Buffer overflow

In BlueZ 5.42, a buffer over-read was observed in "l2capdump" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash...

CVE-2016-9801

In BlueZ 5.42, a buffer overflow was observed in "setextctrl" function in "tools/parser/l2cap.c" source file when processing corrupted dump file...

Buffer overflow

In BlueZ 5.42, a buffer overflow was observed in "pincodereplydump" function in "tools/parser/hci.c" source file. The issue exists because "pin" array is overflowed by supplied parameter due to lack of boundary checks on size of the buffer from frame "pincodereplycp cp" parameter...

Buffer overflow

In BlueZ 5.42, a buffer over-read was identified in "l2cappacket" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash...

CVE-2016-9799

In BlueZ 5.42, a buffer overflow was observed in "pklgreadhci" function in "btsnoop.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash...

CVE-2016-9800

In BlueZ 5.42, a buffer overflow was observed in "pincodereplydump" function in "tools/parser/hci.c" source file. The issue exists because "pin" array is overflowed by supplied parameter due to lack of boundary checks on size of the buffer from frame "pincodereplycp cp" parameter...

CVE-2016-9801

In BlueZ 5.42, a buffer overflow was observed in "setextctrl" function in "tools/parser/l2cap.c" source file when processing corrupted dump file...

CVE-2016-9798

CVE-2016-9798 details (supported by connected docs): In BlueZ 5.42, a use-after-free exists in the conf_opt function (tools/parser/l2cap.c). The issue can be triggered by processing a corrupted dump file and results in a crash of hcidump. The available connected documents confirm the affected com...

CVE-2016-9803

In BlueZ 5.42, an out-of-bounds read was observed in "lemetaevdump" function in "tools/parser/hci.c" source file. This issue exists because 'subevent' which is used to read correct element from 'evlemetastr' array is overflowed...

CVE-2016-9802

CVE-2016-9802 is a BlueZ 5.42 vulnerability in the l2cap_packet function (monitor/packet.c) causing a buffer over-read when processing a corrupted dump, which can crash btmon. Connected documents (EulerOS/NE AMD/OpenVAS entries) corroborate BlueZ 5.42 issues affecting similar components (e.g., l2...

CVE-2016-9797

In BlueZ 5.42, a buffer over-read was observed in "l2capdump" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash...

CVE-2016-9798

In BlueZ 5.42, a use-after-free was identified in "confopt" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash...

CVE-2016-9802

In BlueZ 5.42, a buffer over-read was identified in "l2cappacket" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash...

CVE-2016-9803

CVE-2016-9803 concerns BlueZ 5.42 where an out-of-bounds read occurs in le_meta_ev_dump (tools/parser/hci.c). The issue arises because the variable read index, ‘subevent’, overflows the ev_le_meta_str array, causing a read past the intended bounds. The connected documents corroborate this flaw an...

CVE-2008-4045

Multiple cross-site scripting XSS vulnerabilities in @Mail 5.42 allow remote attackers to inject arbitrary web script or HTML via the 1 file and 2 HelpFile parameters to parse.php, the 3 Folder and 4 start parameters to showmail.php, and the 5 abookview parameter to abook.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in @Mail 5.42 allow remote attackers to inject arbitrary web script or HTML via the 1 file and 2 HelpFile parameters to parse.php, the 3 Folder and 4 start parameters to showmail.php, and the 5 abookview parameter to abook.php...

CVE-2008-4045

Multiple cross-site scripting XSS vulnerabilities in @Mail 5.42 allow remote attackers to inject arbitrary web script or HTML via the 1 file and 2 HelpFile parameters to parse.php, the 3 Folder and 4 start parameters to showmail.php, and the 5 abookview parameter to abook.php...

CVE-2008-4045

CVE-2008-4045 involves multiple cross-site scripting (XSS) vulnerabilities in @Mail 5.42. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific parameters: parse.php (file and HelpFile), showmail.php (Folder and start), and abook.php (abookview). The NVD e...

atmail542-xss.txt

======================================================================= . .. | | / / | | | | / \ / / /\ / / \ | | | / / \ /\ \| | / // / /\ \ / / / // http://wwwlowsec.org ========================================================================...

CVE-2001-1269

CVE-2001-1269 affects Info-ZIP UnZip 5.42 and earlier. The vulnerability allows an attacker to overwrite arbitrary files during archive extraction by using filenames that begin with the slash character (/) in the ZIP archive. The issue is rooted in how the extractor handles archive filenames, ena...