3138 matches found
CVE-2005-2367
Format string vulnerability in the protoitemsettext function in Ethereal 0.9.4 through 0.10.11, as used in multiple dissectors, allows remote attackers to write to arbitrary memory locations and gain privileges via a crafted AFP packet...
CVE-2005-2367
CVE-2005-2367 describes a format-string vulnerability in Ethereal (Wireshark) affecting 0.9.4–0.10.11 across multiple AFP-related dissectors. The underlying issue allows remote attackers to write to arbitrary memory and potentially gain privileges by sending crafted AFP packets. Public references...
PT-2005-3282 · Ethereal +1 · Ethereal +1
Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.4 through 0.10.11 Description: The issue is related to a format string vulnerability in the proto item set text function, which is used in multiple dissectors. This vulnerability allows remote attackers to write to...
CVE-2002-2091
CVE-2002-2091 affects Deception Finger Daemon (decfingerd) 0.7, exposing a format-string vulnerability in the username field of a finger request that could allow remote code execution. The issue is documented across multiple sources (e.g., NVD, Red Hat advisory, CVE list) with the impact describe...
CVE-2002-2091
Format string vulnerability in Deception Finger Daemon, decfingerd, 0.7 may allow remote attackers to execute arbitrary code via the username of a finger request...
nbSMTP: Format string vulnerability
Background nbSMTP is an SMTP client suitable to run in chroot jails, in embedded systems, laptops and workstations. Description Niels Heinen discovered a format string vulnerability. Impact An attacker can setup a malicious SMTP server and exploit this vulnerability to execute arbitrary code with...
CVE-2005-2409
The vulnerability is in nbSMTP 0.99 and earlier (util.c) where, when in debug mode, format string specifiers are mishandled in a syslog call, allowing remote code execution. Affected product: nbSMTP (nbSMTP). Root cause: improper handling of format strings in a syslog path. Impact: arbitrary code...
CVE-2005-2410
Format string vulnerability in the nminfohandler function in Network Manager may allow remote attackers to execute arbitrary code via format string specifiers in a Wireless Access Point identifier, which is not properly handled in a syslog call...
CVE-2005-2375
CVE-2005-2375 affects Race Driver (1.20 and earlier). The vulnerability is a format string issue in the nickname or chat input that can be exploited remotely to cause an application crash (DoS). The connected sources collectively confirm the affected software, the vulnerable components (format st...
CVE-2005-2375
Format string vulnerability in Race Driver 1.20 and earlier allows remote attackers to cause a denial of service application crash via format string specifiers in a 1 nickname or 2 chat message...
gxine format string vulnerability
New gxine packages are available for Slackware 10.0, 10.1, and -current to fix a format string security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1692 Here are the details from...
CVE-2004-2238
The CVE concerns a format-string issue in vsybase.c of vpopmail versions up to 5.4.2. A follow-up note indicates the source uses constants that, when compiled, become static format strings, and this is described as not a vulnerability. No concrete impact, attack vectors, or remediation details ar...
CVE-2002-2022
The CVE-2002-2022 entry concerns Kaffe OpenVM 1.0.6 and earlier. Root cause: a format string vulnerability in the handling of forName attributes that can be triggered when a java.lang.NoClassDefFoundError is thrown, allowing a local attacker to execute arbitrary code. Affected component: the VM’s...
CVE-2001-1566
Format string vulnerability in libvanessalogger 0.0.1 in Perdition 0.1.8 allows remote attackers to execute arbitrary code via format string specifiers in the vanessaloggerlog function...
FreeBSD : oops -- format string vulnerability (1033750f-cab4-11d9-9aed-000e0c2e438a)
A RST/GHC Advisory reports that there is an format string vulnerability in oops. The vulnerability can be found in the MySQL/PgSQL authentication module. Succesful exploitation may allow execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
FreeBSD : ngircd -- format string vulnerability (bc4a7efa-7d9a-11d9-a9e7-0001020eed82)
A No System Group security advisory reports that ngircd is vulnerable to a format string vulnerability in the LogResolver function of log.c, if IDENT support is enabled. This could allow a remote attacker to execute arbitrary code with the permissions of the ngircd daemon, which is root by defaul...
FreeBSD : mkbold-mkitalic -- format string vulnerability (32d4f0f1-85c3-11d9-b6dc-0007e900f747)
The version 0.061 and prior have a format string vulnerability which can be triggered by using a carefully-crafted BDF font file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright...
CVE-2005-2237
Format string vulnerability in the swcons command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary code via long command line arguments...