Show filters
23 Total Results
Displaying 1-10 of 23
Sort by:
Attacker Value
Unknown
CVE-2013-4854
Disclosure Date: July 29, 2013 (last updated October 05, 2023)
The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.
0
Attacker Value
Unknown
CVE-2012-1823
Disclosure Date: May 11, 2012 (last updated July 17, 2024)
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.
0
Attacker Value
Unknown
CVE-2006-5558
Disclosure Date: October 27, 2006 (last updated October 04, 2023)
Format string vulnerability in the swask command in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via format string specifiers in the -s argument. NOTE: this might be a duplicate of CVE-2006-2574, but the details relating to CVE-2006-2574 are too vague to be certain.
0
Attacker Value
Unknown
CVE-2006-5557
Disclosure Date: October 27, 2006 (last updated October 04, 2023)
Stack-based buffer overflow in the (1) swpackage and (2) swmodify commands in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via a long -S argument. NOTE: this might be a duplicate of CVE-2006-2574, but the details relating to CVE-2006-2574 are too vague to be certain.
0
Attacker Value
Unknown
CVE-2006-5556
Disclosure Date: October 27, 2006 (last updated October 04, 2023)
Buffer overflow in the localtime_r function, and certain other functions, in libc in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via a long TZ environment variable.
0
Attacker Value
Unknown
CVE-2006-5452
Disclosure Date: October 23, 2006 (last updated October 04, 2023)
Buffer overflow in dtmail on HP Tru64 UNIX 4.0F through 5.1B and HP-UX B.11.00 through B.11.23 allows local users to execute arbitrary code via a long -a (aka attachment) argument.
0
Attacker Value
Unknown
CVE-2006-4188
Disclosure Date: August 17, 2006 (last updated October 04, 2023)
Unspecified vulnerability in the LP subsystem in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of service via unknown vectors.
0
Attacker Value
Unknown
CVE-2006-3335
Disclosure Date: July 03, 2006 (last updated October 04, 2023)
Unspecified vulnerability in mkdir in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows local users to gain privileges via unknown attack vectors.
0
Attacker Value
Unknown
CVE-2006-2574
Disclosure Date: May 24, 2006 (last updated October 04, 2023)
Multiple unspecified vulnerabilities in Software Distributor in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allow local users to gain privileges via unspecified attack vectors.
0
Attacker Value
Unknown
CVE-2006-1389
Disclosure Date: March 25, 2006 (last updated February 22, 2025)
Unspecified vulnerability in swagentd in HP-UX B.11.00, B.11.04, and B.11.11 allows remote attackers to cause a denial of service (application crash) via unspecified vectors.
0
