9935 matches found
PHP 3.0/4.0 Error Logging Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1786/info PHP is a scripting language designed for CGI applications that is used on many websites. There exists a remotely exploitable format string vulnerability in all versions of PHP below PHP 4.0.3. The vulnerability...
Berlios GPSD Format String Vulnerability
No description provided by source. $Id: gpsdformatstring.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Mac OS X <= 10.4.6 (launchd) Local Format String Exploit (x86)
No description provided by source. !/usr/bin/perl http://www.digitalmunition.com/FailureToLaunch.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom This is a practical application of Non Executable Stack Lovin - http://www.digitalmunition.com/NonExecutableLovin.txt This code currently jum...
ISC INN 2.0/2.1/2.2.x Multiple Local Format String Vulnerabilties
No description provided by source. source: http://www.securityfocus.com/bid/4501/info The Internet Software Consortium ISC Internet News INN project is a powerful, mature implementation of a usenet system, including a NNTP server and a newsreading server. It is available for a wide range of Unix...
Doomsday Engine 1.8.6/1.9 - Multiple Remote Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/25483/info Doomsday Engine is prone to multiple remote vulnerabilities, including multiple buffer-overflow issues, a denial-of-service issue, a format-string issue, and an integer-overflow issue. An attacker can exploit...
Citadel/UX <= 6.27 Remote Root Format String Exploit
No description provided by source. / citadelfsexp.c Citadel/UX v6.27 remote format string exploit Use: ./citadelfsexp -h host options options: -h arg host or IP -t arg type of target system -l targets list -g arg syslog GOT address -r arg RET address coki@nosystem:/audit$ ./citadelfsexp -h...
TipxD <= 1.1.1 - Local Format String Vulnerability (not setuid)
No description provided by source. / tipxdexp.c TipxD Format String Vulnerability TipxD = 1.1.1 local exploit Proof of Concept Tested in Slackware 9.0 / 9.1 / 10.0 by CoKi [email protected] - SECU No System Group - http://www.nosystem.com.ar / include stdio.h include string.h define PATH...
ntop 1.x -i Local Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1840/info ntop network top is a unix program used for displaying network usage statistics. It is often installed setuid root because it uses privileged ports. ntop is vulnerable to a format string vulnerability that can...
BitchX IRC Client 75p1/75p3/1.0 c16 "/INVITE" Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1436/info BitchX IRC clients, versions 75 up to and including 1.0c16, are vulnerable to a Denial of Service and possible remote execution of code. By /invite-ing someone to a channel name containing formatting characters...
Alien Arena 2007 6.10 - Multiple Remote Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/25559/info Alien Arena 2007 is prone to multiple remote vulnerabilities, including a denial-of-service vulnerability and a format-string vulnerability. Successfully exploiting these issues will allow an attacker to execut...
Debian 2.2,S.u.S.E 6.3/6.4/7.0 man -l Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2327/info man is the manual page viewing program, available with the Linux Operating System in this implementation. It is freely distributed and openly maintained. A problem with the man command may allow for the elevatio...
SonicWALL Global VPN Client 4.0.782 Remote Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26689/info SonicWALL Global VPN Client is prone to a remote format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function...
Epic Games Unreal Tournament Server 436.0 Engine Remote Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9840/info A format string vulnerability has been reported to exists in the Unreal Tournament server engine. This issue is due to a failure of the server application to properly sanitize user supplied network data...
Inso DynaWeb httpd 3.1/4.0.2/4.1 Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5384/info Inso DynaWeb webserver, dwhttpd, is used as a subcomponent in products such as Sun's AnswerBook2, which is shipped as part of the Solaris operating environment. The dwhttpd webserver is prone to a remotely...
Gedit 2.x Filename Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13699/info gEdit is prone to a format-string vulnerability. Exploitation may occur when the program is invoked with a filename that includes malicious format specifiers. Attackers could exploit this issue to corrupt...
Ipswitch Instant Messaging 2.0.8.1 Multiple Security Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/27677/info Ipswitch Instant Messaging is prone to multiple security vulnerabilities, including a denial-of-service vulnerability, a format-string vulnerability, and a vulnerability that allows attackers to overwrite...
BolinTech Dream FTP Server 1.0 User Name Format String Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/9600/info It has been reported that Dream FTP Server may be prone to a remote format string vulnerability when processing a malicious request from a client for a username during FTP authentication. The issue could crash t...
OpenFTPD (<= 0.30.2) Remote Exploit
No description provided by source. / hoagieopenftpd.c LINUX/X86 OPENFTPD REMOTE EXLPOIT = 0.30.2 Searching for those warez ftpd's out there and leeching 'free' movies Remote Linux/OpenFTPD exploit for the format string bug in the message system. This vulnerability was rediscovered by a VOID.AT...
Tolis Group BRU 17.0 - Local Root Exploit (1)
No description provided by source. source: http://www.securityfocus.com/bid/8215/info It has been reported that BRU may not properly parse commandline arguments, potentially leading to at least two vectors of exploitation. It may be possible for local attackers to conduct format string-based...
Apple Mac OS X <= 10.4.9 - VPND Local Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24208/info Apple Mac OS X's VPN service daemon is prone to a format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function...