EMC AlphaStor Device Manager Format String (CVE-2013-0929)

A denial of service or executing arbitrary commands has been reported in EMC AlphaStor Device. The vulnerability is caused by insufficient sanitization when processing certain requests. A remote attacker could trigger this flaw by processing certain requests...

ESA-2013-008: EMC AlphaStor Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-008: EMC AlphaStor Multiple Vulnerabilities EMC Identifier: ESA-2013-008 EMC Identifier: NW146708 CVE Identifier: CVE-2013-0928, CVE-2013-0929 Severity Rating: See below for individual severity scores Affected product: EMC AlphaStor 4.0 prior...

CVE-2013-0929

Format string vulnerability in the vsnsprintf function in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote attackers to execute arbitrary code via format string specifiers in a command...

CVE-2013-0929

CVE-2013-0929 is a format-string vulnerability in EMC AlphaStor’s Device Manager (rrobotd.exe) that processes incoming commands. The issue arises in the _vsnsprintf function, allowing a remote attacker to execute arbitrary code via format string specifiers. Industry advisories document remote exp...

CVE-2012-0929

Schneider Electric Modicon Quantum PLC is affected by CVE-2012-0929 due to multiple buffer overflows in the PLC’s FTP and HTTP servers. Remote attackers can trigger a denial of service by sending malformed requests to either service. The publicly available details show the impact as DoS with netw...

CVE-2005-0929

creationtimestamp| type| source ---|---|--- 2010-07-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14453...

CVE-2010-0929

CVE-2010-0929 affects Perforce Server 2008.1 (p4s.exe) and is a remote denial-of-service vulnerability triggered by crafted data beginning with the byte sequence 0x4C, 0xB3, 0xFF, 0xFF, 0xFF. The Perforce service may crash a daemon when processing such input, per multiple sources. The available d...

CVE-2008-0929

CVE-2008-0929 is rejected/not used; this candidate was withdrawn and not a security issue.

CVE-2008-0929

...

CVE-2007-0929

CVE-2007-0929 affects the php rrd browser project, specifically versions prior to 0.2.1. The vulnerability is a directory traversal flaw that allows remote attackers to read arbitrary files by manipulating the p parameter with ".." sequences. The NVD entry documents a base CVSS v2 score of 5.0 (M...

CVE-2006-0929

CVE-2006-0929 affects the IMAP server of ArGoSoft Mail Server Pro 1.8.8.1. The issue is a directory traversal in the IMAP RENAME command where mailbox names are not filtered for "..", allowing an authenticated remote attacker to create/move folders arbitrarily on the affected system. The connecte...

CVE-2005-0929

PhotoPost PHP Pro 5.x contains a SQL injection vulnerability exploitable via the sl parameter in showmembers.php or the photo parameter in showphoto.php, allowing remote attackers to potentially execute arbitrary SQL commands. The issue is caused by unsafely handling user-supplied input in these ...

CVE-2004-0929

Heap-based buffer overflow in the OJPEGVSetField function in tifojpeg.c for libtiff 3.6.1 and earlier, when compiled with the OJPEGSUPPORT old JPEG support option, allows remote attackers to execute arbitrary code via a malformed TIFF image...

CVE-2004-0929

CVE-2004-0929 describes a heap-based buffer overflow in libtiff 3.6.1 and earlier when built with OJPEG_SUPPORT. The vulnerability occurs in OJPEGVSetField in tif_ojpeg.c and can allow a remote attacker to execute arbitrary code by presenting a malformed TIFF image. Affected products include libt...

CVE-2004-0929

Heap-based buffer overflow in the OJPEGVSetField function in tifojpeg.c for libtiff 3.6.1 and earlier, when compiled with the OJPEGSUPPORT old JPEG support option, allows remote attackers to execute arbitrary code via a malformed TIFF image...

CVE-2003-0929

Clearswift MAILsweeper before 4.3.15 does not properly detect and filter ZIP 6.0 encoded files, which allows remote attackers to bypass intended policy...

CVE-2003-0929

The provided data shows a concrete vulnerability: Clearswift MAILsweeper before version 4.3.15 fails to properly detect and filter ZIP 6.0 encoded files, allowing remote attackers to bypass policy. Affected product: MAILsweeper (SMTP) pre-4.3.15. Impact per sources: partial confidentiality, integ...

CVE-2002-0929

CVE-2002-0929 describes a buffer overflow in the DHCP server of NetWare 6.0 SP1 that allows remote attackers to cause a denial of service (reboot) by sending long DHCP requests. The affected component is the DHCP server on NetWare 6.0 SP1; the underlying cause is a buffer overflow vulnerability. ...

CVE-2001-0929

The CVE-2001-0929 issue affects Cisco IOS CBAC (Context-Based Access Control) / Cisco Secure Integrated Software in IOS 11.2P–12.2T. The root cause is improper checking of the IP protocol type, enabling remote attackers to bypass dynamic ACLs and gain access to denied traffic. Documented as Cisco...

CVE-2001-0929

Cisco IOS Firewall Feature set, aka Context Based Access Control CBAC or Cisco Secure Integrated Software, for IOS 11.2P through 12.2T does not properly check the IP protocol type, which could allow remote attackers to bypass access control lists...