Searching modes software vulnerabilities

Red Hat Linux 6.0 installs the /dev/pts file sy

installs | /dev/pts | insecure | devices | system | allows | local | write | users | other | Linux | modes | which | file | Red | tty | Hat |

Red Hat Linux 6.0 installs the /dev/pts file system with insecure modes, which allows local users to write to other tty devices.


Multiple buffer overflows in BitchX IRC client

overflows | malicious | Multiple | earlier | service | servers | 10-0c19 | buffer | BitchX | denial | client | remote | cause | allow | IRC |

Multiple buffer overflows in BitchX IRC client 1.0-0c19 and earlier allow remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via long hostnames, nicknames, or channel names, which are not properly handled by the functions (1) send_ctcp, (2) cannot_join_channel, (3) cluster, (4) BX_compress_modes, (5) handle_oper_vision, and (6) ban_it.


Privacyware Privatefirewall 3.0 does not block

Privatefirewall | Privacyware | attackers | Traffic" | Internet | identify | services | incoming | certain | running | packets | "Filter | remote | allows | scans | block | modes | which | Xmas | does | Deny | not | via | FIN |

Privacyware Privatefirewall 3.0 does not block certain incoming packets when in "Filter Internet Traffic" or Deny Internet Traffic" modes, which allows remote attackers to identify running services via FIN scans or Xmas scans.


Cross-site scripting (XSS) vulnerability in par

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to inject arbitrary web script or HTML via the file parameter.


parser.php in phpCMS 1.2.1 and earlier, with no

parserphp | phpCMS |

parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to gain sensitive information via an invalid file parameter, which reveals the web server's installation path.


Buffer underflow in the PHP_FILTER_TRIM_DEFAULT

PHP_FILTER_TRIM_DEFAULT | extension | filtering | underflow | Buffer | macro |

Buffer underflow in the PHP_FILTER_TRIM_DEFAULT macro in the filtering extension (ext/filter) in PHP 5.2.0 allows context-dependent attackers to execute arbitrary code by calling filter_var with certain modes such as FILTER_VALIDATE_INT, which causes filter to write a null byte in whitespace that precedes the buffer.


ircu 2.10.12.03 and 2.10.12.04 does not associa

ircu |

ircu 2.10.12.03 and 2.10.12.04 does not associate a timestamp with ops privilege on an unused channel (zannel), which allows remote attackers to (1) set or remove certain channel modes via a "netriding" attack or (2) take over a channel by joining an unlinked server with the A/Upass and then setting a new Apass.


JFFS2, as used on One Laptop Per Child (OLPC) b

Laptop | Child | JFFS2 | used | Per | One |

JFFS2, as used on One Laptop Per Child (OLPC) build 542 and possibly other Linux systems, when POSIX ACL support is enabled, does not properly store permissions during (1) inode creation or (2) ACL setting, which might allow local users to access restricted files or directories after a remount of a filesystem, related to "legacy modes" and an inconsistency between dentry permissions and inode permissions.


Software vulnerabilities results 1 to 9 of 9     
Page: 1