5333 matches found
Sendmail: -1 gone wild
CVE: CAN-2003-0161 CERT: VU897604 FORCED RELEASE -- VENDOR NOTIFIED AS OF 03/18/03 There is a vulnerability in Sendmail versions 8.12.8 and prior. The address parser performs insufficient bounds checking in certain conditions due to a char to int conversion, making it possible for an attacker to...
Sendmail address parsing buffer overflow
Overview Sendmail contains a buffer overflow in code that parses email addresses. A remote attacker could execute arbitrary code or cause a denial of service on a vulnerable system. Description Sendmail is a widely used mail transfer agent MTA. There is a stack overflow vulnerability in code that...
MDKSA-2003:036 - Updated netpbm packages fix math overflow errors
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrake Linux Security Update Advisory Package name: netpbm Advisory ID: MDKSA-2003:036 Date: March 25th, 2003 Affected versions: 8.2, 9.0, 9.1, Corporate Server 2.1, Multi Network Firewall 8.2 Problem Description: Several math overflow errors were...
DEBIAN-CVE-2002-1318
Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password that causes the overflow during decryption in which a DOS codepage string is converted to a little-endian UCS2 unicode string...
Signed/unsigned conversion bug in wwwoffled
Content-Length integer type bug...
Sendmail < 8.8.5 MIME Conversion Malformed Header Overflow
The remote Sendmail server, according to its version number, may be vulnerable to a MIME conversion overflow attack which allows anyone to execute arbitrary commands as root. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10055; scriptversion"1.22";...
Buffer overflow in Apache
Signed/unsigned conversion bug on CHUNKed POST...
Directory traversal in DocBook
During conversion to HTML identifuers are used to form a filename without check for ../...
CVE-2002-0094
configconverters.py in BSCW Basic Support for Cooperative Work 3.x and versions before 4.06 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name during filename conversion...
format string vulnerability protection bypass in libsafe
Not all of possible converion flags are processed...
Code execution bugs in virtual Java machines
Bug in data conversion routines...
CVE-1999-1357
Netscape Communicator 4.04 through 4.7 and possibly other versions in various UNIX operating systems converts the 0x8b character to a "" sign, which could allow remote attackers to attack other clients via cross-site scripting CSS in CGI programs that do not filter these characters...
Выполнение кода через LPRng (code execution)
При конфертации TeX файла не включается безопасный режим, что позволяет выполнение макрокоманд...
CVE-2001-0980
docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web page...
Remote root против antisniff
Некорректное преобразование типов данных позволяет обойти проверку на размер строки и переполнить буфер...
DoS против knfsd в Linux
Некорректное преобразование между знаковыми/беззнаковыми величинами приводит к краху сервера...
CVE-1999-0997
wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress...
CVE-1999-0997
CVE-1999-0997 affects wu-ftpd with FTP conversion enabled. A malformed file name can be interpreted as an argument to the converter, enabling command execution (e.g., via tar or uncompress) and giving an attacker the ability to run arbitrary commands with wu-ftpd’s privileges. Related advisories ...
CVE-2000-0088
Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka the "Malformed Conversion Data" vulnerability...
CVE-2000-0088
CVE-2000-0088 describes a buffer overflow in the conversion utilities for Word 5 documents (Japanese, Korean and Chinese) that allows a local attacker to execute arbitrary commands. The vulnerability is identified as the "Malformed Conversion Data" issue. The available references indicate a high ...