CVE-2005-2237

CVE-2005-2237 describes a format string vulnerability in the swcons command on IBM AIX 5.3 (and possibly other versions) that could allow local users to execute arbitrary code via long command line arguments. The vulnerability arises from a format string handling flaw in swcons, enabling local pr...

CVE-2005-2236

Format string vulnerability in the paginit command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary code via format strings in command line arguments...

CVE-2005-2236

CVE-2005-2236 describes a format string vulnerability in the paginit command for IBM AIX 5.3 (and possibly other versions). The issue could allow local users to execute arbitrary code via format strings supplied in command line arguments. This is a local privilege concern with an impact described...

CVE-2004-2160

Format string vulnerability in xmlelem.c for XMLStarlet Command Line XML Toolkit 0.9.3 may allow attackers to cause a denial of service or execute arbitrary code...

CVE-2004-2160

XMLStarlet Command Line XML Toolkit 0.9.3 is affected by a format string vulnerability in xml_elem.c, as described for CVE-2004-2160. The issue enables denial of service or arbitrary code execution and is exploitable via network access with low attack complexity, according to the NVD entry. Affec...

CVE-2005-2083

Format string vulnerability in IMAP4 in IA eMailServer Corporate Edition 5.2.2 build 1051 allows remote attackers to cause a denial of service application crash via a LIST command with format string specifiers as the second argument...

CVE-2002-1789

CVE-2002-1789 : A format string vulnerability in the newsx NNTP client (pre-1.4.8) allows local users to execute arbitrary code via format specifiers that are mishandled in a call to syslog. Affected component: newsx NNTP client; root cause: improper handling of format specifiers in a syslog invo...

CVE-2002-1788

Format string vulnerability in the nnexitmsg function in nn 6.6.0 through 6.6.3 allows remote NNTP servers to execute arbitrary code via format strings in server responses...

CVE-2002-1825

Format string vulnerability in PerlRTEexample1.pl in WASD 7.1, 7.2.0 through 7.2.3, and 8.0.0 allows remote attackers to execute arbitrary commands or crash the server via format strings in the $name variable...

CVE-2002-1825

Summary (CVE-2002-1825): A format-string vulnerability in PerlRTE_example1.pl used by WASD versions 7.1, 7.2.0–7.2.3, and 8.0.0 allows remote attackers to execute arbitrary commands or crash the server via format strings in the $name variable. The NVD entry lists a CVSS v2 base score of 6.4 (MEDI...

CVE-2002-1788

CVE-2002-1788 affects nn (NN) versions 6.6.0–6.6.3, where the nn_exitmsg function is vulnerable to a format-string issue that can let remote NNTP servers cause arbitrary code execution via crafted server responses. The available documents confirm the vulnerability but do not provide exploit code,...

[Full-disclosure] multihtml exploit vulnerability advisory

Multihtml.c Security Advisory Pot Kettle Industries http://potkettle.net Topic: Multihtml.c exploit remote vulnerability Category: Remote for Remote Vendor: bansh33 [email protected], r00tabega security labs http://www.r00tabega.org Announced: 2005-06-10 Credits: Pot Kettle Industries Affects:...

IA eMailServer IMAP4 LIST Command Format String Remote DoS

The remote host is running True North Software's IA eMailServer, a messaging system for Windows. The remote version of IA eMailServer suffers from a format string vulnerability leading to a denial of service that can be exploited by an authenticated user when sending a specially crafted IMAP LIST...

CVE-2002-1675

Consolidated data confirms CVE-2002-1675 is a format string vulnerability in Unreal IRCd 3.1.1’s Cio_PrintF function within cio_main.c. The root cause is improper handling of format strings, enabling remote attackers to trigger a denial of service (crash) and potentially execute arbitrary code. T...

GLSA-200506-15 : PeerCast: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200506-15 PeerCast: Format string vulnerability James Bercegay of the GulfTech Security Research Team discovered that PeerCast insecurely implements formatted printing when receiving a request with a malformed URL. Impact : A remo...

PeerCast 0.1211 - Remote Format String

/ \ PeerCast \ / by Darkeagle darkeagle at linkin-park dot cc \ / uKt researcherz http://unl0ck.org \ / greetz goes to: uKt researcherz. \ / \ - smallest code - better code!!! / / include include include include include include include include include include // define doit b0, b1, b2, b3, addr ...

PeerCast: Format string vulnerability

Background PeerCast is a media streaming system based on P2P technology. Description James Bercegay of the GulfTech Security Research Team discovered that PeerCast insecurely implements formatted printing when receiving a request with a malformed URL. Impact A remote attacker could exploit this...

Debian DSA-726-1 : oops - format string vulnerability

A format string vulnerability has been discovered in the MySQL/PgSQL authentication module of Oops, a caching HTTP proxy server written for performance. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

Debian DSA-732-1 : mailutils - several vulnerabilities

'infamous41md' discovered several vulnerabilities in the GNU mailutils package which contains utilities for handling mail. These problems can lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities. ...

security flaw

Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service application crash via a bin file with format string specifiers in the filename. NOTE: while this issue is triggered on the command line by the gedit user, it has been reported that web browsers and email...