9935 matches found
Multipel QNX utilities bugs
Buffer overflow in Photon, format string in FTP client, race conditions in crrtrap...
[RLSA_03-2004] QNX ftp client format string bug
rfdslabs security advisory Title: QNX ftp client format string bug RLSA03-2004 Versions: QNX RTP 6.1 possibly others Vendor: http://www.qnx.com Date: 13 Sep 2004 Author: Julio Cesar Fort julio at rfdslabs com br 1. Introduction "QNX Software Systems has provided OS technology, development tools,...
RHEL 2.1 : mod_ssl (RHSA-2004:408)
An updated modssl package for Apache that fixes a format string vulnerability is now available. The modssl module provides strong cryptography for the Apache Web server via the Secure Sockets Layer SSL and Transport Layer Security TLS protocols. A format string issue was discovered in modssl for...
Important: Red Hat Security Advisory: mod_ssl security update
An updated modssl package for Apache that fixes a format string vulnerability is now available. The modssl module provides strong cryptography for the Apache Web server via the Secure Sockets Layer SSL and Transport Layer Security TLS protocols. A format string issue was discovered in modssl for...
Courier-IMAP 3.0.2-r1 - 'auth_debug()' Remote Format String
/ courier-imap = 3.0.2-r1 Remote Format String Vulnerability exploit Author: ktha at hush dot com Tested on FreeBSD 4.10-RELEASE with courier-imap-3.0.2 Special thanks goes to andrewg for providing the FreeBSD box. Greetings: all the guys from irc pulltheplug com and irc netric org bash-2.05b$...
Courier-IMAP 3.0.2-r1 - auth_debug() Remote Format String
Courier-IMAP 3.0.2-r1 - authdebug Remote Format String / courier-imap = 3.0.2-r1 Remote Format String Vulnerability exploit Author: ktha at hush dot com Tested on FreeBSD 4.10-RELEASE with courier-imap-3.0.2 Special thanks goes to andrewg for providing the FreeBSD box. Greetings: all the guys fro...
Courier-IMAP <= 3.0.2-r1 auth_debug() Remote Format String Exploit
Exploit for bsd platform in category remote exploits ================================================================== Courier-IMAP = 3.0.2-r1 authdebug Remote Format String Exploit ================================================================== / courier-imap = 3.0.2-r1 Remote Format String...
Courier-IMAP <= 3.0.2-r1 auth_debug() Remote Format String Exploit
No description provided by source. / courier-imap = 3.0.2-r1 Remote Format String Vulnerability exploit Author: ktha at hush dot com Tested on FreeBSD 4.10-RELEASE with courier-imap-3.0.2 Special thanks goes to andrewg for providing the FreeBSD box. Greetings: all the guys from irc pulltheplug co...
CVE-2003-0081
CVE-2003-0081 affects Ethereal (packet analyzer) with a format string vulnerability in the SOCKS dissector, impacting Ethereal 0.8.7–0.9.9. Remote attackers could execute arbitrary code by sending crafted SOCKS packets. Debian, Red Hat, Mandrake/Mandriva, SUSE and other advisories reference this ...
CVE-2003-0969
The CVE-2003-0969 entry concerns mpg321, affected in version 0.2.10, where a format-string vulnerability could allow remote attackers to overwrite memory or execute code by feeding specially crafted MP3 data that causes unsafe printf usage. Impact is potential arbitrary code execution; exploitati...
CVE-2004-0165
The Mac OS X PPP daemon (pppd) 2.4.0 on Mac OS X ≤10.3.2 is affected by a format-string vulnerability in option_error() that can cause vslprintf() to leak data from the pppd process, potentially exposing PAP/CHAP credentials. This may enable reading arbitrary pppd data when the service is used as...
CVE-2003-0103
Format string vulnerability in Nokia 6210 handset allows remote attackers to cause a denial of service crash, lockup, or restart via a Multi-Part vCard with fields containing a large number of format string specifiers...
CVE-2001-1081
Format string vulnerabilities in Livingston/Lucent RADIUS before 2.1.va.1 may allow local or remote attackers to cause a denial of service and possibly execute arbitrary code via format specifiers that are injected into log messages...
CVE-2001-0792
CVE-2001-0792 describes a format-string vulnerability in XChat 1.2.x that lets remote attackers execute arbitrary code via a malformed nickname. The provided documents identify the affected product as XChat 1.2.x and classify the issue as a remote, unauthenticated vector with potential for arbitr...
CVE-2003-0969
mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via an mp3 file that passes certain strings to the printf function, possibly triggering a format string vulnerability...
CVE-2002-1381
Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative users to execute arbitrary code by modifying the pidfilepath value...
CVE-2004-0159
Format string vulnerability in hsftp 1.11 allows remote authenticated users to cause a denial of service and potentially execute arbitrary code via file names crafted to trigger unsafe handling during directory listings. Debian’s DSA-447-1 confirms the fix is to upgrade hsftp (current patched ver...
CVE-2003-0103
CVE-2003-0103 describes a format-string vulnerability in the Nokia 6210 handset. A crafted Multi-Part vCard containing many format specifiers can cause a remote denial of service (crash, lockup, or restart). The initial sources identify the impacted device and the vulnerability class, but do not ...
CVE-2002-0842
CVE-2002-0842 is a format-string vulnerability in Oracle’s mod_dav extension (used for logging gateway errors) that could enable remote code execution via a crafted destination URI triggering a 502 Bad Gateway. The vulnerability affects Oracle9i Application Server 9.0.2 (and related mod_dav code ...
CVE-2004-0165
Format string vulnerability in Point-to-Point Protocol PPP daemon pppd 2.4.0 for Mac OS X 10.3.2 and earlier allows remote attackers to read arbitrary pppd process data, including PAP or CHAP authentication credentials, to gain privileges...