Qwik SMTP 0.3 - Format String

/ qwik-smtp Remote Root Exploit ------------------------------- Bug found by: Dark Eagle Exploit coded by: Carlos Barros Home Page: http://www.barrossecurity.com Exploitation techinique: This bug is a simple format string bug. While coding this exploit, I found just two "problems". The first is...

DSA-590-1 gnats - format string vulnerability

Bulletin has no description...

isc-dhcpd -- format string vulnerabilities

The ISC DHCP programs are vulnerable to several format string vulnerabilities which may allow a remote attacker to execute arbitrary code with the permissions of the DHCP programs, typically root for the DHCP server...

In-game format string bug in the Lithtech engine

Luigi Auriemma Application: Lithtech engine http://www.lithtech.com Games: Alien vs Predator 2 = 1.0.9.6 Blood 2 = 2.1 Contract Jack = 1.1 Global Operations = 2.0/2.1 Kiss Psycho Circus = 1.13 Legends of Might and Magic = 1.1 No one lives forever = 1.004 No one lives forever 2 = 1.3 Purge Jihad =...

debian dhcpd, old format string bug

Subject: Debian dhcpd package. http://packages.debian.org/stable/net/dhcp It is vulnerable to the '02 format string bug. http://www.cert.org/advisories/CA-2002-12.html -- -sean...

HTTP URI Handling Format String

The remote web server seems to be vulnerable to a format string attack on the URI. An attacker might use this flaw to make it crash or even execute arbitrary code on this host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid15640; scriptversion"$Revision: 1.19 $";...

HTTP Header Value Remote Format String

The remote web server seems to be vulnerable to a remote format string attack based on the way it responds to a request containing a header whose value includes a format string. An anonymous attacker may be able to leverage this flaw to make the affected service crash or to execute arbitrary code...

HTTP Header Name Remote Format String

The remote web server seems to be vulnerable to a remote format string attack based on the way it responds to a request containing a header whose name includes a format string. An anonymous attacker may be able to leverage this flaw to make the affected service crash or to execute arbitrary code ...

DHCP format tring bug

Format string bug via DNS name on syslog call...

Monolith Lithtech Game Engine - Multiple Remote Format String Vulnerabilities

// source: https://www.securityfocus.com/bid/11610/info Lithtech game engine is prone to multiple remote format-string vulnerabilities because of incorrect usage of 'printf'-type functions. Format specifiers can be supplied directly to vulnerable functions from external data. A denial-of-service...

Monolith Lithtech Game Engine - Multiple Remote Format String Vulnerabilities

Monolith Lithtech Game Engine - Multiple Remote Format String Vulnerabilities // source: https://www.securityfocus.com/bid/11610/info Lithtech game engine is prone to multiple remote format-string vulnerabilities because of incorrect usage of 'printf'-type functions. Format specifiers can be...

[SECURITY] [DSA 584-1] New dhcp packages fix format string vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 584-1 [email protected] http://www.debian.org/security/ Martin Schulze November 4th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 584-1] New dhcp packages fix format string vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 584-1 [email protected] http://www.debian.org/security/ Martin Schulze November 4th, 2004 http://www.debian.org/security/faq -...

DSA-584-1 dhcp - format string vulnerability

Bulletin has no description...

[Full-Disclosure] [ GLSA 200411-07 ] Proxytunnel: Format string vulnerability

Gentoo Linux Security Advisory GLSA 200411-07 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Cherokee Web Server auth_pam Authentication Format String

The remote host is running Cherokee - a fast and tiny web server. The remote version of this software is vulnerable to a format string attack when processing authentication requests using authpam. This could allow a remote attacker to cause a denial of service, or potentially execute arbitrary...

Cherokee Web Server < 0.4.17.1 auth_pam Authentication Format String

Binary data 2383.prm...

Proxytunnel: Format string vulnerability

Background Proxytunnel is a program that tunnels connections to a remote server through a standard HTTPS proxy. Description Florian Schilhabel of the Gentoo Linux Security Audit project found a format string vulnerability in Proxytunnel. When the program is started in daemon mode -a port, it...

Speedtouch USB driver for linux format string bugs

Format string bug on syslog call...

GLSA-200411-07 : Proxytunnel: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200411-07 Proxytunnel: Format string vulnerability Florian Schilhabel of the Gentoo Linux Security Audit project found a format string vulnerability in Proxytunnel. When the program is started in daemon mode -a port, it improperly...