117 matches found
CVE-2010-4221
Multiple stack-based buffer overflows in the prnetiotelnetgets function in netio.c in ProFTPD before 1.3.3c allow remote attackers to execute arbitrary code via vectors involving a TELNET IAC escape character to a 1 FTP or 2 FTPS server...
ProFTPD 1.3.2rc3 - 1.3.3b Telnet IAC Buffer Overflow (FreeBSD)
This module exploits a stack-based buffer overflow in versions of ProFTPD server between versions 1.3.2rc3 and 1.3.3b. By sending data containing a large number of Telnet IAC commands, an attacker can corrupt memory and execute arbitrary code. Module Options msf use...
Mac OS X 10.5.6 Update / Mac OS X Security Update 2008-008
The remote host is missing Mac OS X 10.5.6 Update / Mac OS X Security Update 2008-008. One or more of the following components are affected: ATS BOM CoreGraphics CoreServices CoreTypes Flash Player Plug-in Kernel Libsystem Managed Client networkcmds Podcast Producer UDF OpenVAS Vulnerability Test...
CVE-2009-4221
CVE-2009-4221 affects phpBazar’s classified.php vulnerability in versions up to 2.1.1fix and earlier, where the catid parameter allows remote SQL injection due to unsanitized input. This enables arbitrary SQL execution as described in the vulnerability text. No explicit remediation details are pr...
CVE-2009-4221
SQL injection vulnerability in classified.php in phpBazar 2.1.1fix and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2008-3767...
CVE-2009-4221
creationtimestamp| type| source ---|---|--- 2009-11-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10245...
CVE-2008-4221
The strptime API in Libsystem in Apple Mac OS X before 10.5.6 allows context-dependent attackers to cause a denial of service memory corruption and application crash or execute arbitrary code via a crafted date string, related to improper memory allocation...
CVE-2008-4221
CVE-2008-4221 affects Apple Mac OS X up to version 10.5.5 (prior to 10.5.6). The vulnerability lies in the strptime API in Libsystem, related to improper memory allocation, allowing context-dependent attackers to cause memory corruption, a denial of service, or arbitrary code execution via a craf...
Motorola Timbuktu login request buffer overflow
Added: 05/15/2008 CVE: CVE-2007-4221 BID: 25454 OSVDB: 40124 Background Motorola Timbuktu is remote control software for Windows and Mac. It runs a service which listens for connections on port 407/TCP or 407/UDP. Problem A buffer overflow vulnerability when processing login requests allows remot...
CVE-2007-4221
Motorola Timbuktu Pro for Windows (pre-8.6.5) is affected by multiple buffer overflows related to login handling and Scanner/HELLO processing. The underlying issue is a boundary/heap overflow caused by malformed login requests (e.g., overly long user names) and malformed protocol interactions, en...
iDefense Security Advisory 08.27.07: Motorola Timbuktu Multiple Buffer Overflow Vulnerabilities
Motorola Timbuktu Multiple Buffer Overflow Vulnerabilities iDefense Security Advisory 08.27.07 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 27, 2007 I. BACKGROUND Motorola Inc.'s Timbuktu Pro is a remote control software which allows remote access to a computer's desktop. It is...
IBM Access Support eGatherer ActiveX control buffer overflow
Overview The IBM Access Support eGatherer ActiveX control contains a buffer overflow vulnerability, which may allow a remote unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The IBM Access Support eGatherer ActiveX control has the ability to collect system...
IBM eGatherer <= 3.20.0284.0 (ActiveX) Remote Code Execution Exploit
No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...
CVE-2006-4221
Summary: CVE-2006-4221 is an IBM Access Support eGatherer ActiveX control vulnerability (RunEgatherer) causing a stack-based buffer overflow via a long filename, enabling remote code execution. Affected: IBM eGatherer ActiveX before version 3.20.0284.0; impact is code execution with the caller's ...
CVE-2005-4221
SQL injection vulnerability in link.php in Arab Portal System 2 Beta 2 allows remote attackers to execute arbitrary SQL commands via the 1 PHPSESSID session ID or 2 REQUESTURI query string...
CVE-2005-4221
CVE-2005-4221 concerns an SQL injection in Arab Portal System 2 Beta 2, specifically in link.php. The vulnerability allows remote attackers to inject arbitrary SQL commands via the PHPSESSID (session ID) or the REQUEST_URI (query string). Public references confirm the issue and its CVE entry, but...
