3138 matches found
apache13-modssl -- format string vulnerability in proxy support
A OpenPKG Security Advisory reports: Triggered by a report to Packet Storm from Virulent, a format string vulnerability was found in modssl, the Apache SSL/TLS interface to OpenSSL, version up to and including 2.8.18 for Apache 1.3. The modssl in Apache 2.x is not affected. The vulnerability coul...
Solaris 2.5.1 (x86) : 112892-01
SunOS 5.5.1x86: rpc.rwalld has format string problem. Date this patch was last updated by Sun : Jun/14/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc...
CVE-2004-0640
Format string vulnerability in the SSLsetverify function in telnetd.c for SSLtelnet daemon SSLtelnetd 0.13 allows remote attackers to execute arbitrary code...
CVE-2004-0640
CVE-2004-0640 is a format string vulnerability in the SSL_set_verify function of telnetd.c for the SSLtelnet daemon (SSLtelnetd) v0.13 that allows remote code execution. Connected records tie this to netkit-telnet-ssl and related packages (e.g., Debian netkit-telnet-ssl) with advisories noting a ...
CVE-2004-0448
Format string vulnerability in the log function for jftpgw 0.13.4 and earlier allows remote authenticated users to execute arbitrary code via format string specifiers in certain syslog messages...
CVE-2004-0448
The CVE-2004-0448 entry describes a format-string vulnerability in the log function of jftpgw 0.13.4 and earlier. The flaw allows remote authenticated users to execute arbitrary code via format string specifiers in certain syslog messages. Documents confirm affected software (jftpgw, an FTP proxy...
FreeBSD : ezbounce remote format string vulnerability (45)
The following package needs to be updated: ezbounce %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgc480eb5e7f0011d8868e000347dd607f.nasl. Disabled on 2011/10/01. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...
RHEL 2.1 : tripwire (RHSA-2004:244)
Updated Tripwire packages that fix a format string security vulnerability are now available. Tripwire is a system integrity assessment tool. Paul Herman discovered a format string vulnerability in Tripwire version 2.3.1 and earlier. If Tripwire is configured to send reports via email, a local use...
CVE-2004-0393
Format string vulnerability in the msg function for rlpr daemon rlprd 2.0.4 allows remote attackers to execute arbitrary code via format string specifiers in a buffer that can not be resolved, which is provided to the syslog function...
CVE-2004-0623
GNU GNATS 4.00 is affected by a format string vulnerability in misc.c that can allow a remote attacker to execute arbitrary code via format specifiers in a string logged by syslog. The CVE-2004-0623 entry notes a high severity (base score 10.0, CVSS2: AV:N/AC:L/Au:N/C:C/I:C/A:C) with remote, unau...
CVE-2004-0393
CVE-2004-0393 corresponds to a format-string vulnerability in rlpr/rlprd (rlpr daemon) version 2.0.4. The flaw resides in the msg() function, where unbounded format strings provided to syslog can lead to arbitrary code execution. Documented impact is remote code execution with the rlprd process p...
CVE-2004-0623
Removed by vendor...
CVE-2004-0623
Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in a string that gets logged by syslog...
rlpr format string bug
syslog format string bug...
CVE-2004-0453
Format string vulnerability in the monitor "memory dump" command in VICE 1.6 to 1.14 allows local users to cause a denial of service emulator crash and possibly execute arbitrary code via format string specifiers in an output string...
CVE-2004-0579
Format string vulnerability in super before 3.23 allows local users to execute arbitrary code as root...
CVE-2004-0579
Format string vulnerability in super before 3.23 allows local users to execute arbitrary code as root...
CVE-2004-0579
The CVE-2004-0579 entry concerns the Debian-related format-string vulnerability in the program named “super.” Public documentation in the connected sources confirms that this flaw exists in versions prior to 3.23 and allows a local user to execute arbitrary code with root privileges due to a faul...
[Full-Disclosure] [SECURITY] [DSA 522-1] New super packages fix format string vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 522-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 19th, 2004 http://www.debian.org/security/faq -...