Code injection

daemon.c in cman redhat-cluster-suite before 20070622 does not clear a buffer for reading requests, which might allow local users to obtain sensitive information from previous requests...

Unauthorized access via krb5-telnet daemon

The telnet daemon telnetd in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username beginning with a '-' character, a similar issue to CVE-2007-0882...

CVE-2005-1099

Multiple buffer overflows in the HandleChild function in server.c in Greylisting daemon GLD 1.3 and 1.4, when GLD is listening on a network interface, allow remote attackers to execute arbitrary code...

CVE-2004-1740

Music daemon musicd 0.0.3 and earlier allows remote attackers to read arbitrary files by calling LOAD with a full pathname, then calling SHOWLIST...

CVE-2004-1180

Unknown vulnerability in the rwho daemon rwhod before 0.17, on little endian architectures, allows remote attackers to cause a denial of service application crash...

[SA14082] HP VirtualVault TGA Daemon Unspecified Denial of Service

TITLE: HP VirtualVault TGA Daemon Unspecified Denial of Service SECUNIA ADVISORY ID: SA14082 VERIFY ADVISORY: http://secunia.com/advisories/14082/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: HP VirtualVault 4.x http://secunia.com/product/674/ DESCRIPTION: A vulnerabilit...

CVE-2004-0576

The radius daemon radiusd for GNU Radius 1.1, when compiled with the -enable-snmp option, allows remote attackers to cause a denial of service server crash via malformed SNMP messages containing an invalid OID...

War FTP Daemon < 1.66x4 USER/PASS Command Overflow

Binary data 1830.prm...

CVE-2004-0657

Integer overflow in the NTP daemon NTPd before 4.0 causes the NTP server to return the wrong date/time offset when a client requests a date/time that is more than 34 years away from the server's time...

CVE-2004-0461

The DHCP daemon DHCPD for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vulnerabilities that enable a denial of servic...

rsync: Directory traversal in rsync daemon

Background rsync is a utility that provides fast incremental file transfers. It is used to efficiently synchronize files between hosts and is used by emerge to fetch Gentoo's Portage tree. rsyncd is the rsync daemon, which listens to connections from rsync clients. Description When rsyncd is used...

IPSwitch IMail LDAP Daemon Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================= IPSwitch IMail LDAP Daemon Remote Buffer Overflow Exploit ========================================================= // / THCimail 0.1 - Wind0wZ remote root exploit / / Exploit by:...

CVE-2004-1180

Unknown vulnerability in the rwho daemon rwhod before 0.17, on little endian architectures, allows remote attackers to cause a denial of service application crash...

QuikStore Shopping Cart quikstore.cgi template Parameter Traversal Arbitrary File Access

The CGI 'quickstore.cgi' is installed. This CGI has a well known security flaw that lets an attacker read arbitrary files with the privileges of the HTTP daemon. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: Date: Tue, 23 Dec 2003 20:27:51 +0800 From: DrPonidi Haryanto Subject:...

CVE-2003-0826

lsh daemon lshd does not properly return from certain functions in 1 readline.c, 2 channelcommands.c, or 3 clientkeyexchange.c when long input is provided, which could allow remote attackers to execute arbitrary code via a heap-based buffer overflow attack...

CVE-2003-0576

Unknown vulnerability in the NFS daemon nfsd in SGI IRIX 6.5.19f and earlier allows remote attackers to cause a denial of service kernel panic via certain packets that cause XDR decoding errors, a different vulnerability than CVE-2003-0619...

gkrellmd

Gkrellmd 2.1.10 remote exploit buffer overflow date: 22-06-2003 author: dodo [email protected] aurhor-url: https://darkwired.ath.cx/ - Description: Gkrellm is a GTK system monitoring utility, the latest version comes with a daemon. It's a great peace of software, however the daemon needs more...

[UNIX] Monkey HTTP Daemon Remote Buffer Overflow

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion In the US? Contact Beyond Security at our new California office housewarming rates on automated network vulnerability scanning. We also...

CVE-2003-0085

Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon smbd in Samba before 2.2.8, and Samba-TNG before 0.3.1, allows remote attackers to execute arbitrary code...

Entercept Ricochet Advisory: Sun Solaris KCMS Library Service Daemon Arbitrary File Retrieval Vulnerability

ENTERCEPT RICOCHET ADVISORY Date: Wednesday, January 22, 2003 Issue: KCMS Library Service Daemon Arbitrary File Retrieval Vulnerability http://www.entercept.com/news/uspr/01-22-03.asp Vulnerability Description: Kodak Color Management System KCMS is an API that provides color management functions...