RHEL 2.1 : file (RHSA-2003:087)

Updated file packages are available to close a buffer overflow vulnerability. Updated 12 March 2003 Added packages for Red Hat Enterprise Linux ES and Red Hat Enterprise Linux WS The file command is used to identify a particular file according to the type of data contained by the file. The file...

RhinoSoft Serv-U FTPd Server 34 - MDTM Command Stack Overflow (2)

RhinoSoft Serv-U FTPd Server 34 - MDTM Command Stack Overflow 2 // source: https://www.securityfocus.com/bid/9483/info RhinoSoft Serv-U FTP Server is reportedly prone to a buffer overflow. The issue exists when a 'site chmod' command is issued on a non-existant file. If an excessively long filena...

CVE-2003-0102

Buffer overflow in tryelf in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity size value in an ELF header elfhdr.eshentsize...

[SECURITY] [DSA-260-1] New file package fixes buffer overflow

Package: file Vulnerability: buffer overflow Debian-specific: no CVE Id: CAN-2003-0102 iDEFENSE discovered a buffer overflow vulnerability in the ELF format parsing of the "file" command, one which can be used to execute arbitrary code with the privileges of the user running the command. The...

DSA-260 file - buffer overflow

Bulletin has no description...

Moderate: Red Hat Security Advisory: file security update

Updated file packages are available to close a buffer overflow vulnerability. Updated 12 March 2003 Added packages for Red Hat Enterprise Linux ES and Red Hat Enterprise Linux WS The file command is used to identify a particular file according to the type of data contained by the file. The file...

iDEFENSE Security Advisory 03.04.03: Locally Exploitable Buffer Overflow in file(1)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 03.04.03: http://www.idefense.com/advisory/03.04.03.txt Locally Exploitable Buffer Overflow in file1 March 4, 2003 I. BACKGROUND file1 is an application that utilizes a magic file typically located in /usr/share/magic to...

CVE-2000-0645

WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by using the RESTART REST command and writing beyond the end of a file, or writing to a file that does not exist, via commands such as STORE UNIQUE STOU, STORE STOR, or APPEND APPE...