acros...
CVE-2004-0333
Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters...
[OpenPKG-SA-2004.006] OpenPKG Security Advisory (uudeview)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 OpenPKG Security Advisory The OpenPKG Project http://www.openpkg.org/security.html http://www.openpkg.org [email protected] [email protected] OpenPKG-SA-2004.006 12-Mar-2004 Package: uudeview Vulnerability: insecure temp file handling,...