CVE-2003-1023

Stack-based buffer overflow in vfssresolvesymlink of vfs/direntry.c for Midnight Commander mc 4.6.0 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code during symlink conversion...

CVE-2003-1023

Stack-based buffer overflow in vfssresolvesymlink of vfs/direntry.c for Midnight Commander mc 4.6.0 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code during symlink conversion...

Buffer overflows on address parsing in sendmail

Buffer overflows because on signed/unsigned type conversion...

Microsoft Word Perfect convertor buffer overflow

Buffer overflow during Word Perfect document convertion...

Linux kernel signed/unsigned conversion bug

Signed/unsigned conversion bug during processing of NFSv3 XDR data leads to buffer overflow...

CERT Advisory CA-2003-14 Buffer Overflow in Microsoft Windows HTML

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2003-14 Buffer Overflow in Microsoft Windows HTML Conversion Library Original issue date: July 14, 2003 Last revised: -- Source: CERT/CC A complete revision history is at the end of this file. Systems Affected Windows 98 and 98 Second Edition SE...

CVE-2003-0539

CVE-2003-0539 affects skk (Simple Kana to Kanji conversion program) 12.1 and earlier, and the ddskk package based on skk. The issue: insecure temporary file creation allows a local attacker to overwrite arbitrary files. Impact is local, with partial confidentiality/integrity/availability concerns...

Microsoft Windows XP2000 - RunDLL32.exe Local Buffer Overflow

Microsoft Windows XP2000 - RunDLL32.exe Local Buffer Overflow source: https://www.securityfocus.com/bid/8114/info rundll32.exe has been reported prone to a buffer overflow vulnerability. The condition has been reported to be triggered when an excessive string is passed to the vulnerable applicati...

Microsoft Windows HTML conversion library vulnerable to buffer overflow

Overview A buffer overflow vulnerability exists in a shared HTML conversion library used by Internet Explorer IE and other Windows applications. By enticing a victim to view an HTML document using IE, an attacker could execute arbitrary code with the victim's privileges or cause IE to crash...

Microsoft Internet Explorer - Object Tag (MS03-020)

!/usr/bin/perl Proof of concept exploit on IE 5.x - 6.x by Alumni IE-Object longtype dynamic call oferflow url:// the flaw actually exists in URLMON.DLL when converting backslashes to wide char, this can be seen on stack dump near '&CLSID=AAA...2F2F...'. To exploit: i start server perl script; ii...

HP-UX FTPD REST Command Remote Arbitrary Memory Disclosure

The remote FTP server seems to be vulnerable to an integer conversion bug when it receives a malformed argument to the 'REST' command. An attacker may exploit this flaw to force the remote FTP daemon to disclose portions of the memory of the remote host. %NASLMINLEVEL 70300 C Tenable Network...

Microsoft IIS WebDav buffer overflow

Buffer overflow in path conversion routine...

Bug found in: Polymorph 0.4.0

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 01100011 - code 'security research team' - ---------------------------------------- - - http://www.c-code.net - - Advisory and PoC exploit by: demz // [email protected] - - Vulnerable source: Polymorph v0.4.0 - - Bug type: Stackoverflow - - Priority: 3 ...

[SECURITY] [DSA 290-1] New sendmail-wide packages fix DoS and arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 290-1 [email protected] http://www.debian.org/security/ Martin Schulze April 17th, 2003 http://www.debian.org/security/faq -...

DSA-290 sendmail-wide - char-to-int conversion

Bulletin has no description...

Two Invision Power Board 1.1.x vulns

Hola, Invision Power Services have continued to show their amazing support and understanding for the security community by release two patches for their 'Invision Power Board' product now one of the most widely used 'Board' programs around. Without sending out any security mailing list...

[SECURITY] [DSA 278-2] New sendmail packages fix DoS and arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 278-2 [email protected] http://www.debian.org/security/ Martin Schulze April 4th, 2003 http://www.debian.org/security/faq -...

DSA-278 sendmail - char-to-int conversion

Bulletin has no description...

CVE-2002-0094

configconverters.py in BSCW Basic Support for Cooperative Work 3.x and versions before 4.06 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name during filename conversion...

CVE-2002-0802

The CVE-2002-0802 entry documents a vulnerability in PostgreSQL 6.5.x when using the SQL_ASCII encoding: multibyte support can consume an extra character while processing a character that cannot be converted, potentially removing an escape character from the query and making the application susce...