Lucene search
+L

551 matches found

RedHat Linux
RedHat Linux
•added 2012/03/19 9:57 p.m.•11 views

glibc: FORTIFY_SOURCE format string protection bypass via "nargs" integer overflow

Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFYSOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments...

6.8CVSS7.5AI score0.02717EPSS
SaveExploits5References4
RedHat Linux
RedHat Linux
•added 2012/03/15 4:30 p.m.•12 views

glibc: FORTIFY_SOURCE format string protection bypass via "nargs" integer overflow

Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFYSOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments...

6.8CVSS7.5AI score0.02717EPSS
SaveExploits5References4
OSV
OSV
•added 2010/10/14 5:58 a.m.•25 views

UBUNTU-CVE-2010-3192

Certain run-time memory protection mechanisms in the GNU C Library aka glibc or libc6 print argv0 and backtrace information, which might allow context-dependent attackers to obtain sensitive information from process memory by executing an incorrect program, as demonstrated by a setuid program tha...

5CVSS7.6AI score0.01606EPSS
SaveExploits0References4
ThreatPost
ThreatPost
•added 2010/08/17 5:14 p.m.•14 views

HP Snags Application Testing Firm Fortify

The drumbeat for more secure application development picked up pace on Tuesday, with news that software giant HP had acquired privately funded Fortify Software, a maker of static code analysis tools, for an undisclosed amount. HP said that Fortify’s static analysis tools will complement its dynam...

SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2010/03/03 12:00 a.m.•33 views

CVE-2010-0393

The cupsGetlang function, as used by lppasswd.c in lppasswd in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4.1, relies on an environment variable to determine the file that provides localized message strings, which allows local users to gain privileges via a file that contains crafted localization data with...

6.9CVSS5.9AI score0.0032EPSS
SaveExploits0References2
Metasploit
Metasploit
•added 2010/01/25 12:00 a.m.•90 views

MySQL yaSSL CertDecoder::GetName Buffer Overflow

This module exploits a stack buffer overflow in the yaSSL 1.9.8 and earlier implementation bundled with MySQL. By sending a specially crafted client certificate, an attacker can execute arbitrary code. This vulnerability is present within the CertDecoder::GetName function inside...

7.5CVSS6.5AI score0.69552EPSS
SaveExploits4
Tenable Nessus
Tenable Nessus
•added 2009/04/24 12:00 a.m.•20 views

Fortify 360 Web Interface Detection

The remote web server is running the web interface for Fortify 360, a web interface to analyze the results of source code audits. As this interface is likely to contain sensitive information, make sure only authorized personel can log into this site C Tenable Network Security, Inc...

5.6AI score
SaveExploits0References1
ThreatPost
ThreatPost
•added 2009/03/05 9:20 p.m.•29 views

Can we learn from Microsoft and Google on security?

Tech security company Fortify and security consulting firm Cigital are getting ready to release a set of best practices that tech companies and other businesses can follow to ensure that the software they develop is secure. The authors developed the model by studying the security practices at...

0.5AI score
SaveExploits0References3
myhack58
myhack58
•added 2008/07/23 12:00 a.m.•20 views

And then the explosion a few micro-points have not fortified from the start or passive start-vulnerability warning-the black bar safety net

From a friend: large ravioli 1. cmd to run before the execution of the programsysnap inform --passive start HKEYCURRENTUSER\Software\Microsoft\Command Processor AutoRun REGSZ "xxx.exe" 2. session manager-from the start HKEYLOCALMACHINE\SYSTEM\ControlSet001\Control\Session Manager...

0.2AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2007/02/18 12:00 a.m.•21 views

SUSE-SA:2007:005: w3m

The remote host is missing the patch for the advisory SUSE-SA:2007:005 w3m. A format string problem in w3m -dump / -backend mode could be used by a malicious server to crash w3m or execute code. In SUSE Linux 10.1, openSUSE 10.2 and SUSE Linux Enterprise Server and Desktop 10 this problem was not...

9.3CVSS7.6AI score0.04822EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2004/08/18 12:00 a.m.•16 views

Fortify 360 Web Interface Detection

Binary data 5007.prm...

7.3AI score
SaveExploits0References1
Rows per page
Query Builder