CVE-2004-1917

Format string vulnerability in testfuncfunc in LCDProc 0.4.1 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the str variable...

CVE-2003-1170

CVE-2003-1170 affects kpopup (versions 0.9.1 and 0.9.5pre2). A format string vulnerability in main.cpp can allow local users to cause a denial of service (segmentation fault) and possibly execute arbitrary code via command line arguments. Additional VuXML/OpenVAS/Nessus entries note that misc.cpp...

CVE-2004-1900: Undefined Security Weakness

Format string vulnerability in the logging function in IGI 2 Covert Strike server 1.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in RCON commands...

CVE-2004-1946: Undefined Security Weakness

Format string vulnerability in the PRINTERROR function in common.c for Cherokee Web Server 0.4.16 and earlier allows local users to execute arbitrary code via format string specifiers in the -C command line argument. NOTE: it is not clear whether this issue could be exploited remotely, or if...

CVE-2004-1805: Undefined Security Weakness

Format string vulnerability in games using the Epic Games Unreal Engine 436 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in class names...

CVE-2003-1170: Undefined Security Weakness

Format string vulnerability in main.cpp in kpopup 0.9.1 and 0.9.5pre2 allows local users to cause a denial of service segmentation fault and possibly execute arbitrary code via format string specifiers in command line arguments...

CVE-2004-1917: Undefined Security Weakness

Format string vulnerability in testfuncfunc in LCDProc 0.4.1 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the str variable...

CVE-2004-2026: Undefined Security Weakness

Format string vulnerability in the logmsg function in svc.c for Pound 1.5 and earlier allows remote attackers to execute arbitrary code via format string specifiers in syslog messages...

Oops! proxy format string vulnerability

Format string bug during database logging...

[NEWS] Ethereal Protocol Dissectors Buffer Overflow Vulnerabilities

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2005-1463

CVE-2005-1463 refers to multiple format-string vulnerabilities in Ethereal before 0.10.11, affecting the DHCP and ANSI A dissectors. The root cause is format-string handling that allows remote attackers to execute arbitrary code. The advisory notes that upgrading Ethereal to version 0.10.11 elimi...

CVE-2005-1463

Multiple format string vulnerabilities in the 1 DHCP and 2 ANSI A dissectors in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code...

CVE-2005-1463

Multiple format string vulnerabilities in the 1 DHCP and 2 ANSI A dissectors in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code...

CVE-2005-1463

Multiple format string vulnerabilities in the 1 DHCP and 2 ANSI A dissectors in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code...

CVE-2005-1463: Undefined Security Weakness

Multiple format string vulnerabilities in the 1 DHCP and 2 ANSI A dissectors in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code...

dSMTP Mail Server 3.1b Linux Remote Root Format String Exploit

Exploit for linux platform in category remote exploits ============================================================== dSMTP Mail Server 3.1b Linux Remote Root Format String Exploit ============================================================== / dSMTP - SMTP Mail Server 3.1b Linux Remote Root...

Oops!: Remote code execution

Background Oops! is an advanced, multithreaded caching web proxy. Description A format string flaw has been detected in the myxlog function of the Oops! proxy, which is called by the passwdmysql and passwdpgsql module's auth functions. Impact A remote attacker could send a specially crafted HTTP...

dSMTP Mail Server 3.1b (Linux) - Format String

dSMTP Mail Server 3.1b Linux - Format String / dSMTP - SMTP Mail Server 3.1b Linux Remote Root Format String Exploit cybertronicatgmxdotnet 05/05/2005 This exploits the "xtellmail" command! bindc0de breaks somehow, cb works fine! remote buffer space is about 256 bytes bad chars: 0x00, 0x20, 0x0a...

dSMTP Mail Server 3.1b Linux Remote Root Format String Exploit

No description provided by source. / dSMTP - SMTP Mail Server 3.1b Linux Remote Root Format String Exploit cybertronicatgmxdotnet 05/05/2005 This exploits the "xtellmail" command! bindc0de breaks somehow, cb works fine! remote buffer space is about 256 bytes bad chars: 0x00, 0x20, 0x0a and prolly...

PT-2005-2459 · Ethereal +1 · Ethereal +1

Name of the Vulnerable Software and Affected Versions: Ethereal versions prior to 0.10.11 Description: The issue concerns multiple format string vulnerabilities in the DHCP and ANSI A dissectors. These vulnerabilities may allow remote attackers to execute arbitrary code. Recommendations: For...