8591 matches found
Caldera UnixWare 7.1.1 Message Catalog Environment Variable Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4060/info UnixWare is a commercially available Unix Operating System. It was originally developed by SCO, and is now distributed and maintained by Caldera. A format string vulnerability in the locale subsystem could lead ...
MySQL <= 5.0.75 'sql_parse.cc' Multiple Format String Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/35609/info MySQL is prone to multiple format-string vulnerabilities. Attackers can leverage these issues to execute arbitrary code within the context of the vulnerable application. Failed attacks will likely cause...
Opium OPI Server and CyanPrintIP - Format String and Denial of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/27734/info Opium OPI Server and CyanPrintIP are prone to a denial-of-service vulnerability and a format-string vulnerability. An attacker can exploit these issues to execute arbitrary code within the context of the affect...
Slurp 1.10 SysLog Remote Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4935/info slurp is a freely available, open source NNTP client. It is designed for use on most Unix and Linux operating systems. It may be possible for a remote server to execute code on a vulnerable client. slurp offers...
Xine 0.99.4 M3U Remote Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22252/info The 'xine' program is prone to a remote format-string vulnerability because the application fails to properly sanitize user-supplied input before including it in the format-specifier argument of a...
Solaris 2.6/7.0 "eject" exploit for locale subsystem format string
No description provided by source. / source: http://www.securityfocus.com/bid/1634/info nectiva 4.x/5.x,Debian 2.x,IBM AIX 3.x/4.x,Mandrake 7,RedHat 5.x/6.x,IRIX 6.x, Solaris 2.x/7/8,Turbolinux 6.x,Wirex Immunix OS 6.2 Locale Subsystem Format String Many UNIX operating systems provide...
Skype Technologies Skype 1.5 NSRunAlertPanel Remote Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20218/info Skype is prone to a remote format-string vulnerability because the application fails to properly sanitize user-supplied input before using it in the format-specification argument of a formatted-printing functio...
Xitami Web Server 2.5c2 - LRWP Processing Format String PoC
No description provided by source. / PoC exploit for Xitami Web Server v2.5c2 LRWP processing format string bug Advisory is available at: http://www.bratax.be/advisories/b013.html multiple vulnerabilities! check it out! @author: bratax @url: http://www.bratax.be/ @email: [email protected] Thanks t...
SonicWALL E-Class SSL-VPN ActiveX Control Format String Overflow
No description provided by source...
CDRTools CDRecord 1.11/2.0 Devname Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7565/info CDRecord has been reported prone to a format string vulnerability. The issue presents itself due to a programming error that occurs when calling a printf-like function. It has been reported that by harnessing an...
VLC 0.8.6d - httpd_FileCallBack Remote Format String Exploit
No description provided by source. / Epibite // bite since 1442 pown meme ta mamie / / Advisory from Luigi Auriemma CVE-2007-6682 / format string in VideoLAN VLC 0.8.6d Description : Format string vulnerability in the httpdFileCallBack function network/httpd.c in VideoLAN VLC 0.8.6d allows remote...
GNU Privacy Guard 1.0.x Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2797/info GnuPG is a popular open source public/private key encryption system. It is possible for attackers to create an encrypted document that will exploit a format string vulnerability in the GnuPG client when the...
ZABBIX 1.1.2 - Multiple Unspecified Remote Code Execution Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/20416/info ZABBIX is prone to multiple unspecified remote code-execution vulnerabilities. Reports indicate that these issues facilitate format-string and buffer-overflow attacks. A remote attacker may leverage these...
MG-SOFT Net Inspector 6.5.0.826 - Multiple Remote Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/28266/info Net Inspector is prone to multiple remote vulnerabilities, including: - A format-string vulnerability - A directory-traversal vulnerability - Multiple denial-of-service vulnerabilities An attacker can exploit...
Half-Life 1.1 Invalid Command Error Response Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8730/info It has been reported that Half-Life clients may be prone to a format string vulnerability. The problem occurs when an invalid command is issued to the server, and an error response is returned and displayed by t...
Typespeed 0.4.1 - Local Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12569/info typespeed is prone to a local format string vulnerability. Successful could allow privilege escalation. / Proof of Concept local exploit for typespeed tool enva content: include stdio.h include string.h int...
cyan soft Multiple Applications Format String Vulnerability and Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27728/info Multiple cyan soft products are affected by a format-string vulnerability because they fail to adequately sanitize user-supplied input before passing it as the format-specifier to a formatted-printing function...
SonicWALL Aventail epi.dll AuthCredential Format String Exploit
No description provided by source. $Id: aventailepiactivex.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...
William Deich Super 3.x SysLog Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5367/info super is prone to a format string vulnerability. This problem is due to incorrect use of the syslog function to log error messages. It is possible to corrupt memory by passing format strings through the vulnerab...
TANne 0.6.17 Session Manager SysLog Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6553/info TANne is a freely available, open source session management package. It is available for Unix and Linux operating systems. Due to programming error, it may be possible to exploit a format string vulnerability. A...