9871 matches found
GNU Anubis 3.6.x/3.9.x auth.c auth_ident() Function Overflow
No description provided by source. source: http://www.securityfocus.com/bid/9772/info GNU Anubis has been reported prone to multiple buffer overflow and format string vulnerabilities. It has been conjectured that a remote attacker may potentially exploit these vulnerabilities to have arbitrary co...
MySQL <= 5.0.45 COM_CREATE_DB Format String PoC (auth)
No description provided by source. MySQL tested: Version 5.0.45 on CentOS Linux Format String Vulnerability MySQL General Available GA Release is vulnerable. Latest MySQL Version is not vulnerable since the bug if ifdef'ed off. from mysql-5.0.75 source mysql-5.0.75.tar.gz in the file...
DropTeam 1.3.3 - Multiple Remote Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/25943/info DropTeam is prone to multiple remote vulnerabilities including multiple format-string issues, a stack-based buffer-overflow issue, multiple heap-based buffer-overflow issues, and an information-disclosure...
William Deich Super 3.x SysLog Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5367/info super is prone to a format string vulnerability. This problem is due to incorrect use of the syslog function to log error messages. It is possible to corrupt memory by passing format strings through the vulnerab...
Half-Life 1.1 Invalid Command Error Response Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8730/info It has been reported that Half-Life clients may be prone to a format string vulnerability. The problem occurs when an invalid command is issued to the server, and an error response is returned and displayed by t...
Mod_Gzip 1.3.x Debug Mode Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/7769/info Modgzip is reported prone to a stack overflow, format string vulnerability and a file corruption issue due to a predictable naming scheme for log files. Exploitation of these issues could result in execution of...
ntop 1.x -i Local Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1840/info ntop network top is a unix program used for displaying network usage statistics. It is often installed setuid root because it uses privileged ports. ntop is vulnerable to a format string vulnerability that can...
Rlpr 2.0 msg() Function Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/10578/info It is reported that rlpr is prone to multiple vulnerabilities. These vulnerabilities can allow a remote attacker to execute arbitrary code in order to gain unauthorized access. The application is affected by a...
MySQL <= 5.0.75 'sql_parse.cc' Multiple Format String Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/35609/info MySQL is prone to multiple format-string vulnerabilities. Attackers can leverage these issues to execute arbitrary code within the context of the vulnerable application. Failed attacks will likely cause...
Epic Games Unreal Tournament Server 436.0 Engine Remote Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9840/info A format string vulnerability has been reported to exists in the Unreal Tournament server engine. This issue is due to a failure of the server application to properly sanitize user supplied network data...
FreeBSD 3.5/4.x top Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1895/info top is a program used to display system usage statistics in real time written by GoupSys Consulting but shipped by default as a core component with many operating systems. On BSD systems, top is installed setgid...
Apple Installer Package 2.1.5 Filename Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22272/info Apple Installer is prone to a format-string vulnerability because the application fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. A...
VMware Remote Console e.x.p build-158248 - format string vulnerability
No description provided by source. DSECRG-09-053 VMware Remote Console - format string vulnerability http://www.dsecrg.com/pages/vul/show.php?id=153 VMrc vulnerable to format string attacks. Exploitation of this issue may lead to arbitrary code execution on the system where VMrc is installed...
zkfingerd SysLog 0.9.1 Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6402/info zkfingerd is prone to a format string vulnerability. This problem is due to incorrect use of the 'syslog' function to log error messages. It is possible to corrupt memory by passing format strings through the...
ComSndFTP Server 1.3.7 Beta Remote Format String Overflow
No description provided by source. Title: ComSndFTP Server Remote Format String Overflow Vulnerability Software : ComSndFTP FTP Server Software Version : ComSndFTP 1.3.7 Beta Vendor: http://ftp.comsnd.com/ Vulnerability Published : 2012-06-07 Vulnerability Update Time : Status : Impact :...
Ipswitch Instant Messaging 2.0.8.1 Multiple Security Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/27677/info Ipswitch Instant Messaging is prone to multiple security vulnerabilities, including a denial-of-service vulnerability, a format-string vulnerability, and a vulnerability that allows attackers to overwrite...
5th street 'dx8render.dll' Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29928/info The '5th street' game is prone to a format-string vulnerability. Exploiting this issue will allow attackers to execute arbitrary code with the privileges of a user running the application. Failed attacks will...
Solaris 2.6/7.0 /locale Subsystem Format String
No description provided by source. / source: http://www.securityfocus.com/bid/1634/info nectiva 4.x/5.x,Debian 2.x,IBM AIX 3.x/4.x,Mandrake 7,RedHat 5.x/6.x,IRIX 6.x, Solaris 2.x/7/8,Turbolinux 6.x,Wirex Immunix OS 6.2 Locale Subsystem Format String Many UNIX operating systems provide...
Vavoom 1.24 sv_main.cpp Say Command Remote Format String
No description provided by source. source: http://www.securityfocus.com/bid/25436/info Vavoom is prone to multiple remote vulnerabilities, including a buffer-overflow issue, a format-string issue, and a denial-of-service issue. An attacker can exploit these issues to execute arbitrary code within...
Asterisk PBX 0.7.x Multiple Logging Format String Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/10569/info It is reported that Asterisk is susceptible to format string vulnerabilities in its logging functions. An attacker may use these vulnerabilities to corrupt memory, and read or write arbitrary memory. Remote cod...