Lucene search
K

38 matches found

OSV
OSV
added 2023/10/25 6:17 p.m.3 views

AZL-31746 CVE-2023-46316 affecting package traceroute for versions less than 2.1.3-1

In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines...

5.5CVSS6.9AI score0.00038EPSS
Exploits2References1
ATTACKERKB
ATTACKERKB
added 2023/10/25 6:17 p.m.5 views

CVE-2023-46316

In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines...

5.5CVSS5.8AI score0.00038EPSS
Exploits2References4
NVD
NVD
added 2023/10/25 6:17 p.m.27 views

CVE-2023-46316

In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines...

5.5CVSS5.8AI score0.00038EPSS
Exploits2References3
OSV
OSV
added 2023/10/25 6:17 p.m.2 views

DEBIAN-CVE-2023-46316

In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines...

5.5CVSS6.1AI score0.00038EPSS
Exploits2References1
OSV
OSV
added 2023/10/25 6:17 p.m.0 views

UBUNTU-CVE-2023-46316

In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines...

5.5CVSS6.9AI score0.00038EPSS
Exploits2References5
CNNVD
CNNVD
added 2023/10/25 12:0 a.m.2 views

traceroute security vulnerability

traceroute is a package for executing traceroute-related commands by James Weston, an individual developer in the United States. A security vulnerability exists in Traceroute versions 2.0.12 through 2.1.2, which stems from the inability of wrapper scripts to properly parse command lines...

5.5CVSS7.1AI score0.00038EPSS
Exploits2References5
Debian CVE
Debian CVE
added 2023/10/24 12:0 a.m.428 views

CVE-2023-46316

In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines...

5.5CVSS6AI score0.00038EPSS
Exploits2
Cvelist
Cvelist
added 2023/10/24 12:0 a.m.14 views

CVE-2023-46316

In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines...

6.2AI score0.00038EPSS
Exploits2References3
Vulnrichment
Vulnrichment
added 2023/10/24 12:0 a.m.27 views

CVE-2023-46316

In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines...

6.8AI score0.00038EPSS
Exploits2References3
AlpineLinux
AlpineLinux
added 2023/10/24 12:0 a.m.36 views

CVE-2023-46316

In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines...

5.5CVSS6AI score0.00038EPSS
Exploits2
CVE
CVE
added 2023/10/24 12:0 a.m.116 views

CVE-2023-46316

CVE-2023-46316 affects buc Traceroute 2.0.12 through 2.1.2; the wrapper scripts fail to parse command lines correctly, enabling local impact (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Public advisories/errata indicate the fix is to upgrade traceroute to version 2.1.3 or later (e.g., traceroute 2.1.3 ...

5.5CVSS5.3AI score0.00038EPSS
Exploits2References3Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 6:6 a.m.3 views

SUSE CVE-2008-4951

dtc 0.29.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/awstats.log, b /tmp/spam.log., and c /tmp/spamerr.log temporary files, related to the 1 accesslog.php and 2 sa-wrapper scripts...

6.9CVSS6.7AI score0.00028EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2013/01/25 12:0 a.m.39 views

SuSE 11.2 Security Update : PHP5 (SAT Patch Number 6440)

PHP5 was updated with incremental fixes to the previous update. - Additional unsafe cgi wrapper scripts are also fixed now. CVE-2012-2335 - Even more commandline option handling is filtered, which could lead to crashes of the php interpreter. CVE-2012-2336 - heap-based buffer overflow in php's ph...

7.5CVSS8.3AI score0.47326EPSS
Exploits41References11
Gentoo Linux
Gentoo Linux
added 2012/03/06 12:0 a.m.17 views

foomatic-filters: User-assisted execution of arbitrary code

Background The foomatic-filters package contains wrapper scripts which are designed to be used with Foomatic. Description The foomatic-rip filter improperly handles command-line arguments, including those issued by FoomaticRIPCommandLine fields in PPD files. Impact A remote attacker could entice ...

6.8CVSS7.5AI score0.19933EPSS
Exploits2
UbuntuCve
UbuntuCve
added 2008/11/05 3:0 p.m.16 views

CVE-2008-4951

dtc 0.29.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/awstats.log, b /tmp/spam.log., and c /tmp/spamerr.log temporary files, related to the 1 accesslog.php and 2 sa-wrapper scripts...

6.9CVSS6AI score0.00028EPSS
Exploits1References1
Cvelist
Cvelist
added 2008/11/05 2:51 p.m.12 views

CVE-2008-4951

dtc 0.29.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/awstats.log, b /tmp/spam.log., and c /tmp/spamerr.log temporary files, related to the 1 accesslog.php and 2 sa-wrapper scripts...

6.4AI score0.00028EPSS
Exploits1References6
Prion
Prion
added 2007/08/20 7:17 p.m.13 views

Design/Logic Flaw

Untrusted search path vulnerability in the wrapper scripts for the 1 rug, 2 zen-updater, 3 zen-installer, and 4 zen-remover programs on SUSE Linux 10.1 and Enterprise 10 allows local users to gain privileges via modified a LDLIBRARYPATH and b MONOGACPREFIX environment variables...

4.6CVSS7.1AI score0.00035EPSS
Exploits0References6Affected Software1
Tenable Nessus
Tenable Nessus
added 2006/03/23 12:0 a.m.13 views

Fedora Core 5 : beagle-0.2.3-4 (2006-188)

Some of the wrapper scripts including beagle-status looked in the current directory for files with a specific name and ran that instead of the binary in the path. All such cases have been fixed in this release. Note that Tenable Network Security has extracted the preceding description block...

7.5CVSS5.5AI score0.00738EPSS
Exploits0References2
Rows per page
Query Builder