SUSE-SA:2005:017: ImageMagick

The remote host is missing the patch for the advisory SUSE-SA:2005:017 ImageMagick. This update fixes several security issues in the ImageMagick program suite: - A format string vulnerability was found in the display program which could lead to a remote attacker being to able to execute code as t...

CVE-2005-0804

Format string vulnerability in MailEnable 1.8 allows remote attackers to cause a denial of service application crash via format string specifiers in the mailto field...

CVE-2005-0770

CVE-2005-0770 affects DataRescue IDA Pro 4.7.0.830. The vulnerability is a format string flaw in the DLL name, enabling a remote attacker or local user to trigger denial of service (CPU consumption or app crash) and possibly execute arbitrary code. Impact includes DoS and potential code execution...

See-security Advisory: Format string vulnerability in MailEnable 1.8

See-security Technologies ltd. http://www.see-security.com - Product Information MailEnable Standard Edition provides robust SMTP and POP3 services for Windows NT/2000/XP/2003 systems. - Vulnerability Description MailEnable contains a format string vulnerability in the it handles SMTP mailto:...

MailEnable Standard SMTP mailto: Request Format String

The remote host is running a version of MailEnable Standard Edition that suffers from a format string vulnerability in its handling of SMTP commands. Specifically, a remote attacker can crash the SMTP daemon by sending a command with a format specifier as an argument. Due to the nature of the fla...

PlatinumFTP Server < 2.0 Remote Format String DoS

Binary data 2700.prm...

ISC DHCP contains a format string vulnerabilty in errwarn.c

Overview The Internet Systems Consortium ISC Dynamic Host Configuration Protocol DHCP application contains a format string vulnerability in errwarn.c that could allow an attacker to execute arbitrary code. Description As described in RFC 2131, "The Dynamic Host Configuration Protocol DHCP provide...

CVE-2005-0665

Format string vulnerability in xv before 3.10a allows remote attackers to execute arbitrary code via format string specifiers in a filename...

CVE-2005-0671

Ca3DE (Carsten’s 3D Engine) is affected: the March 2004 version and earlier contain a format string vulnerability in a command that allows remote code execution. Root cause is improper handling of format strings in the engine, enabling an attacker to supply format specifiers that are interpreted ...

CVE-2005-0671

Format string vulnerability in Carsten's 3D Engine Ca3DE, March 2004 version and earlier, allows remote attackers to execute arbitrary code via format string specifiers in a command...

CVE-2005-0665

The CVE-2005-0665 entry describes a format-string vulnerability in xv (pre-3.10a) that lets remote attackers execute arbitrary code via crafted filenames. Root cause: processing of format specifiers in filenames. Impact: arbitrary code execution on affected xv deployments. Remediation: upgrade to...

DEBIAN-CVE-2005-0687

Format string vulnerability in Hashcash 1.16 allows remote attackers to cause a denial of service memory consumption and possibly execute arbitrary code via format string specifiers in a reply address, which is not properly handled when printing the header...

CVE-2005-0636

Format string vulnerability in Foxmail Server 2.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format strings in the USER command...

CVE-2005-0636

The CVE-2005-0636 entry describes a format string vulnerability in Foxmail Server 2.0, exploitable via remote USER command input over the network. The underlying flaw is in format string handling, allowing denial of service (crash) and potentially arbitrary code execution. Documents do not specif...

CVE-2005-0671

Format string vulnerability in Carsten's 3D Engine Ca3DE, March 2004 version and earlier, allows remote attackers to execute arbitrary code via format string specifiers in a command...

BidWatcher: Format string vulnerability

Background BidWatcher is a free auction tool for eBay users to keep track of their auctions. Description Ulf Harnhammar discovered a format string vulnerability in "netstuff.cpp". Impact Remote attackers can potentially exploit this vulnerability by sending specially crafted responses via an eBay...

CVE-2004-1006

Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via certain DNS messages, a different vulnerability than CVE-2002-0702...

IBM AIX auditselect contains format string vulnerability

Overview IBM AIX auditselect command contains a format string vulnerability that may allow a local attacker to execute arbitrary code. Description According to IBM's Command Reference, the syntax and description of the auditselect command are as follows:$ auditselect -e "Expression" | -f File -m...

CVE-2005-0577

Format string vulnerability in DNA MKBold-MKItalic 0.061 and earlier allows remote attackers to execute arbitrary code via crafted BDF font files...

CVE-2005-0577

CVE-2005-0577 affects DNA MKBold-MKItalic up to version 0.06_1. The vulnerability is a format string flaw in the BDF font processing that could allow remote code execution. The OpenVAS and NVD records corroborate the issue; they reference the FreeBSD ports mkbold-mkitalic package as affected. The...