[Full-disclosure] python <= 2.5.1 standart librairy multiples int overflow, heap overflow in imageop module

The module imageop contains a lots of int overflow, which result in heap overflow, and maybe memory dump. The files imageop.c and rbgimgmodule.c are examples. static PyObject imageoptovideoPyObject self, PyObject args int maxx, maxy, x, y, len; ........................ / int overflow here permit ...

Mercury32 4.52 IMAPD - SEARCH (Authenticated) Overflow

Mercury32 4.52 IMAPD - SEARCH Authenticated Overflow Z:\ExpmercurySEARCH.pl 127.0.0.1 143 void ph4nt0m.org Mercury/32 v4.52 IMAPD SEARCH command Post-Auth Stack Overflow Exploit Found & Code by void ph4nt0m.org S: OK mercury.ph4nt0m.org IMAP4rev1 Mercury/32 v4.52 server ready. C: pst06 LOGIN void...

Mercury/32 4.52 IMAPD SEARCH command Post-Auth Overflow Exploit

No description provided by source. Z:ExpmercurySEARCH.pl 127.0.0.1 143 void ph4nt0m.org Mercury/32 v4.52 IMAPD SEARCH command Post-Auth Stack Overflow Exploit Found Code by void ph4nt0m.org S: OK mercury.ph4nt0m.org IMAP4rev1 Mercury/32 v4.52 server ready. C: pst06 LOGIN void ph4nt0m.org S: pst06...

Mercury/32 4.52 IMAPD SEARCH command Post-Auth Overflow Exploit

Exploit for unknown platform in category remote exploits =============================================================== Mercury/32 4.52 IMAPD SEARCH command Post-Auth Overflow Exploit =============================================================== Z:\ExpmercurySEARCH.pl 127.0.0.1 143 void...

Mercury/32 4.52 IMAPD - 'SEARCH' (Authenticated) Overflow

Z:\ExpmercurySEARCH.pl 127.0.0.1 143 void ph4nt0m.org Mercury/32 v4.52 IMAPD SEARCH command Post-Auth Stack Overflow Exploit Found & Code by void ph4nt0m.org S: OK mercury.ph4nt0m.org IMAP4rev1 Mercury/32 v4.52 server ready. C: pst06 LOGIN void ph4nt0m.org S: pst06 OK LOGIN completed. C: pst06...

Mercury/32 v3.32-v4.51 SMTP Pre-Auth EIP Overwrite Exploit

No description provided by source. / Dreatica-FXP crew ---------------------------------------- Target : Mercury/32 SMTP Server Found by : [email protected], http://www.offensive-security.com ---------------------------------------- Exploit : Mercury/32 v3.32-v4.51 SMTP Pre-Auth EIP...

Mercury/32 v3.32-v4.51 SMTP Pre-Auth EIP Overwrite Exploit

Exploit for unknown platform in category remote exploits ========================================================== Mercury/32 v3.32-v4.51 SMTP Pre-Auth EIP Overwrite Exploit ========================================================== / Dreatica-FXP crew ----------------------------------------...

Mercury/32 Mail Server 3.32 < 4.51 - SMTP EIP Overwrite

/ Dreatica-FXP crew ---------------------------------------- Target : Mercury/32 SMTP Server Found by : [email protected], http://www.offensive-security.com ---------------------------------------- Exploit : Mercury/32 v3.32-v4.51 SMTP Pre-Auth EIP overwrite exploit Exploit date :...

mercurycrammd5-overflow.txt

/ Mercury/32 4.51 SMTPD CRAM-MD5 Pre-Auth Remote Stack OverflowUniversal Public Version 1.0 http://www.ph4nt0m.org 2007-08-22 Code by: Zhenhan.Liu Original POC: http://www.milw0rm.com/exploits/4294 Vuln Analysis: http://pstgroup.blogspot.com/2007/08/tipsmercury-smtpd-auth-cram-md5-pre.html Our...

Mercury/32 4.51 SMTPD CRAM-MD5 Pre-Auth Remote Overflow Exploit

No description provided by source. / Mercury/32 4.51 SMTPD CRAM-MD5 Pre-Auth Remote Stack OverflowUniversal Public Version 1.0 http://www.ph4nt0m.org 2007-08-22 Code by: Zhenhan.Liu Original POC: http://www.milw0rm.com/exploits/4294 Vuln Analysis:...

Mercury/32 4.51 SMTPD CRAM-MD5 Pre-Auth Remote Overflow Exploit

Exploit for unknown platform in category remote exploits =============================================================== Mercury/32 4.51 SMTPD CRAM-MD5 Pre-Auth Remote Overflow Exploit =============================================================== / Mercury/32 4.51 SMTPD CRAM-MD5 Pre-Auth Remote...

Mercury/32 Mail SMTPD 4.51 - SMTPD CRAM-MD5 Remote Overflow

/ Mercury/32 4.51 SMTPD CRAM-MD5 Pre-Auth Remote Stack OverflowUniversal Public Version 1.0 http://www.ph4nt0m.org 2007-08-22 Code by: Zhenhan.Liu Original POC: http://www.milw0rm.com/exploits/4294 Vuln Analysis: http://pstgroup.blogspot.com/2007/08/tipsmercury-smtpd-auth-cram-md5-pre.html Our...

Mercury/32 v4.52 / Mercury/NLM v1.49, August 2007

Mercury/32 v4.52 / Mercury/NLM v1.49, August 2007 Mercury/32 v4.52 is a security patch release, addressing a serious weakness in the MercuryS SMTP server specifically, a buffer overflow vulnerability in the way the server processes the AUTH command. All v4.x versions of Mercury earlier than v4.51...

bochs IA-32 emulator privilege escalation

Buffer overflow in network adapter emulation...

[SECURITY] [DSA 1351-] New bochs packages fix privilege escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1351-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 7th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1351-] New bochs packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 1351-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 7th, 2007 http://www.debian.org/security/faq -...

libgtop2 security update

CentOS Errata and Security Advisory CESA-2007:0765 An updated libgtop2 package that fixes a security issue and a functionality bug is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libgtop2...

[SECURITY] [DSA 1347-1] New xpdf packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1347-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 4th, 2007 http://www.debian.org/security/faq -...

DEBIAN-CVE-2007-3950

lighttpd 1.4.15, when run on 32 bit platforms, allows remote attackers to cause a denial of service daemon crash via unspecified vectors involving the use of incompatible format specifiers in certain debugging messages in the 1 modscgi, 2 modfastcgi, and 3 modwebdav modules...

CVE-2007-3950

lighttpd 1.4.15, when run on 32 bit platforms, allows remote attackers to cause a denial of service daemon crash via unspecified vectors involving the use of incompatible format specifiers in certain debugging messages in the 1 modscgi, 2 modfastcgi, and 3 modwebdav modules...