[SECURITY] [DSA 1622-1] New newsx packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1622-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst July 31, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1622-1] New newsx packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1622-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst July 31, 2008 http://www.debian.org/security/faq -...

CVE-2008-3252

Stack-based buffer overflow in the readarticle function in getarticle.c in newsx 1.6 allows remote attackers to execute arbitrary code via a news article containing a large number of lines starting with a period...

CVE-2008-3252

CVE-2008-3252 : In newsx 1.6, a stack-based buffer overflow in read_article (getarticle.c) allows remote code execution when processing a news article containing a large number of lines starting with a period. The issue is triggered by the pathological article input, leading to arbitrary code exe...

Snort Back Orifice Pre-Processor buffer overflow

Added: 08/28/2007 CVE: CVE-2005-3252 BID: 15131 OSVDB: 20034 Background Back Orifice is a remote system administration program for Windows. It is commonly installed by attackers or Trojan Horse programs for use as a backdoor. Snort is an open-source intrusion detection system. It includes a Back...

CVE-2007-3252

CVE-2007-3252 affects PortalApp. The issue is insufficient access control that stores sensitive information under the web root, enabling direct access to a database file (e.g., 8691.mdb) by remote attackers. The reports also reference a different vector than CVE-2004-1786 (8275.mdb). The connecte...

Private Wire Gateway Buffer Overflow

This exploits a buffer overflow in the ADMCREG.EXE used in the PrivateWire Online Registration Facility. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework This file may only be distributed as part of the Metasploit...

CVE-2006-3252

CVE-2006-3252 describes a buffer overflow in the PrivateWire Online Registration Facility (ADMCREG.EXE) used by PrivateWire VPN software up to version 3.7. The vulnerability allows remote attackers to execute arbitrary code via a long GET request. Public references show exploitation tooling in Me...

Snort Back Orifice Pre-Preprocessor Buffer Overflow

This module exploits a stack buffer overflow in the Back Orifice pre-processor module included with Snort versions 2.4.0, 2.4.1, 2.4.2, and 2.4.3. This vulnerability could be used to completely compromise a Snort sensor, and would typically gain an attacker full root or administrative privileges...

Immunity Canvas: STINKY

Name| stinky ---|--- CVE| CVE-2005-3252 Exploit Pack| CANVAS Description| Stinky Notes| CVE Name: CVE-2005-3252 VENDOR: SourceFire Repeatability: Single shot References: http://xforce.iss.net/xforce/alerts/id/207 CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3252 Date public...

Immunity Canvas: STINKY_DEBUG

Name| stinkydebug ---|--- CVE| CVE-2005-3252 Exploit Pack| CANVAS Description| Stinky Debug Notes| CVE Name: CVE-2005-3252 VENDOR: Stinky Repeatability: Single shot References: http://xforce.iss.net/xforce/alerts/id/207 CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3252 Date...

CVE-2005-3252

CVE-2005-3252 affects Snort’s Back Orifice preprocessor up through version 2.4.3. The vulnerability is a stack-based buffer overflow in the UDP handling of the BO preprocessor, enabling remote code execution. Publicized in multiple advisories and evidenced by exploit/module entries (Metasploit an...

Snort 2.4.0 < 2.4.3 - Back Orifice Pre-Preprocessor Remote (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Snort Back...

Snort 2.4.0 - 2.4.3 Back Orifice Pre-Preprocessor Remote Exploit

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

Snort 2.4.0 2.4.3 - Back Orifice Pre-Preprocessor Remote (Metasploit)

Snort 2.4.0 2.4.3 - Back Orifice Pre-Preprocessor Remote Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...