CVE-2013-7386

The CVE-2013-7386 entry concerns BOINC’s PROJECT::write_account_file in client/cs_account.cpp. A format-string vulnerability in the gui_urls item of an account file could allow a remote attacker to crash the service or potentially execute arbitrary code. Affected software is BOINC client (around ...

CVE-2011-5280

Multiple stack-based buffer overflows in BOINC 6.13.x allow remote attackers to cause a denial of service crash via a long trickle-up to 1 client/cstrickle.cpp or 2 db/dbbase.cpp...

CVE-2013-2298

Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the scheduler...

CVE-2011-5280

Multiple stack-based buffer overflows in BOINC 6.13.x allow remote attackers to cause a denial of service crash via a long trickle-up to 1 client/cstrickle.cpp or 2 db/dbbase.cpp...

CVE-2013-2019

CVE-2013-2019 affects BOINC 6.10.58–6.12.34. A stack-based buffer overflow occurs when processing multiple “file_signature” elements, enabling remote attackers to impact the system with no authentication. Exploit details are not provided in the documents. The vulnerability’s impact is described a...

CVE-2013-7386

Format string vulnerability in the PROJECT::writeaccountfile function in client/csaccount.cpp in BOINC, possibly 7.2.33, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via format string specifiers in the guiurls item in an account file...

PT-2014-2580 · Alt Linux Team +2 · Alt Linux +1

Name of the Vulnerable Software and Affected Versions: BOINC versions 7.x ALT Linux affected versions not specified Description: The issue is related to multiple stack-based buffer overflows in the XML parser, which can be triggered by a crafted XML file. This is associated with the scheduler...

PT-2014-2196 · University Of California · Boinc

Name of the Vulnerable Software and Affected Versions: BOINC versions 6.13.x Description: The issue is related to multiple stack-based buffer overflows that can be triggered by remote attackers, leading to a denial of service crash. This can occur via a long trickle-up to specific files, includin...

PT-2014-2527 · University Of California · Boinc

Name of the Vulnerable Software and Affected Versions: BOINC versions 6.10.58 through 6.12.34 Description: A stack-based buffer overflow issue allows remote attackers to have an unspecified impact via multiple file signature elements. Recommendations: For BOINC versions 6.10.58 through 6.12.34,...

Fedora Update for boinc-client FEDORA-2013-23720

Check for the Version of boinc-client OpenVAS Vulnerability Test Fedora Update for boinc-client FEDORA-2013-23720 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for boinc-client FEDORA-2013-23720

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 19 Update: boinc-client-7.2.33-2.git1994cc8.fc19

The Berkeley Open Infrastructure for Network Computing BOINC is an open- source software platform which supports distributed computing, primarily in the form of "volunteer" computing and "desktop Grid" computing. It is well suited for problems which are often described as "trivially parallel". BO...

[SECURITY] Fedora 20 Update: boinc-client-7.2.33-2.git1994cc8.fc20

The Berkeley Open Infrastructure for Network Computing BOINC is an open- source software platform which supports distributed computing, primarily in the form of "volunteer" computing and "desktop Grid" computing. It is well suited for problems which are often described as "trivially parallel". BO...

Fedora 19 : boinc-client-7.2.33-2.git1994cc8.fc19 (2013-23720)

Updates Boinc to 7.2.33. Remove the 'Can't connect to boinc-client' notify at startup. Fix 'GPU not detected' problem. Fix security vulnerability 957811 Please note for 'GPU not detected' bug If you still have this problem after updating, you need to run boinc with your user, not with boinc user...

PT-2014-3410 · University Of California +1 · Boinc +1

Name of the Vulnerable Software and Affected Versions: BOINC version 7.2.33 Description: A format string issue in the PROJECT::write account file function in client/cs account.cpp allows remote attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers ...

BOINC Manager (SETI at Home) version 7.0.64 Field stack based BOF

BOINC Manager SETI at Home version 7.0.64 Field stack based buffer overflow exploit. Exploit Title: BOINC Manager 7.0.64 Field stack based buffer overflow Date: 26.05.2013 Exploit Author: email protected Solutions Vendor Homepage: http://boinc.berkeley.edu/ Software Link:...

BOINC Manager (Seti@home) 7.0.64 - Field Buffer Overflow (SEH)

BOINC Manager Seti@home 7.0.64 - Field Buffer Overflow SEH Exploit Title: BOINC Manager 7.0.64 Field stack based buffer overflow Date: 26.05.2013 Exploit Author: xisone@STM Solutions Vendor Homepage: http://boinc.berkeley.edu/ Software Link:...

BOINC Manager (Seti@home) 7.0.64 - Field Buffer Overflow (SEH)

Exploit Title: BOINC Manager 7.0.64 Field stack based buffer overflow Date: 26.05.2013 Exploit Author: xisone@STM Solutions Vendor Homepage: http://boinc.berkeley.edu/ Software Link: http://boinc.berkeley.edu/dl/boinc7.0.64windowsintelx86.exe Version: 7.0.64 for Windows Tested on: Windows XP SP3...

BOINC Manager 7.0.64 Buffer Overflow

Exploit Title: BOINC Manager 7.0.64 Field stack based buffer overflow Date: 26.05.2013 Exploit Author: xisone@STM Solutions Vendor Homepage: http://boinc.berkeley.edu/ Software Link: http://boinc.berkeley.edu/dl/boinc7.0.64windowsintelx86.exe Version: 7.0.64 for Windows Tested on: Windows XP SP3...

openSUSE Security Update : boinc-client (boinc-client-437)

The boinc-client was missing return value checks for openssl function calls. CVE-2009-0126 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update boinc-client-437. The text description of this plugin...