FreeBSD 'telnetd'守护进程远程缓冲区溢出漏洞

Bugtraq ID: 51182 CVE ID：CVE-2011-4862 FreeBSD是一款基于BSD的操作系统。 FreeBSD Telnet协议有一个对数据流进行加密的机制但其加密性不强，不能在任何关键性安全应用上使用 当通过TELNET协议提供加密密钥时，在拷贝密钥到固定缓冲区时没有对其长度进行校验，可触发缓冲区溢出。能连接telnetd守护程序的攻击者可以以守护进程上下文执行任意代码 0 Freebsd 9.0-STABLE Freebsd 9.0-RELEASE Freebsd 9.0-RC3 Freebsd 9.0-RC1 Freebsd 8.2-STABLE...

phpMyAdmin3 remote code execute exploit [Not jilei(chicken\'s ribs)]

No description provided by source. !/usr/bin/php ?php printr' +---------------------------------------------------------------------------+ pma3 - phpMyAdmin3 remote code execute exploit Not jileichicken's ribs by oldjunwww.oldjun.com welcome to www.t00ls.net mail: [email protected] Assigned CVE...

[SECURITY] [DSA 2372-1] heimdal security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2372-1 [email protected] http://www.debian.org/security/ Florian Weimer December 25, 2011 http://www.debian.org/security/faq -...

CVE-2011-5012

Heap-based buffer overflow in the Reflection FTP Client rftpcom.dll 7.2.0.106 and possibly other versions, as used in Attachmate Reflection 2008, Reflection 2011 R1 before 15.3.2.569 and R1 SP1 before, Reflection 2011 R2 before 15.4.1.327, Reflection Windows Client 7.2 SP1 before hotfix 7.2.1186,...

CVE-2011-5006

Stack-based buffer overflow in QQPlayer 3.2.845 allows remote attackers to execute arbitrary code via a crafted PnSize value in a MOV file...

CVE-2011-5010

apps/a3/cfgethping.cgi in the Ctek SkyRouter 4200 and 4300 allows remote attackers to execute arbitrary commands via shell metacharacters in the PINGADDRESS parameter for a "u" action...

CVE-2011-4862

Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications aka krb5-appl 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as...

CVE-2011-4601

familyfeedbag.c in the oscar protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on message data, which allows remote attackers to cause a denial of service application crash via a crafted 1 AIM or 2 ICQ message associated with buddy-list addition...

CVE-2011-4601

familyfeedbag.c in the oscar protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on message data, which allows remote attackers to cause a denial of service application crash via a crafted 1 AIM or 2 ICQ message associated with buddy-list addition...

CVE-2011-5010

CVE-2011-5010 affects Ctek SkyRouter 4200 and 4300 series routers. Affected component: apps/a3/cfg_ethping.cgi under action “u”, where remote attackers can inject shell metacharacters in the PINGADDRESS parameter to execute arbitrary commands. Public references note remote command execution with ...

CVE-2011-4601

CVE-2011-4601 affects Pidgin (libpurple) Oscar protocol plugin. The flaw is in family_feedbag.c where UTF-8 validation on message data is not performed, enabling a remote attacker to crash the application via crafted AIM/ICQ messages during buddy-list additions. Affected software version: Pidgin ...

CVE-2011-5012

Heap-based buffer overflow in the Reflection FTP Client rftpcom.dll 7.2.0.106 and possibly other versions, as used in Attachmate Reflection 2008, Reflection 2011 R1 before 15.3.2.569 and R1 SP1 before, Reflection 2011 R2 before 15.4.1.327, Reflection Windows Client 7.2 SP1 before hotfix 7.2.1186,...

CVE-2011-5007

CVE-2011-5007 is a stack-based buffer overflow in the 3S CoDeSys WebServer (CmpWebServer.dll) used by ABB AC500 PLC and other products. An overly long URI sent to port 8080 can overflow a stack buffer and allow a remote attacker to potentially execute arbitrary code. Affected versions include CoD...

CVE-2011-5003

CVE-2011-5003: Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) of Avid Media Composer 5.5.3 and earlier allows remote code execution via a long request to TCP port 4659 (MSF module notes it may run on 4660). Affected component: AvidPhoneticIndexer.exe; vulnerability ...

CVE-2011-5002

CVE-2011-5002 affects Final Draft 8 prior to 8.02. Multiple stack-based buffer overflows occur when parsing .fdx/.fdxt files containing long values in Word, Transition, Location, Extension, SceneIntro, TimeOfDay, or Character elements, enabling remote arbitrary code execution. Affected products i...

CVE-2011-4862

CVE-2011-4862 is a remote pre-authentication buffer overflow in the encryption handling of BSD telnetd: libtelnet/encrypt.c in telnetd on FreeBSD 7.3–9.0, krb5-appl 1.0.2 and earlier, Heimdal 1.5.1 and earlier, and GNU inetutils. The underlying bug allows arbitrary code execution by sending a lon...

CVE-2011-5004

CVE-2011-5004 describes an unrestricted file upload vulnerability in the Fabrik (com_fabrik) component for Joomla!, affecting versions before 2.1.1. The flaw resides in models/importcsv.php and can be exploited by remote authenticated users with Manager privileges to upload a file with an executa...

CVE-2011-5012

The CVE-2011-5012 entry describes a heap-based buffer overflow in Attachmate Reflection FTP Client (rftpcom.dll, v7.2.0.106 and possibly other versions) used in Reflection products. Under a LIST response with a long directory name, remote FTP servers could trigger arbitrary code execution. Affect...

CVE-2011-5006

QQPlayer MOV File Processing Buffer Overflow (CVE-2011-5006) affects QQPlayer 3.2.845. The vulnerability is a stack-based buffer overflow in MOV file processing triggered by a crafted PnSize value, enabling remote code execution. OpenVAS entries corroborate a buffer overflow risk in QQPlayer, but...

CVE-2011-5009

The CVE-2011-5009 vulnerability affects 3S CoDeSys CmpWebServer (Control service) as part of CoDeSys 3.4 SP4 Patch 2. It stems from insufficient validation of incoming HTTP requests, leading to a NULL pointer dereference when handling a crafted Content-Length in an HTTP POST or an invalid HTTP me...