MOPB-10-2007:PHP php_binary Session Deserialization Information Leak Vulnerability

Summary The PHP session extension comes with a serialization handler called 'phpbinary' that is vulnerable to a heap information leak vulnerability. This security hole is the result of a missing boundary check and allows leaking up to 126 bytes following the serialized data into array keys of the...

QuickCam VC Linux下的设备驱动QCAMVC_Video_Init缓冲区溢出漏洞

QuickCam linux device driver是一款Linux平台下的摄象头设备驱动。 QuickCam包含的初始化函数存在内存破坏，本地攻击者可以利用漏洞执行任意指令，提升特权。 问题存在于如下的函数中： static void qcamvcvideoinitstruct qcamvc qcamvc 由于缺少正确的边界条件检查，可导致内存破坏而执行任意指令。 De Marchi Daniele QuickCam 1.0.9 目前没有解决方案提供： http://digilander.iol.it/demarchidaniele/qcamvc/quickcam-vc.html...

QQ漏洞（远程可执行）Tencent QQ VQQPlayer.ocx

No description provided by source. ---------------------------------------------------------------------------------------- / ----------------------------------------------------------------------- Tencent QQ VQQPlayer.ocx all version 0day Author: axis Date: 2006-12-27 Mail: [email protected]...

[EXPL] BitchX and Epic Boundary Check Error DoS (Exploit)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

BitchX 1.1-final - do_hook() Remote Denial of Service

BitchX 1.1-final - dohook Remote Denial of Service // BitchX epic =netcommcomar // 0 0x080a3fcc in BXdohook which=9999999, format=0x8119077 "%s %s" at hook.c:865 // 1 0x080d013b in numberedcommand from=0xbfbfe031 'A' , // comm=-9999999, ArgList=0xbfbfd788 at numbers.c:1413 // 2 0x080d7d02 in...

BitchX <= 1.1-final do_hook() Remote Denial of Service Exploit

No description provided by source. // BitchX epic =1.1-final | dohook Boundary Check Error Remote DoS ///////////////////////////////////////////////////////////////////////// // Federico L. Bossi Bonin // fbossiatnetcommdotcomdotar // 0 0x080a3fcc in BXdohook which=9999999, format=0x8119077 "%s...

FreeBSD : curl -- TFTP packet buffer overflow vulnerability (b8e361b8-b7ff-11da-8414-0013d4a4a40e)

A Project cURL Security Advisory reports : libcurl uses the given file part of a TFTP URL in a manner that allows a malicious user to overflow a heap-based memory buffer due to the lack of boundary check. This overflow happens if you pass in a URL with a TFTP protocol prefix 'tftp://', using a...

TFTP Packet Buffer Overflow

libcurl uses the given file part of a TFTP URL in a manner that allows a malicious user to overflow a heap-based memory buffer due to the lack of boundary check. This overflow happens if you pass in a URL with a TFTP protocol prefix "tftp://", using a valid host and a path part that is longer tha...

GLSA-200602-04 : Xpdf, Poppler: Heap overflow

The remote host is affected by the vulnerability described in GLSA-200602-04 Xpdf, Poppler: Heap overflow Dirk Mueller has reported a vulnerability in Xpdf. It is caused by a missing boundary check in the splash rasterizer engine when handling PDF splash images with overly large dimensions. Impac...

Xpdf, Poppler: Heap overflow

Background Xpdf is a PDF file viewer that runs under the X Window System. Poppler is a PDF rendering library based on the Xpdf 3.0 code base. Description Dirk Mueller has reported a vulnerability in Xpdf. It is caused by a missing boundary check in the splash rasterizer engine when handling PDF...

Debian DSA-427-1 : linux-kernel-2.4.17-mips+mipsel - missing boundary check

Paul Starzetz discovered a flaw in bounds checking in mremap in the Linux kernel present in version 2.4.x and 2.6.x which may allow a local attacker to gain root privileges. Version 2.2 is not affected by this bug. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Debian DSA-417-1 : linux-kernel-2.4.18-powerpc+alpha - missing boundary check

Paul Starzetz discovered a flaw in bounds checking in mremap in the Linux kernel present in version 2.4.x and 2.6.x which may allow a local attacker to gain root privileges. Version 2.2 is not affected by this bug. Andrew Morton discovered a missing boundary check for the brk system call which ca...

Debian DSA-413-2 : linux-kernel-2.4.18 - missing boundary check

Paul Starzetz discovered a flaw in bounds checking in mremap in the Linux kernel present in version 2.4.x and 2.6.x which may allow a local attacker to gain root privileges. Version 2.2 is not affected by this bug, since it doesn't support the MREMAPFIXED flag as clarified later. %NASLMINLEVEL...

[SECURITY] [DSA 417-1] New Linux 2.4.18 packages fix local root exploit (powerpc+alpha)

-------------------------------------------------------------------------- Debian Security Advisory DSA 417-1 [email protected] http://www.debian.org/security/ Martin Schulze January 7th, 2004 http://www.debian.org/security/faq -...

DSA-417 linux-kernel-2.4.18-powerpc+alpha - missing boundary check

Bulletin has no description...

[SECURITY] [DSA 413-1] New Linux 2.4.18 packages fix locate root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 413-1 [email protected] http://www.debian.org/security/ Martin Schulze January 6th, 2004 http://www.debian.org/security/faq -...

DEBIAN-CVE-2002-1175

The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service crash when Fetchmail attempts to read data beyond the expected boundary...

Advisory 03/2002: Fetchmail remote vulnerabilities

e-matters GmbH www.e-matters.de -= Security Advisory =- Advisory: Fetchmail remote vulnerabilities Release Date: 2002/09/29 Last Modified: 2002/09/29 Author: Stefan Esser [email protected] Application: Fetchmail = 6.0.0 Severity: Several vulnerabilities within Fetchmail could allow remote...

[SECURITY] [DSA 115-1] New PHP packages fix security problems

-------------------------------------------------------------------------- Debian Security Advisory DSA 115-1 [email protected] http://www.debian.org/security/ Martin Schulze March 2nd, 2002 - -------------------------------------------------------------------------- Package : php3, php4...