3218 matches found
Prozilla <= 1.3.7.3 Remote Format String Exploit
No description provided by source. / ...\ \ /--..... .::.:/ / \ :.::. .::::./ / / |/ .::::. / / | \ \ / / .\\ / . . . ..::.... Electronic Souls ....::.. - Prozilla vs. Gentoo Security round 2 !@ Sometime ago there was a private exploit for Prozilla and due to some kiddo who randomly 0wned...
CVE-2005-0250
Format string vulnerability in auditselect on IBM AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via format string specifiers in a command line argument...
CVE-2005-0100
The CVE-2005-0100 entry documents a format-string vulnerability in movemail used by Emacs (20.x, 21.3 and possibly other versions) and XEmacs up to 21.4, enabling remote code execution via crafted POP3 packets. Affected components: movemail utility within Emacs/XEmacs; root cause: unsafe handling...
CVE-2005-0100
Format string vulnerability in the movemail utility in 1 Emacs 20.x, 21.3, and possibly other versions, and 2 XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets...
DSA-670-1 emacs20 - format string
Bulletin has no description...
CVE-2005-0240
Format string vulnerability in chdev on IBM AIX 5.2 allows local users to execute arbitrary code via format string specifiers in a command line argument, which is not properly handled when printing an error message...
CVE-2005-0100
Format string vulnerability in the movemail utility in 1 Emacs 20.x, 21.3, and possibly other versions, and 2 XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets...
CVE-2005-0100
Format string vulnerability in the movemail utility in 1 Emacs 20.x, 21.3, and possibly other versions, and 2 XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets...
CVE-2005-0100
Format string vulnerability in the movemail utility in 1 Emacs 20.x, 21.3, and possibly other versions, and 2 XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets...
CVE-2004-1388
CVE-2004-1388 describes a format-string vulnerability in BerliOS GPSD (gpsd, formerly pygps) within the gpsd_report function, affecting versions 1.9.0 through 2.7. An attacker could remotely trigger arbitrary code execution via GPS requests with format specifiers unhandled by syslog calls. Public...
CVE-2005-0188
Format string vulnerability in the SetBaseURL function in AtHoc toolbar allows remote attackers to execute arbitrary code via format string specifiers in an invalid URL that is recorded in the debug log...
CVE-2004-1388
Format string vulnerability in the gpsdreport function for BerliOS GPD daemon gpsd, formerly pygps 1.9.0 through 2.7 allows remote attackers to execute arbitrary code via certain GPS requests containing format string specifiers that are not properly handled in syslog calls...
CVE-2004-1388
Format string vulnerability in the gpsdreport function for BerliOS GPD daemon gpsd, formerly pygps 1.9.0 through 2.7 allows remote attackers to execute arbitrary code via certain GPS requests containing format string specifiers that are not properly handled in syslog calls...
CVE-2005-0188
CVE-2005-0188 concerns a format-string vulnerability in the SetBaseURL function of the AtHoc toolbar. The issue allows remote attackers to execute arbitrary code by supplying an invalid URL that is recorded in the debug log, leveraging format specifiers. Public references in NVD/CVE records indic...
ngIRCd < 0.8.3 Log_Resolver() Format String
According to its banner, the version of the ngIRCd chat service running on the remote host contains a format string vulnerability. If it was compiled with IDENT, DEBUG is enabled, and it's logging to SYSLOG, a remote attacker can leverage this issue to execute arbitrary code on the remote host...
emacs -- movemail format string vulnerability
Max Vozeler discovered several format string vulnerabilities in the movemail utility of Emacs. They can be exploited when connecting to a malicious POP server and can allow an attacker can execute arbitrary code under the privileges of the user running Emacs...
CVE-2005-0312
WarFTPD 1.82 RC9, when running as an NT service, allows remote authenticated users to cause a denial of service access violation via a CWD command with a crafted pathname, as demonstrated using a large string of "%s" sequences, possibly indicating a format string vulnerability...
CVE-2005-0012
CVE-2005-0012 affects Dillo before 0.8.3-r4, where a format string vulnerability in the a_Interface_msg() function can allow remote code execution via crafted web pages. The issue is documented across multiple feeds (NVD entry and OpenVAS/Gentoo GLSA references) with a base CVSS v2 score of 7.5 (...
CVE-2004-0561
CVE-2004-0561 refers to a format-string vulnerability in the log routine of gopherd (Debian gopher package). Affected software is the gopher server (gopherd) in Debian, with the issue fixed in the 3.0.3woody2 update for Woody; other references note the same vulnerability across Debian advisories....