CVE-2008-4316

Multiple integer overflows in glib/gbase64.c in GLib before 2.20 allow context-dependent attackers to execute arbitrary code via a long string that is converted either 1 from or 2 to a base64 representation...

Integer overflow

Multiple integer overflows in Evolution Data Server aka evolution-data-server before 2.24.5 allow context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation in 1 addressbook/libebook/e-vcard.c in evc or 2 camel/camel-mime-utils.c in libcam...

DEBIAN-CVE-2008-4316

Multiple integer overflows in glib/gbase64.c in GLib before 2.20 allow context-dependent attackers to execute arbitrary code via a long string that is converted either 1 from or 2 to a base64 representation...

DEBIAN-CVE-2009-0587

Multiple integer overflows in Evolution Data Server aka evolution-data-server before 2.24.5 allow context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation in 1 addressbook/libebook/e-vcard.c in evc or 2 camel/camel-mime-utils.c in libcam...

CVE-2009-0585

CVE-2009-0585 : An integer overflow in libsoup’s soup_base64_encode (soup-misc.c) affects libsoup 2.x before 2.2.x and before 2.24 on 2.x, allowing context-dependent attackers to execute arbitrary code via a long input string converted to Base64. Public disclosures reference multiple advisories (...

CVE-2008-4316

Multiple integer overflows in glib/gbase64.c in GLib before 2.20 allow context-dependent attackers to execute arbitrary code via a long string that is converted either 1 from or 2 to a base64 representation...

CVE-2009-0587

Multiple integer overflows in Evolution Data Server aka evolution-data-server before 2.24.5 allow context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation in 1 addressbook/libebook/e-vcard.c in evc or 2 camel/camel-mime-utils.c in libcam...

CVE-2008-4316

Multiple integer overflows in glib/gbase64.c in GLib before 2.20 allow context-dependent attackers to execute arbitrary code via a long string that is converted either 1 from or 2 to a base64 representation...

GNOME glib Base64编码解码多个整数溢出漏洞

BUGTRAQ ID: 34100 CVECAN ID: CVE-2008-4316,CVE-2009-0586,CVE-2009-0587,CVE-2009-0585 GLib是GTK+和GNOME工程的基础底层核心程序库，是一个综合用途的轻量级的C程序库。 glib库的Base64编码解码函数在处理超长字符串时没有正确地分配内存，在所有情况下都会使用用户提供值所计算出的长度分配堆内存： gmallocusersuppliedlength 3 / 4 + somesmallnum 由于算术运算的评估次序，长度在除以4之前首先乘以3，因此用于分配长度的计算参数可能溢出，导致分配不足的区域...

PT-2009-3229 · Gstreamer +1 · Gst-Plugins-Base +1

Name of the Vulnerable Software and Affected Versions: gst-plugins-base versions prior to 0.10.23 Description: The issue is related to an integer overflow in the gst vorbis tag add coverart function, which can lead to a heap-based buffer overflow. This occurs when a crafted COVERART tag, converte...

ShopEx 4.7.2 0day-vulnerability warning-the black bar safety net

Author: unknown I am nameless, and this time write a shopex4. 7. 2 vulnerability Has been notified of the official, today it is issued to, First syssite/shopadmin/orderservice. php background this document does not verify the identity of the user, It is important$vid parameter is not filtered...

Trend micro - IWSVA/IWSS - Authorization module password leak

There is possbile get username and password from "Proxy-Authorization" header, which is not correctly removed when authorization header sends WMP. Requirements: - IWSVA/IWSS basic authorization on - Client is using WMP 8-11 as video player - Standalone proxy if upstream proxy is used,...

Buffer overflow

Multiple buffer overflows in RealNetworks Helix Server and Helix Mobile Server 11.x before 11.1.8 and 12.x before 12.0.1 allow remote attackers to 1 cause a denial of service via three crafted RTSP SETUP commands, or execute arbitrary code via 2 an NTLM authentication request with malformed...

CVE-2008-5911

Multiple buffer overflows in RealNetworks Helix Server and Helix Mobile Server 11.x before 11.1.8 and 12.x before 12.0.1 allow remote attackers to 1 cause a denial of service via three crafted RTSP SETUP commands, or execute arbitrary code via 2 an NTLM authentication request with malformed...

LINUX intrusion code[compile]-vulnerability warning-the black bar safety net

root@domlabs:$ gcc addroot. c-o addroot root@domlabs:$ chmod-v-x addroot mode of addroot' retained as 0 7 5 5 rwxr-xr-x root@domlabs:$ ./ addroot The D. O. M TEAM ADDUSER ROOT we are: ka0x, an0de, xarnuz written by ka0x - 2 0 0 7 x user: ope1 x password: ZGtzYWpkc2FkXzAxc2FkNjVzYQ== // base64...

Directory traversal

Directory traversal vulnerability in Yerba SACphp 6.3 allows remote attackers to read arbitrary files, and possibly have other impact, via directory traversal sequences in the mod field contained in the base64-encoded SID parameter to an unspecified component. NOTE: the provenance of this...

Megacubo 5.0.7 Injection Exploit

pwn...

RoundCube Webmail <= 0.2b Remote Code Execution Exploit

Exploit for unknown platform in category web applications ======================================================= RoundCube Webmail echoiniget'disablefunctions'; exec, system PHP passthru"id; uname -a"; uid=666www-data gid=666www-data groups=666www-data Linux mail 2.6.28 0 Sun Jan 01 10:05:33 CET...

GE Proficy Real Time Information Portal Credentials Leak Sniffer (meta)

No description provided by source. $Id: rtipsniff.rb This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

rtipsniff.rb.txt

$Id: rtipsniff.rb This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ MacbookPro:metasploit...