ptl-2003-01: IBM DB2 LOAD Command Stack Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Pentest Limited Security Advisory IBM DB2 LOAD Command Stack Overflow Vulnerability Advisory Details - ---------------- Title: IBM DB2 LOAD Command Stack Overflow Vulnerability Announcement date: 1st October 2003 Advisory Reference: ptl-2003-01 CVE...

CVE-2003-0545

OpenSSL 0.9.7 is vulnerable to a double free via an invalid ASN.1 encoding in an SSL client certificate, allowing remote DoS and potential code execution. Multiple sources (CVE-2003-0545) confirm the issue as a vulnerability in OpenSSL 0.9.7 and note that advisories reference the 0.9.7c release a...

CVE-2003-0835

Multiple buffer overflows in asfhttprequest of MPlayer before 0.92 allows remote attackers to execute arbitrary code via an ASX header with a long hostname...

CVE-2003-0832

The set of connected sources confirms a concrete vulnerability: webfs before 1.20 contains a directory traversal issue that allows remote attackers to read arbitrary files by injecting .. sequences in the Hostname header. This affects webfs as the HTTP server component and is captured across mult...

CVE-2003-0544

OpenSSL 0.9.6 and 0.9.7 are affected by DoS vulnerabilities stemming from ASN.1 parsing issues, specifically CVE-2003-0544 (incorrect character counting in long-form ASN.1 inputs causing a crash via an SSL client certificate) and CVE-2003-0543 (integer overflow in ASN.1 handling). Affected produc...

CVE-2003-0964

This CVE entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2003-0543

CVE-2003-0543 affects OpenSSL 0.9.6/0.9.7: integer overflow in ASN.1 tag handling in SSL client certificates can cause a remote denial of service (crash). Related entries (CVE-2003-0544/0545) describe additional ASN.1 parsing DoS issues. OpenVAS/Nessus references corroborate these vulnerabilities...

CVE-2003-0545

Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an SSL client certificate with a certain invalid ASN.1 encoding...

CVE-2003-0543

Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service crash via an SSL client certificate with certain ASN.1 tag values...

CVE-2003-0830

CVE-2003-0830 describes a local privilege escalation in marbles (versions up to 1.0.2 and earlier) caused by a buffer overflow when processing the HOME environment variable. The issue allows a local user to gain privileges (e.g., gid 'games' on Debian woody) due to unsafe handling of HOME. Public...

CVE-2003-0833

CVE-2003-0833 affects the webfs web server (pre-1.20). The issue is a stack-based buffer overflow triggered by creating directories that result in a long pathname, allowing arbitrary code execution. Debian’s DSA-392-1 notes an update to webfs to fix this. OpenVAS/OSV entries corroborate the same ...

CVE-2003-0835

CVE-2003-0835 concerns MPlayer before 0.92. The vulnerability is a set of buffer overflows in the asf_http_request function that parses an ASX header with a long hostname, allowing a remote attacker to execute arbitrary code. The issue is exploitable via remote network access without authenticati...

LanSuite 2003 - Multiple Vulnerabilities

TITLE ===== 602Pro Lansuite 2003 - Multiple Vulnerabilities DESCRIPTION =========== “602Pro LAN SUITE is an easy-to-install and manage all-in-one server application. Its standards-based SMTP/POP3 e-mail server provides effective e-mail communication without the risk of destructive virus...

CVE-2003-0804

The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD-based systems, allows remote attackers on a local subnet to cause a denial of service resource starvation and panic via a flood of spoofed ARP requests...

CVE-2003-0804

The CVE-2003-0804 entry concerns the ARP processing path (arplookup) on FreeBSD and some BSD-derived systems. A local-subnet attacker can flood the system with spoofed ARP requests, exhausting resources and causing a denial of service/panic. Root cause: arplookup does not delete unneeded ARP cach...

CVE-2003-0786

The SSH1 PAM challenge response authentication in OpenSSH 3.7.1 and 3.7.1p1, when Privilege Separation is disabled, does not check the result of the authentication attempt, which can allow remote attackers to gain privileges...

CVE-2003-0786

The CVE-2003-0786 issue affects OpenSSH 3.7.1 and 3.7.1p1 where Privilege Separation being disabled causes the SSH1 PAM challenge/response authentication outcome to not be checked, enabling a remote attacker to potentially escalate privileges. The entry carries a BASE score of 10.0 (HIGH) with ne...

CVE-2003-0831

ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, which allows remote attackers to execute arbitrary code via a buffer overflow using certain files...

CVE-2003-0787

The PAM conversation function in OpenSSH 3.7.1 and 3.7.1p1 interprets an array of structures as an array of pointers, which allows attackers to modify the stack and possibly gain privileges...

CVE-2003-0831

Summary (supported by provided docs): ProFTPD versions 1.2.7 through 1.2.9rc2 contain a vulnerability in the ASCII translation during file transfers, where 1024-byte ASCII translation checks mishandle newline characters. This can enable a remote attacker to cause a buffer overflow and execute arb...