9256 matches found
FastCGI Multiple Sample CGI XSS
Two sample CGI's supplied with FastCGI are vulnerable to cross-site scripting attacks. FastCGI is an 'open extension to CGI that provides high performance without the limitations of server specific APIs', and is included in the default installation of the 'Unbreakable' Oracle9i Application Server...
Переполнение буфера в clanlib (buffer overflow)
Переполнение буфера при разборе переменных окружения...
FreeBSD-SA-02:06.sudo
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:06 Security Advisory FreeBSD, Inc. Topic: sudo port may enable local privilege escalation Category: ports Module: sudo Announced: 2002-01-16 Credits: Sebastian Krahmer...
Sudo 1.6.3 - Unclean Environment Variable Privilege Escalation
Sudo 1.6.3 - Unclean Environment Variable Privilege Escalation source: https://www.securityfocus.com/bid/3871/info Sudo is a freely available, open source permissions management software package available for the Linux and Unix operating systems. It is maintained by Todd C. Miller. Under some...
[SECURITY] [DSA-094-1] mailman cross-site scripting problem
Package : mailman Problem type : cross-site scripting hole Debian-specific: no Barry A. Warsaw reported several cross-site scripting security holes in Mailman, due to non-existent escaping of CGI variables. These have been fixed upstream in version 2.0.8, and the relevant patches have been...
[SECURITY] [DSA-091-1] OpenSSH UseLogin vulnerability
Package : ssh Problem type : influencing login Debian-specific: no If the UseLogin feature is enabled in for ssh local users could pass environment variables including variables like LDPRELOAD to the login process. This has been fixed by not copying the environment of UseLogin is enabled. Please...
Переполнения буфера в IODBC (buffer overflow)
Переполнение буфера при длинном имени DSN источника данных. Источник данных указывается через переменную окружения, что может привести к проблеме, например в случае неинициализированных переменных PHP...
CVE-2001-0739
Guardian Digital WebTool in EnGarde Secure Linux 1.0.1 allows restarted services to inherit some environmental variables, which could allow local users to gain root privileges...
Php variables passed from the browser are stored in global context
Overview Php is a dynamic scripting language used by programmers to develop webservers, message boards, chat applications and a variety of programs. By default php stores variables passed from the URL in a global context. Programmers often fail to change this setting which can allow serious...
CVE-2001-1128
Buffer overflow in Progress database 8.3D and 9.1C allows local users to execute arbitrary code via long entries in files that are specified by the 1 PROMSGS or 2 PROTERMCAP environment variables...
Очередные ошибки во многих PHP-скриптах.
Ошибки неинициализированных глобальных переменных...
CVE-2001-0482
Configuration error in Argus PitBull LX allows root users to bypass specified access control restrictions and cause a denial of service or execute arbitrary commands by modifying kernel variables such as MaxFiles, MaxInodes, and ModProbePath in /proc/sys via calls to sysctl...
CVE-2001-0482: Undefined Security Weakness
Configuration error in Argus PitBull LX allows root users to bypass specified access control restrictions and cause a denial of service or execute arbitrary commands by modifying kernel variables such as MaxFiles, MaxInodes, and ModProbePath in /proc/sys via calls to sysctl...
CVE-1999-1435
Buffer overflow in libsocks5 library of Socks 5 socks5 1.0r5 allows local users to gain privileges via long environmental variables...
CVE-1999-1435: Undefined Security Weakness
Buffer overflow in libsocks5 library of Socks 5 socks5 1.0r5 allows local users to gain privileges via long environmental variables...
Red Hat linux restore uses insecure environment variables allowing root compromise
Overview Some implementations of the Linux restoration utility, restore, call external programs on remote machines via the RSH environment variable. This may permit an attacker to compromise root if restore is setuid root. Description Some implementations of the Linux restoration utility, restore...
Утечка информации в Webridge (information leak)
В случае ошибюки показываются все серверные переменные...
NSFOCUS SA2001-05 : Solaris Xlock Heap Overflow Vulnerability
NSFOCUS Security AdvisorySA2001-05 Topic: Solaris Xlock Heap Overflow Vulnerability Release DateЈє 2001-08-10 CVE CAN ID : CAN-2001-0652 BUGTRAQ ID : 3160 Affected system: ================ Sun Solaris 2.6 SPARC/x86 Sun Solaris 7 SPARC/x86 Sun Solaris 8 SPARC/x86 Impact: ========= NSFOCUS Security...