[Full-disclosure] multihtml exploit vulnerability advisory

Multihtml.c Security Advisory Pot Kettle Industries http://potkettle.net Topic: Multihtml.c exploit remote vulnerability Category: Remote for Remote Vendor: bansh33 [email protected], r00tabega security labs http://www.r00tabega.org Announced: 2005-06-10 Credits: Pot Kettle Industries Affects:...

IA eMailServer IMAP4 LIST Command Format String Remote DoS

The remote host is running True North Software's IA eMailServer, a messaging system for Windows. The remote version of IA eMailServer suffers from a format string vulnerability leading to a denial of service that can be exploited by an authenticated user when sending a specially crafted IMAP LIST...

CVE-2002-1675

Consolidated data confirms CVE-2002-1675 is a format string vulnerability in Unreal IRCd 3.1.1’s Cio_PrintF function within cio_main.c. The root cause is improper handling of format strings, enabling remote attackers to trigger a denial of service (crash) and potentially execute arbitrary code. T...

GLSA-200506-15 : PeerCast: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200506-15 PeerCast: Format string vulnerability James Bercegay of the GulfTech Security Research Team discovered that PeerCast insecurely implements formatted printing when receiving a request with a malformed URL. Impact : A remo...

PeerCast 0.1211 - Remote Format String

/ \ PeerCast \ / by Darkeagle darkeagle at linkin-park dot cc \ / uKt researcherz http://unl0ck.org \ / greetz goes to: uKt researcherz. \ / \ - smallest code - better code!!! / / include include include include include include include include include include // define doit b0, b1, b2, b3, addr ...

PeerCast: Format string vulnerability

Background PeerCast is a media streaming system based on P2P technology. Description James Bercegay of the GulfTech Security Research Team discovered that PeerCast insecurely implements formatted printing when receiving a request with a malformed URL. Impact A remote attacker could exploit this...

Debian DSA-732-1 : mailutils - several vulnerabilities

'infamous41md' discovered several vulnerabilities in the GNU mailutils package which contains utilities for handling mail. These problems can lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities. ...

Debian DSA-726-1 : oops - format string vulnerability

A format string vulnerability has been discovered in the MySQL/PgSQL authentication module of Oops, a caching HTTP proxy server written for performance. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

security flaw

Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service application crash via a bin file with format string specifiers in the filename. NOTE: while this issue is triggered on the command line by the gedit user, it has been reported that web browsers and email...

GLSA-200506-09 : gedit: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200506-09 gedit: Format string vulnerability A format string vulnerability exists when opening files with names containing format specifiers. Impact : A specially crafted file with format specifiers in the filename can cause...

GLSA-200506-07 : Ettercap: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200506-07 Ettercap: Format string vulnerability The cursesmsg function of Ettercap's Ncurses-based user interface insecurely implements formatted printing. Impact : A remote attacker could craft a malicious network flow that would...

CVE-2005-1806

Peercast is affected by a format-string vulnerability (CVE-2005-1806) in versions 0.1211 and earlier. The flaw allows remote attackers to execute arbitrary code or crash the server by sending specially crafted URLs, with the attacker’s privileges typically equal to the user running Peercast. Publ...

CVE-2005-1796

Format string vulnerability in the cursesmsg function in the Ncurses interface eccurses.c for Ettercap before 0.7.3 allows remote attackers to execute arbitrary code...

DEBIAN-CVE-2005-1796

Format string vulnerability in the cursesmsg function in the Ncurses interface eccurses.c for Ettercap before 0.7.3 allows remote attackers to execute arbitrary code...

PT-2005-2763 · Ettercap +1 · Ettercap +1

Name of the Vulnerable Software and Affected Versions: Ettercap versions prior to 0.7.3 Description: The issue is related to a format string vulnerability in the curses msg function, located in the ec curses.c file of the Ncurses interface. This vulnerability allows remote attackers to execute...

Gedit 2.x - Filename Format String

Gedit 2.x - Filename Format String source: https://www.securityfocus.com/bid/13699/info gEdit is prone to a format-string vulnerability. Exploitation may occur when the program is invoked with a filename that includes malicious format specifiers. Attackers could exploit this issue to corrupt...

Gedit 2.x - Filename Format String

source: https://www.securityfocus.com/bid/13699/info gEdit is prone to a format-string vulnerability. Exploitation may occur when the program is invoked with a filename that includes malicious format specifiers. Attackers could exploit this issue to corrupt arbitrary regions of memory with...

GLSA-200505-19 : gxine: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200505-19 gxine: Format string vulnerability Exworm discovered that gxine insecurely implements formatted printing in the hostname decoding function. Impact : A remote attacker could entice a user to open a carefully crafted file...

CVE-2005-1523

Format string vulnerability in imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via format string specifiers in the command tag for IMAP commands...

CVE-2005-1523

Format string vulnerability in imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via format string specifiers in the command tag for IMAP commands...