Vulnerabilities (CVE)

Filtered by vendor Michael Bischoff Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2004-0074 1 Michael Bischoff 1 Xsok 2023-12-10 4.6 MEDIUM N/A
Multiple buffer overflows in xsok 1.02 allows local users to gain privileges via (1) a long LANG environment variable, or (2) a long -xsokdir command line argument, a different vulnerability than CVE-2003-0949.
CVE-2003-0949 1 Michael Bischoff 1 Xsok 2023-12-10 4.6 MEDIUM N/A
xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary commands.