CVE-2009-1252

Stack-based buffer overflow in the cryptorecv function in ntpcrypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field...

CVE-2009-1252

Stack-based buffer overflow in the cryptorecv function in ntpcrypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field...

CVE-2009-1252

Stack-based buffer overflow in the cryptorecv function in ntpcrypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field...

CVE-2009-1252

CVE-2009-1252 describes a stack-based buffer overflow in ntpd’s ntp_crypto.c (function crypto_recv) when autokey is enabled. A crafted NTP extension-field packet can remote-execute code. Affected: NTP daemon (ntpd) before 4.2.4p7 and 4.2.5 before 4.2.5p74 with OpenSSL/autokey enabled. Impact per ...

[SECURITY] [DSA 1801-1] New ntp packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1801-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 19, 2009 http://www.debian.org/security/faq -...

RHEL 5 : ntp (RHSA-2009:1039)

An updated ntp package that fixes two security issues is now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The Network Time Protocol NTP is used to synchronize a computer's time with a referenced tim...

Critical: Red Hat Security Advisory: ntp security update

An updated ntp package that fixes two security issues is now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Network Time Protocol NTP is used to synchronize a computer's time with a referenced time...

ntp security update

4.2.2p1-9.el53.2 - fix buffer overflow when parsing Autokey association message 500783, CVE-2009-1252 - fix buffer overflow in ntpq 500783, CVE-2009-0159...

Abee Chm eBook Creator 2.11 - Filename Local Stack Overflow

Abee Chm eBook Creator 2.11 - Filename Local Stack Overflow exploit.py Abee Chm eBook Creator 2.11 Stack overflow Exploit By:Encrypt3d.M!nd it's the same exploit i wrote for chm maker,everything is the same!! but there's a lil note that when importing 'DevilInside.chmprj' a message will pops up a...

Abee Chm Maker 1.9.5 - '.CMP' Local Stack Overflow

exploit.py Abee Chm Maker 1.9.5 Stack overflow Exploit By:Encrypt3d.M!nd After importing "Devilinside.cmp" file into the program go to FileMake CHM.. Then...watch : . i've used SEH overwrite method to make it more stable. btw:it's universal so don't bother your self with finding addresses ; ns =...

Abee Chm Maker 1.9.5 (CMP File) Stack overflow Exploit

Exploit for unknown platform in category local exploits ====================================================== Abee Chm Maker 1.9.5 CMP File Stack overflow Exploit ====================================================== exploit.py Abee Chm Maker 1.9.5 Stack overflow Exploit By:Encrypt3d.M!nd After...

raiden-dos.txt

RaidenFTPD V2.4 build 3620 exploit probaly heap overflow xdmnt 2008 -- coding: windows-1252 -- import socket import sys, time evilcwd = "/"+"\x22"255 evildir = "X"505 def helpinfo: print "Usage: ShaoKahn \n" print "Note: anonymous is enought" def dosithostname, username, passwd: sock =...

CVE-2008-1252

The Speedport W500 router’s login page (b_banner.stm) exposes the logon password via the pwd field in the HTML source, enabling remote attackers to obtain credentials over the network. No remediation details are provided in the supplied documents.

Debian Security Advisory DSA 1252-1 (vlc)

The remote host is missing an update to vlc announced via advisory DSA 1252-1. Kevin Finisterre discovered several format string problems in vlc, a multimedia player and streamer, that could lead to the execution of arbitrary code. OpenVAS Vulnerability Test $Id: deb12521.nasl 6616 2017-07-07...

CVE-2006-7223

PreviewAction in XWiki 0.9.543 through 0.9.1252 does not set the Author field to the identity of the user who last modified a document, which allows remote authenticated users without programming rights to execute arbitrary code by selecting a document whose author has programming rights, modifyi...

CVE-2007-1252

Symantec Mail Security for SMTP (SMS for SMTP) vulnerable to a buffer overflow when processing malformed email headers in version 5.0 before Patch 175. The issue can crash the affected service and may allow arbitrary code execution. Exploitation, if achieved, would grant an attacker full control ...

Debian DSA-1252-1 : vlc - format string

Kevin Finisterre discovered several format string problems in vlc, a multimedia player and streamer, that could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

CVE-2006-1252

CVE-2006-1252 affects Light Weight Calendar (LWC) 1.0, where an eval injection in cal.php allows remote attackers to execute arbitrary PHP code via the date parameter to index.php. This is a remote code execution vulnerability with CVSSv2 base score 7.5 (HIGH) and network attack vector with no au...

CVE-2003-1252

The CVE-2003-1252 entry covers a vulnerability in register.php of S8Forum 3.0 where remote attackers can trigger arbitrary PHP execution by creating a user whose name ends in .php and placing commands in the E-mail field. This creates a web-accessible .php file that can be invoked to run commands...

iDEFENSE Security Advisory 2005-05-24.4

Ipswitch IMail Web Calendaring Arbitrary File Read Vulnerability iDEFENSE Security Advisory 05.24.05 www.idefense.com/application/poi/display?id=242&type=vulnerabilities May 24, 2005 I. BACKGROUND Ipswitch Collaboration Suite ICS is a comprehensive communication and collaboration solution for...