Show filters
75 Total Results
Displaying 71-75 of 75
Sort by:
Attacker Value
Unknown

CVE-2005-2259

Disclosure Date: July 13, 2005 (last updated February 22, 2025)
The dispallclosed2 function in dispallclosed.pl for multiple USANet Creations products, including (1) USANet Shopping Mall Software, (2) Domain Name Auction Software, (3) Standard Classified Ads Software, and (4) MakeBid Reverse Auction allows remote attackers to execute arbitrary code via shell metacharacters in the DISPCLOSED parameter.
0
Attacker Value
Unknown

CVE-2003-0580

Disclosure Date: August 18, 2003 (last updated February 22, 2025)
Buffer overflow in uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier allows the uvadm user to execute arbitrary code via a long -uv.install command line argument.
0
Attacker Value
Unknown

CVE-2003-0578

Disclosure Date: August 18, 2003 (last updated February 22, 2025)
cci_dir in IBM U2 UniVerse 10.0.0.9 and earlier creates hard links and unlinks files as root, which allows local users to gain privileges by deleting and overwriting arbitrary files.
Attacker Value
Unknown

CVE-2003-0579

Disclosure Date: August 18, 2003 (last updated February 22, 2025)
uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier trusts the user-supplied -uv.install command line option to find and execute the uv.install program, which allows local users to gain privileges by providing a pathname that is under control of the user.
0
Attacker Value
Unknown

CVE-2002-1450

Disclosure Date: July 31, 2002 (last updated February 22, 2025)
IBM UniVerse with UV/ODBC allows attackers to cause a denial of service (client crash or server CPU consumption) via a query with an invalid link between tables, possibly via a buffer overflow.
0