182 matches found
DSA-703-1 krb5 - buffer overflows
Bulletin has no description...
RHEL 4 : krb5 (RHSA-2005:330)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:330 advisory. Kerberos is a networked authentication system which uses a trusted third party a KDC to authenticate clients and servers to each other. The...
[SECURITY] [DSA 697-1] New netkit-telnet packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 697-1 [email protected] http://www.debian.org/security/ Martin Schulze March 29th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 697-1] New netkit-telnet packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 697-1 [email protected] http://www.debian.org/security/ Martin Schulze March 29th, 2005 http://www.debian.org/security/faq -...
Debian DSA-697-1 : netkit-telnet - buffer overflow
Gael Delalleau discovered a buffer overflow in the handling of the LINEMODE suboptions in telnet clients. This can lead to the execution of arbitrary code when connected to a malicious server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
RHEL 4 : telnet (RHSA-2005:327)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:327 advisory. The telnet package provides a command line telnet client. The telnet-server package includes a telnet daemon, telnetd, that supports remote...
CVE-2005-0469
CVE-2005-0469 is a buffer overflow in the LINEMODE handling path (slc_add_reply) in BSD-based Telnet clients. The connected Mariner entry notes CVE-2005-0469 affecting telnet 0.17-81 with no patch available yet. The root cause is a buffer overflow triggered by replies containing a large number of...
CVE-2004-0469
Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 and NG FP3 HFA-325, or VPN-1 SecuRemote/SecureClient R56, may allow remote attackers to execute arbitrary code during VPN tunnel negotiation...
CVE-2004-0469
The CVE-2004-0469 issue affects Check Point VPN-1 and FireWall-1 NG products, with a buffer overflow in the ISAKMP functionality that could let remote attackers execute arbitrary code during VPN tunnel negotiation. Affected versions are VPN-1/FireWall-1 before R55 HFA-03, R54 HFA-410 and NG FP3 H...
MS03-023: Buffer Overrun In HTML Converter Could Allow Code Execution (823559)
The remote host contains a version of the HTML Converter module that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and enticing a victim to visit this web page. C Tenable Network Security, Inc. include"compat.inc"; if description...
CVE-2003-0469
Buffer overflow in the HTML Converter HTML32.cnv on various Windows operating systems allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via cut-and-paste operation, as demonstrated in Internet Explorer 5.0 using a long "align" argument in an HR tag...
CVE-2003-0469
Buffer overflow in the HTML Converter HTML32.cnv on various Windows operating systems allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via cut-and-paste operation, as demonstrated in Internet Explorer 5.0 using a long "align" argument in an HR tag...
CVE-2003-0469
CVE-2003-0469 describes a buffer-overflow in the HTML Converter (html32.cnv) used by Windows applications (via IE and other components). The flaw can be triggered during a cut‑and‑paste operation with a crafted HR tag (align attribute), potentially allowing remote code execution with the privileg...
CVE-2002-0469
Ecartis formerly Listar 1.0.0 in snapshot 20020125 and earlier does not properly drop privileges when Ecartis is installed setuid-root, "lock-to-user" is not set, and ecartis is called by certain MTA's, which could allow local users to gain privileges...
CVE-2002-0469
Affected product: Ecartis (formerly Listar) 1.0.0 in snapshot 20020125 and earlier. Issue: when installed setuid-root and lock-to-user is not set, and ecartis is invoked by certain MTAs, privileges are not properly dropped, potentially allowing local privilege escalation. Impact: local users coul...
CVE-2001-0469
rwho daemon rwhod in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service via malformed packets with a short length...
CVE-2001-0469
The CVE concerns the rwho/rwhod service on FreeBSD 4.2 and earlier, where remote attackers can cause a denial of service by sending malformed packets with a short length. The available sources reiterate this impact but do not provide exploit details, affected versions beyond the FreeBSD 4.2 era, ...
CVE-2001-0469
rwho daemon rwhod in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service via malformed packets with a short length...
CVE-2000-0469
The vulnerability concerns Selena Sol WebBanner 4.0, where a path traversal flaw (.. sequence) enables remote attackers to read arbitrary files. Affected software: Selena Sol WebBanner 4.0. The description specifies reading arbitrary files via directory traversal, but no further technical details...