561 matches found
Neon < 0.24.7 WebDAV Client Library Unspecified Vulnerability
Binary data 1781.prm...
XChat Client URL Metacharacter Command Execution
Binary data 1876.prm...
Ximian Evolution < 1.2.3 UUEncoding Overflow DoS / Data Injection
Binary data 1307.prm...
Mandrake Linux Security Advisory : krb5 (MDKSA-2003:021)
A vulnerability was discovered in the Kerberos FTP client. When the client retrieves a file that has a filename beginning with a pipe character, the FTP client will pass that filename to the command shell in a system call. This could allow a malicious remote FTP server to write to files outside o...
Mandrake Linux Security Advisory : cvs (MDKSA-2004:028)
Sebastian Krahmer from the SUSE security team discovered a remotely exploitable vulnerability in the CVS client. When doing a cvs checkout or update over a network, the client accepts absolute pathnames in the RCS diff files. A maliciously configured server could then create any file with content...
Fedora Core 1 : cvs-1.11.15-1 (2004-110)
The client for CVS before 1.11.15 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates. Updated packages were made available in April 2004 however the original update notification email did not make it ...
RHEL 2.1 : krb5 (RHSA-2003:021)
Updated packages fix a vulnerability found in the Kerberos FTP client distributed with the Red Hat Linux Advanced Server krb5 packages. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1. For Advanced Workstation 2.1 these packages also fix CVE-2002-1235 as described in...
RHEL 2.1 / 3 : cvs (RHSA-2004:153)
Updated cvs packages that fix a client vulnerability that could be exploited by a malicious server are now available. Updated Apr 19 2004 The description text has been updated to include CVE-2004-0405 which was also fixed but not mentioned when this advisory was first released. There has been no...
DEBIAN-CVE-2004-0180
The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates, a different vulnerability than CVE-2004-0405...
CVE-2004-0180
The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates, a different vulnerability than CVE-2004-0405...
CVE-2004-0180
The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates, a different vulnerability than CVE-2004-0405...
CVE-2004-1948
NcFTP client 3.1.6 and 3.1.7, when the username and password are included in an FTP URL that is provided on the command line, allows local users to obtain sensitive information via "ps aux," which displays the URL in the process list...
CVE-2004-0180
The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates, a different vulnerability than CVE-2004-0405...
[VulnWatch] Dark Age of Camelot login client vulnerability to man in the middle attack
---------------------------------------- Security Advisory ---------------------------------------- Software: Dark Age of Camelot from Mythic Entertainment including Shrouded Isles & Trials of Atlantis Expansion Packs http://www.darkageofcamelot.com Affected Version: North America – all “live”...
Freeform Interactive Purge 1.4.7/Purge Jihad 2.0.1 Game Client - Remote Buffer Overflow
source: https://www.securityfocus.com/bid/9671/info Freeform Interactive Purge and Purge Jihad game clients have been reported prone to a remotely exploitable buffer overflow condition. The issue presents itself in the client network connection routines used by the client to negotiate a connectio...
Freeform Interactive Purge 1.4.7Purge Jihad 2.0.1 Game Client - Remote Buffer Overflow
Freeform Interactive Purge 1.4.7Purge Jihad 2.0.1 Game Client - Remote Buffer Overflow source: https://www.securityfocus.com/bid/9671/info Freeform Interactive Purge and Purge Jihad game clients have been reported prone to a remotely exploitable buffer overflow condition. The issue presents itsel...
CVE-2003-1118
Buffer overflow in the SETI@home client 3.03 and other versions allows remote attackers to cause a denial of service client crash and execute arbitrary code via a spoofed server response containing a long string followed by a \n newline character...
Opera HREF escaped server name overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Opera HREF escaped server name overflow Release Date: 10/20/2003 Application: Opera 7.11, 7.20 Platform: Windows XP/2000 and GNU/Linux 2.4 tested, others may be vulnerable Severity: Remote...
mIRC 6.1 - 'DCC SEND' Buffer Overflow (1)
source: https://www.securityfocus.com/bid/8818/info A vulnerability has been reported to exist in the mIRC client that may allow a remote attacker to crash a vulnerable mIRC client. The condition is most likely present due to insufficient boundary checking performed on 'DCC SEND' requests. It has...
Valve Software Half-Life 1.1 Client - Connection Routine Buffer Overflow (1)
Valve Software Half-Life 1.1 Client - Connection Routine Buffer Overflow 1 // source: https://www.securityfocus.com/bid/8299/info // Half-Life Client has been reported prone to a remotely exploitable buffer overflow condition. // The issue presents itself in the client connection routine, used by...