8591 matches found
CVE-2006-4127
Multiple format string vulnerabilities in DConnect Daemon 0.7.0 and earlier allow remote administrators to execute arbitrary code via format string specifiers that are not properly handled when calling the 1 privmsg or 2 pubmsg functions from a cmd.user.c, b penalties.c, or c cmd.dc.c...
GLSA-200608-18 : Net::Server: Format string vulnerability
The remote host is affected by the vulnerability described in GLSA-200608-18 Net::Server: Format string vulnerability The log function of Net::Server does not handle format string specifiers properly before they are sent to syslog. Impact : By sending a specially crafted datastream to an...
FreeBSD : mysql -- format string vulnerability (fcb90eb0-2ace-11db-a6e2-000e0c2e438a)
"Jean-David Maillefer reports a Denial of Service vulnerability within MySQL. The vulnerability is caused by improper checking of the dataformat routine, which cause the MySQL server to crash. The crash is triggered by the following code:'SELECT dateformat'%d%s', 1 %NASLMINLEVEL 70300 C Tenable...
CVE-2006-4070
Format string vulnerability in Imendio Planner 0.13 allows user-assisted attackers to execute arbitrary code via format string specifiers in a filename...
CVE-2006-4070
Format string vulnerability in Imendio Planner 0.13 allows user-assisted attackers to execute arbitrary code via format string specifiers in a filename...
CVE-2006-4070
CVE-2006-4070 concerns a format-string vulnerability in Imendio Planner 0.13. The flaw allows user-assisted attackers to execute arbitrary code via format specifiers embedded in a filename. According to NVD, the base CVSSv2 score is 5.1 (Medium) with network access required and no authentication....
Net::Server: Format string vulnerability
Background Net::Server is an extensible, generic Perl server engine. It is used by several Perl applications like Postgrey. Description The log function of Net::Server does not handle format string specifiers properly before they are sent to syslog. Impact By sending a specially crafted datastrea...
IMENDIO PLANNER REMOTE FILENAME FORMAT STRING VULNERABILITY
By : LoneEagle E-mail : [email protected] http://kandangjamur.net Affected : IMENDIO PLANNER 0.13 PROJECT MANAGEMENT FEDORA 4. Impact : System Acces From : Remote Severity : Moderately Critical Description: ------------ Imendio planner was failed when opening file name format string. Remote...
Imendio Planner format string vulnerability
Format string vulnerability in filename...
DConnect Daemon Multiple Vulnerabilities
Luigi Auriemma Application: DConnect Daemon http://www.dc.ds.pg.gda.pl Versions: = 0.7.0 and CVS = 30 Jul 2006 Platforms: Windows, nix, BSD and others Bugs: A listenthreadudp buffer-overflow B dcchat NULL pointer C various format string bugs privileges needed Exploitation: remote Date: 06 Aug 200...
DConnect Daemon chat server multiple security vulnerabilities
DoS conditions, format string vulnerabilities...
MySQL: Denial of service
Background MySQL is a popular multi-threaded, multi-user SQL server. Description Jean-David Maillefer discovered a format string vulnerability in time.cc where MySQL fails to properly handle specially formatted user input to the dateformat function. Impact By specifying a format string as the fir...
CVE-2006-3120
Format string vulnerability in Brian Wotring Osiris before 4.2.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via unspecified attack vectors related to the logging functions...
CVE-2006-3120
Osiris (osiris) vulnerable to a format-string flaw in its logging functions prior to version 4.2.1. A remote attacker could cause a denial of service (application crash) and potentially execute arbitrary code. Debian advisories indicate fixes: 4.0.6-1sarge1 for the stable (sarge) release and 4.2....
CVE-2006-3120
Format string vulnerability in Brian Wotring Osiris before 4.2.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via unspecified attack vectors related to the logging functions...
[SECURITY] [DSA 1129-1] New osiris packages fix arbitrary code execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1129-1 [email protected] http://www.debian.org/security/ Martin Schulze July 28th, 2006 http://www.debian.org/security/faq -...
Osiris system integrity monitor format string vulnerability
No description provided...
[SECURITY] [DSA 1129-1] New osiris packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1129-1 [email protected] http://www.debian.org/security/ Martin Schulze July 28th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1127-1] New ethereal packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1127-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 28th, 2006 http://www.debian.org/security/faq -...
