9935 matches found
Ehud Gavron TrACESroute 6.1.1 Terminator Function Format String
No description provided by source. source: http://www.securityfocus.com/bid/4956/info A format string vulnerability exists in TrACESroute. The problem exists in the terminator -T function of the program. Due to improper use of the fprintf function, an attacker may be able to supply a malicious...
Dia 0.8x/0.9x Filename Remote Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18078/info Dia is prone to a remote format-string vulnerability. This issue arises when the application handles specially crafted filenames. An attacker can exploit this vulnerability by crafting a malicious filename that...
Solaris 2.6/7.0 /locale Subsystem Format String
No description provided by source. / source: http://www.securityfocus.com/bid/1634/info nectiva 4.x/5.x,Debian 2.x,IBM AIX 3.x/4.x,Mandrake 7,RedHat 5.x/6.x,IRIX 6.x, Solaris 2.x/7/8,Turbolinux 6.x,Wirex Immunix OS 6.2 Locale Subsystem Format String Many UNIX operating systems provide...
Apple Mac OS X 10.4.x iMovie HD .imovieproj Filename Format String
No description provided by source. source: http://www.securityfocus.com/bid/22326/info Multiple products for Mac OS X are prone to multiple remote format-string vulnerabilities. The affected applications include Help Viewer, Safari, iPhoto, and iMovie. Exploiting these issues can allow...
ezbounce 1.0/1.5 Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8071/info It has been reported that ezbounce is affected by a format string vulnerability. The condition is present in the file ezbounce/commands.cpp and can be triggered when session support is enabled. To exploit this...
Apple Mac OS X 10.4.x iPhoto photo:// URL Handling Format String
No description provided by source. source: http://www.securityfocus.com/bid/22326/info Multiple products for Mac OS X are prone to multiple remote format-string vulnerabilities. The affected applications include Help Viewer, Safari, iPhoto, and iMovie. Exploiting these issues can allow...
BroadWin WebAccess Client Multiple Vulnerabilities
No description provided by source. Application: BroadWin WebAccess Client http://broadwin.com/Client.htm Versions: bwocxrun.ocx = 1.0.0.10 aka version 7.0 Platforms: Windows Bugs: A format string B arbitrary memory corruption Exploitation: remote Date: 02 Sep 2011 Author: Luigi Auriemma e-mail:...
Xine 0.9/1.0 Playlist Handling Remote Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17579/info The xine package is reported prone to a remote format-string vulnerability. This issue arises when the application handles specially crafted playlist files. An attacker can exploit this vulnerability by craftin...
OpenVMPSd <= 1.3 - Remote Format String Exploit (Multiple Targets)
No description provided by source. / gexp-openvmpsd.c OpenVMPSd v1.3 Remote Format String Exploit Copyright C 2005 Gotfault Security Bug found and developed by: barros and xgc Original Reference: http://gotfault.net/research/exploit/gexp-openvmpsd.c / include getopt.h include sys/types.h include...
IBM solidDB 6.0.10 - Format String Vulnerability and Multiple Denial of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/28468/info IBM solidDB is prone to a format-string vulnerability affecting the logging function and three denial-of-service vulnerabilities. Attackers can exploit these issues to execute arbitrary code or to deny service ...
XM Easy Personal FTP Server <= 5.30 - Remote Format String Write4 Exploit
No description provided by source. !/usr/bin/python XM Easy Personal FTP Server v = 5.30 Remote Format String write4 Exploit exploit by: mrme @netninja/mrmeatcorelan.be Thanks to the Corelan Security Team Note: this is a poc only, and requires the following target environment: Windows Server 23k:...
Valve Software Source Engine - Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36061/info Source Engine is prone to a format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. An attacker may...
GNOME Eye Of Gnome 1.0.x/1.1.x/2.2 Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7121/info GNOME Eye of Gnome EOG image viewer is prone to a format string vulnerability. This condition may lead to execution of arbitrary code if malicious format specifiers are supplied to the program via the command...
SurgeMail and WebMail <= 3.0 - 'Page' Command Remote Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27990/info SurgeMail and WebMail are prone to a remote format-string vulnerability because the applications fail to properly sanitize user-supplied input before including it in the format-specifier argument of a...
PeerCast <= 0.1211 Remote Format String Exploit
No description provided by source. / \ PeerCast = 0.1211 remote format string exploit / Public Release \ / by Darkeagle darkeagle at linkin-park dot cc \ / uKt researcherz http://unl0ck.org \ / greetz goes to: uKt researcherz. \ / \ - smallest code - better code!!! / / include stdio.h include...
Colloquy <= 2.1.3545 (INVITE) Format String Denial of Service Exploit
No description provided by source. !/usr/bin/ruby c Copyright 2006 Lance M. Havok [email protected] Makes use of the Colloquy INVITE format string vulnerability. require 'socket' targetchannel = ARGV0 || whatever targetserver = ARGV1 || irc.server.org targetport = ARGV2 || 6667 randnick = spongeb...
Neon WebDAV Client Library 0.2x Format String Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/10136/info It has been reported that the Neon client library is prone to multiple remote format string vulnerabilities. This issue is due to a failure of the application to properly implement format string functions...
RndLabs Babo Violent 2 - Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/25329/info Babo Violent 2 is prone to four vulnerabilities: a format-string issue and three denial-of-service issues. Successful attacks could allow attackers to execute arbitrary code or crash game servers...
VMware Remote Console e.x.p build-158248 - format string vulnerability
No description provided by source. DSECRG-09-053 VMware Remote Console - format string vulnerability http://www.dsecrg.com/pages/vul/show.php?id=153 VMrc vulnerable to format string attacks. Exploitation of this issue may lead to arbitrary code execution on the system where VMrc is installed...
Samhain Labs 1.x HSFTP Remote Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9715/info hsftp has been found to be prone to a remote print format string vulnerability. This issue is due to the application improper use of a format printing function. Ultimately this vulnerability could allow for...