CVE-2007-6181: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in cygwin1.dll in Cygwin 1.5.7 and earlier allows context-dependent attackers to execute arbitrary code via a filename with a certain length, as demonstrated by a remote authenticated user who uses the SCP protocol to send a file to the Cygwin machine, and thereby cause...

Cygwin < 1.5.24 cygwin1.dll Crafted Filename Handling Overflow

Cygwin, a Linux-like environment for Windows, is installed on the remote host. The version of Cygwin installed on the remote host is affected by a heap-based buffer overflow vulnerability involving a filename length check. Using a filename between 233 and 239 characters, an attacker who can creat...

Cygwin超长文件名堆溢出漏洞

BUGTRAQ ID: 26557 Cygwin是许多自由软件的集合，用于在各种版本的Microsoft Windows上运行UNIX类系统。 Cygwin处理超长文件名时存在漏洞，恶意用户可能利用此漏洞在系统上执行任意指令。 一般来讲Linux文件系统允许255字节的文件名，但cygwin允许239字节，并执行检查防范大于等于240字节的文件名。尽管执行了这个检查，存储文件名的动态内存缓冲区仅分配了232字节，因此233到239字节的文件名可以绕过检查覆盖堆上最多7个字节，导致执行任意指令。 Cygwin 1.5.7 - 1.5.19...

cygwin-overflow.txt

============================================= INTERNET SECURITY AUDITORS ALERT 2007-005 - Original release date: May 23rd, 2007 - Last revised: November 24th, 2007 - Discovered by: Jesus Olmos Gonzalez - Severity: 5/5 ============================================= I. VULNERABILITY...

[ISecAuditors Security Advisories] Cygwin buffer overflow due incorrect filename length check

============================================= INTERNET SECURITY AUDITORS ALERT 2007-005 - Original release date: May 23rd, 2007 - Last revised: November 24th, 2007 - Discovered by: Jesus Olmos Gonzalez - Severity: 5/5 ============================================= I. VULNERABILITY...

Cygwin Windows POSIX emulation libraries buffer overflow

Buffer overflow on oversized filename...

webdesproxy 0.0.1 (GET Request) Remote Buffer Overflow Exploit

No description provided by source. / webdesproxyv0.0.1: cygwin remote buffer overflow exploit. by: vade79/v9 [email protected] fakehalo/realhalo ...

webdesproxy 0.0.1 (GET Request) Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================================== webdesproxy 0.0.1 GET Request Remote Buffer Overflow Exploit ============================================================== / webdesproxyv0.0.1: cygwin remote buffer overflow...

webdesproxy 0.0.1 - GET Remote Buffer Overflow

webdesproxy 0.0.1 - GET Remote Buffer Overflow / webdesproxyv0.0.1: cygwin remote buffer overflow exploit. by: vade79/v9 [email protected] fakehalo/realhalo compile: gcc xwdp-cygwin.c -o xwdp-cygwin syntax: ./xwdp-cygwin -r -h host -p port webdesproxy homepage/url:...

“Vulnerability exploits”is compiled out of the-vulnerability warning-the black bar safety net

Step 2. Choose to install the desired program source of the method There are 3 kinds of way.“ The Install from Internet”to directly download the desired program and immediately installed; the“Download from Internet”to only download the required program and is not installed; the“Install from Local...

CVE-2004-0173

Directory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier, when running on Cygwin, allows remote attackers to read arbitrary files via a URL containing "..%5C" dot dot encoded backslash sequences...

CVE-2004-0173

CVE-2004-0173 describes a directory traversal vulnerability affecting Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier when run on Cygwin. An attacker can read arbitrary files by requesting a URL containing "..%5C" (dot dot encoded backslash) sequences, enabling partial confidentiality im...

CVE-2004-0173: Undefined Security Weakness

Directory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier, when running on Cygwin, allows remote attackers to read arbitrary files via a URL containing "..%5C" dot dot encoded backslash sequences...

ActivePerl 5.x Cygwin 1.5.x - System Function Call Buffer Overflow

ActivePerl 5.x Cygwin 1.5.x - System Function Call Buffer Overflow source: https://www.securityfocus.com/bid/10375/info ActiveState Perl and Perl for cygwin are both reported to be prone to a buffer overflow vulnerability. The issue is reported to exist due to a lack of sufficient bounds checking...

ActivePerl 5.x / Cygwin 1.5.x - System Function Call Buffer Overflow

source: https://www.securityfocus.com/bid/10375/info ActiveState Perl and Perl for cygwin are both reported to be prone to a buffer overflow vulnerability. The issue is reported to exist due to a lack of sufficient bounds checking that is performed on data that is passed to a Perl system function...

CVE-2004-0173

Directory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier, when running on Cygwin, allows remote attackers to read arbitrary files via a URL containing "..%5C" dot dot encoded backslash sequences...

Apache Cygwin 1.3.x2.0.x - Directory Traversal

Apache Cygwin 1.3.x2.0.x - Directory Traversal source: https://www.securityfocus.com/bid/9733/info It has been reported that Apache may be prone to a directory traversal vulnerability that may allow a remote attacker to access information outside the server root directory. This issue is only...

Apache Cygwin 1.3.x/2.0.x - Directory Traversal

source: https://www.securityfocus.com/bid/9733/info It has been reported that Apache may be prone to a directory traversal vulnerability that may allow a remote attacker to access information outside the server root directory. This issue is only reported to present itself in Apache running on...

Apache Httpd < 2.0.40 : Path vulnerability

Certain URIs would bypass security and allow users to invoke or access any file depending on the system configuration. Affects Windows, OS2, Netware and Cygwin platforms only...