CVE-2003-0201

CVE-2003-0201 describes a buffer overflow in Samba's trans2open handling. Specifically, the overflow occurs in call_trans2open in trans2.c, affecting Samba 2.2.x before 2.2.8a, Samba 2.0.x before 2.0.10 (and earlier 2.0.x releases), and Samba-TNG before 0.3.2. This allows remote attackers to exec...

CVE-2003-0161

Technical details for CVE-2003-0161 are not publicly provided in the supplied documents; monitor for updates from the connected advisories and feeds.

CVE-2003-0196

CVE-2003-0196 corresponds to multiple buffer overflows in Samba before 2.2.8a, enabling remote code execution or denial of service. The related CVE-2003-0201 describes a trans2open overflow; exploitation has been demonstrated in various Samba builds (2.2.0–2.2.8) across platforms (Linux, macOS, B...

CVE-2003-0694

CVE-2003-0694 affects Sendmail 8.12.9, where the prescan function (parsing SMTP headers in parseaddr.c) can be exploited remotely via a buffer overflow to execute arbitrary code. Debian DSA-384 also references CAN-2003-0694 in its two vulnerabilities entry. The available documents confirm affecte...

CVE-2003-0914

CVE-2003-0914 affects ISC BIND 8.3.x before 8.3.7 and 8.4.x before 8.4.3. A remote attacker can poison the DNS cache by using a malicious nameserver that returns negative responses with a large TTL, causing legitimate queries to be answered with cached negative results. Remediation mentioned in t...

CVE-2002-0677

The CVE-2002-0677 entry affects the CDE ToolTalk RPC database server (rpc.ttdbserverd). The OpenVAS/Core/CORE documentation confirms the vulnerability: an attacker can exploit improper range checking on the AUTH_UNIX file descriptor argument passed to _TT_ISCLOSE, using it as an index into a 128-...

CVE-2002-0678

CVE-2002-0678 relates to the CDE ToolTalk RPC database server (rpc.ttdbserverd). The OpenVAS/CERT CORE disclosures describe two vulnerabilities: (1) _TT_ISCLOSE range-check flaw permitting memory overwriting of the process when a local or remote client calls _TT_ISCLOSE; (2) _TT_TRANSACTION/log_f...

CVE-2002-0679

CVE-2002-0679 concerns the CDE ToolTalk RPC database server, rpc.ttdbserverd, which contains a heap buffer overflow vulnerability triggered by an argument to the _TT_CREATE_FILE() procedure. A remote attacker could exploit this to execute arbitrary code or cause a denial of service, typically run...

CVE-2003-0688

The CVE-2003-0688 issue affects the Sendmail 8.12.x line (including 8.12.8) when using the DNS maps feature enabled via ENHDNSBL. The vulnerability stems from improper initialization of RESOURCE_RECORD_T data structures, causing Sendmail to call free() on incorrect or uninitialized data after rec...

CVE-2001-1092

CVE-2001-1092 concerns msgchk in Digital UNIX 4.0G and earlier that allows a local user to read the first line of arbitrary files by a symlink attack on the user’s .mh_profile. The root cause is msgchk reads the profile to obtain configuration options, and if linked to a target file readable by t...

CVE-2005-0223

CVE-2005-0223 affects the Tru64 UNIX Software Development Kit (SDK) and Run Time Environment (RTE) versions 1.4.1 and 1.4.2. The vulnerability is a deserialization flaw that allows remote attackers to trigger a denial of service by causing the Java Virtual Machine to hang. The available connected...

CVE-2001-1435

CVE-2001-1435 affects Compaq Tru64 UNIX 5.1 where inetd can cause a denial of service by a core dump during startup of one served service, taking down all inetd services. The documents do not provide exploit details or a remediation/patch version.

CVE-2001-1033

The CVE-2001-1033 entry describes a vulnerability in Compaq TruCluster 1.5 where remote attackers can trigger a denial of service by performing a port scan from a system lacking a DNS PTR record, causing the cluster to enter a split-brain state.

CVE-2001-1093

CVE-2001-1093 concerns a buffer overflow in the msgchk utility of Digital UNIX 4.0G and earlier. A command-line argument of excessive length can overflow a buffer, enabling a local attacker to execute arbitrary code with the effective user ID of the msgchk process. The vulnerability is described ...

CVE-2002-1129

The CVE-2002-1129 entry describes a buffer overflow in dxterm that allows a local user to execute arbitrary code via a long -xrm argument. Documents confirm the affected component is dxterm and specify local execution with a crafted argument as the impact. No explicit product/vendor versions or r...

CVE-2003-0724

The CVE-2003-0724 entry concerns SSH on HP Tru64 UNIX (versions 5.1A and 5.1B) that does not properly handle RSA signatures when digital certificates and RSA keys are used, enabling local and remote attackers to gain privileges. The underlying issue is improper handling of RSA signatures (certifi...

CVE-2002-0093

Technical details about CVE-2002-0093 are not publicly available in the provided connected documents. Monitor for updates; current sources do not specify affected products/versions, root cause, exploitability, or remediation within this dataset.

CVE-2002-0816

CVE-2002-0816 affects Hewlett-Packard Tru64 UNIX 5.x where the local privileged program "+su" is vulnerable to a buffer overflow triggered by a long username/argument. This allows local users to gain root privileges or cause instability, as described in CERT/HP documentation and CVE records. Expl...

CVE-2002-2003

The CVE-2002-2003 entry affects Compaq Tru64 systems: ypbind on Tru64 4.0F/4.0G/5.0A/5.1/5.1A allows a remote attacker to trigger a core dump by sending specific network packets generated by nmap. The connected records corroborate the core-dump impact and the network-based trigger across multiple...

CVE-2002-2071

CVE-2002-2071 affects Compaq Tru64 4.0d and allows remote denial of service against multiple services (telnet, FTP, ypbind, rpc.lockd, snmp, ttdbserverd, and possibly others) via a TCP SYN scan (e.g., using nmap). The available records describe the vulnerability as a DoS condition triggered by pa...

CVE-2002-2002

CVE-2002-2002 : The vulnerability is a buffer overflow in libc of Compaq Tru64 releases 4.0F, 5.0, 5.1 and 5.1A triggered by unusually long environment variables (LANG, LOCPATH). This can allow an attacker to execute arbitrary code. The issue is rooted in the Tru64 libc handling of environment va...

CVE-2002-1202

CVE-2002-1202 affects the routed component on HP Tru64 UNIX, from versions 4.0F through 5.1A. The vulnerability is described as an unknown issue that allows local and remote attackers to read arbitrary files. The connected documents do not provide concrete details beyond the affected product/vers...

CVE-2002-2004

CVE-2002-2004 affects the portmapper service in Compaq Tru64 operating system versions 4.0G and 5.0A. The root issue described in the connected records is a denial-of-service condition triggered by a flood of packets sent to the portmapper, exploitable remotely without authentication. This vulner...