9892 matches found
CVE-2007-6682
CVE-2007-6682 affects VLC 0.8.6d with a format string vulnerability in the httpd_FileCallBack function (network/httpd.c). The vulnerability allows remote, unauthenticated attackers to execute arbitrary code via format string specifiers in the Connection header of HTTP requests. Public references ...
Debian Security Advisory DSA 1121-1 (postgrey)
The remote host is missing an update to postgrey announced via advisory DSA 1121-1. Peter Bieringer discovered that postgrey, an greylisting implementation for Postfix, is vulnerable to a format string attack that allows remote attackers to the daemon. OpenVAS Vulnerability Test $Id: deb11211.nas...
DEBIAN-CVE-2008-0101
Format string vulnerability in the swDebugf function in DuneApp.cpp in WhiteDune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file...
Format string
Format string vulnerability in the swDebugf function in DuneApp.cpp in WhiteDune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file...
CVE-2008-0101
Format string vulnerability in the swDebugf function in DuneApp.cpp in WhiteDune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file...
CVE-2008-0097
Format string vulnerability in the log function in Georgia SoftWorks SSH2 Server GSWSSHD 7.01.0003 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username field, as demonstrated by a certain LoginPassword message...
CVE-2008-0101
Format string vulnerability in the swDebugf function in DuneApp.cpp in WhiteDune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file...
CVE-2008-0097
CVE-2008-0097 stems from a format string vulnerability in the log function of Georgia SoftWorks SSH2 Server (GSW_SSHD) versions up to and including 7.01.0003. The flaw allows remote attackers to execute arbitrary code by providing format string specifiers in the username field, as illustrated by ...
CVE-2008-0097
Format string vulnerability in the log function in Georgia SoftWorks SSH2 Server GSWSSHD 7.01.0003 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username field, as demonstrated by a certain LoginPassword message...
CVE-2008-0101
The CVE-2008-0101 entry describes a format string vulnerability in White_Dune, specifically in the swDebugf function of DuneApp.cpp, affecting White_Dune 0.29 beta791 and earlier. The flaw allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file. The connected...
CVE-2008-0101
Format string vulnerability in the swDebugf function in DuneApp.cpp in WhiteDune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file...
CVE-2008-0101
Format string vulnerability in the swDebugf function in DuneApp.cpp in WhiteDune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file...
CVE-2008-0097: Improper Input Validation
Format string vulnerability in the log function in Georgia SoftWorks SSH2 Server GSWSSHD 7.01.0003 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username field, as demonstrated by a certain LoginPassword message...
CVE-2008-0101: Improper Input Validation
Format string vulnerability in the swDebugf function in DuneApp.cpp in WhiteDune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file...
Georgia SoftWorks SSH2 Server多个远程代码执行漏洞
BUGTRAQ ID: 27103 GSW SSH2 Server是使用在Windows平台下的SSH2/Telnet服务程序。 GSW SSH2 Server在处理畸形用户数据时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制客户端。 ------------------------------------ A 日志函数格式串和缓冲区溢出 ------------------------------------ GSW...
White_Dune本地缓冲区溢出及格式串处理漏洞
BUGTRAQ ID: 27102 WhiteDune是VRML97文件的开源编辑器和查看器。 WhiteDune的实现上存在多个安全漏洞，远程攻击者可能利用此漏洞控制用户系统。 ----------------------------------- A Scene::errorf缓冲区溢出 ----------------------------------- 用于创建解析WRL文件中所出现问题的错误消息的函数中存在缓冲区溢出漏洞。以下是Scene.cpp文件中的漏洞代码： void Scene::errorfconst char fmt, ... valist ap; char...
CVE-2007-6625: Use of Externally-Controlled Format String
The Platform Service Process asampsp in Fan-Out Driver Platform Services for Novell Identity Manager IDM 3.5.1 allows remote attackers to cause a denial of service daemon crash via unspecified network traffic that triggers a syslog message containing invalid format string specifiers, as...
CVE-2007-6625
The Platform Service Process asampsp in Fan-Out Driver Platform Services for Novell Identity Manager IDM 3.5.1 allows remote attackers to cause a denial of service daemon crash via unspecified network traffic that triggers a syslog message containing invalid format string specifiers, as...
Debian DSA-1444-2 : php5 - several vulnerabilities
It was discovered that the patch for CVE-2007-4659 could lead to regressions in some scenarios. The fix has been reverted for now, a revised update will be provided in a future PHP DSA. For reference the original advisory below : Several remote vulnerabilities have been discovered in PHP, a...
