CVE-2006-2191

The CVE-2006-2191 entry concerns a format-string vulnerability in Mailman prior to version 2.1.9, which could allow an attacker to execute arbitrary code via unspecified vectors. The vulnerability is documented across multiple advisories and OpenVAS/Nessus entries, and several sources explicitly ...

PT-2006-3170 · Gnu · Mailman

Name of the Vulnerable Software and Affected Versions: Mailman versions prior to 2.1.9 Description: A format string issue allows attackers to execute arbitrary code. The vendor has disputed this issue, stating it is unexploitable. Recommendations: For versions prior to 2.1.9, update to version...

AIX 5.1 : IY23846

The remote host is missing AIX Critical Security Patch number IY23846 SECURITY: Format string vulnerability in CDE ToolTalk server. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

CVE-2006-4802

Format string vulnerability in the Real Time Virus Scan service in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allows local users to execute arbitrary code via an unspecified vector related to alert notification messages, a different vector than...

CVE-2006-4802

CVE-2006-4802 describes a format string vulnerability in the Real Time Virus Scan service of Symantec AntiVirus Corporate Edition (8.1–10.0) and Client Security (1.x–3.0). The flaw allows local users to execute arbitrary code via an unspecified vector related to alert notification messages, noted...

Apple Mac OSX 10.x - KExtLoad Format String

Apple Mac OSX 10.x - KExtLoad Format String source: https://www.securityfocus.com/bid/20031/info Apple Mac OS X 'kextload' is prone to a format-string vulnerability because it fails to sufficiently sanitize user-supplied input data. This issue is not exploitable by itself, because kextload is not...

Easy Address Book Web Server Query Remote Format String

It appears that the remote web server is affected by a remote format string issue. Using a specially crafted URL containing a format string specifier, an unauthenticated, remote attacker can crash the affected application and possibly execute arbitrary code on the remote host. %NASLMINLEVEL 70300...

Easy Address Book Web Server 1.2 - Remote Format String

source: https://www.securityfocus.com/bid/19842/info Easy Address Book Web Server is prone to a remote format-string vulnerability because the application fails to properly sanitize user-supplied data before including it in the format-specifier argument to a formatted-printing function. This issu...

FreeBSD : mysql -- format string vulnerability (fcb90eb0-2ace-11db-a6e2-000e0c2e438a)

"Jean-David Maillefer reports a Denial of Service vulnerability within MySQL. The vulnerability is caused by improper checking of the dataformat routine, which cause the MySQL server to crash. The crash is triggered by the following code:'SELECT dateformat'%d%s', 1 %NASLMINLEVEL 70300 C Tenable...

CVE-2006-4070

Format string vulnerability in Imendio Planner 0.13 allows user-assisted attackers to execute arbitrary code via format string specifiers in a filename...

Net::Server: Format string vulnerability

Background Net::Server is an extensible, generic Perl server engine. It is used by several Perl applications like Postgrey. Description The log function of Net::Server does not handle format string specifiers properly before they are sent to syslog. Impact By sending a specially crafted datastrea...

CVE-2006-4070

CVE-2006-4070 concerns a format-string vulnerability in Imendio Planner 0.13. The flaw allows user-assisted attackers to execute arbitrary code via format specifiers embedded in a filename. According to NVD, the base CVSSv2 score is 5.1 (Medium) with network access required and no authentication....

CVE-2006-3120

Format string vulnerability in Brian Wotring Osiris before 4.2.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via unspecified attack vectors related to the logging functions...

CVE-2006-3120

Osiris (osiris) vulnerable to a format-string flaw in its logging functions prior to version 4.2.1. A remote attacker could cause a denial of service (application crash) and potentially execute arbitrary code. Debian advisories indicate fixes: 4.0.6-1sarge1 for the stable (sarge) release and 4.2....

CVE-2006-3908

CVE-2006-3908 affects Game Network Engine (GNE) versions up to 0.70, via a format-string vulnerability in the flush_output function of ConsoleStreambuf.cpp. The flaw allows remote attackers to crash the process and potentially execute code through format specifiers when output is sent to the gout...

CVE-2006-3469

Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of service crash via a format string instead of a date as the first parameter to the dateformat function, which is later used in a formatted pri...

Cyrus IMAPD 2.3.2 - 'pop3d' Remote Buffer Overflow (2)

!/usr/bin/ruby cyrus-imapd pop3d exploit by bannedit 05/23/2006 This exploit takes advantage of a stack based overflow. Once the stack corruption has occured it is possible to overwrite a pointer which is later used for a memcpy this gives us a write anything anywhere condition similar to a forma...

CVE-2006-3573

Format string vulnerability in the WriteText function in agltext.cpp in Milan Mimica Sparklet 0.9.4 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a player nickname...

Layered Defense Advisory: Format String Vuln in CA eTrust

=============================================================== Layered Defense Advisory 27 June 2006 =============================================================== 1 Affected Software Computer Associates: eTrust Antivirus 8.0 Computer Associates: eTrust PestPatrol 8.0 Computer Associates:...

[Full-disclosure] Layered Defense Advisory: Format String Vuln in CA eTrust

=============================================================== Layered Defense Advisory 27 June 2006 =============================================================== 1 Affected Software Computer Associates: eTrust Antivirus 8.0 Computer Associates: eTrust PestPatrol 8.0 Computer Associates:...