aria2: Multiple vulnerabilities

Background aria2 is a download utility with resuming and segmented downloading with HTTP/HTTPS/FTP/BitTorrent support. Description Tatsuhiro Tsujikawa reported a buffer overflow in DHTRoutingTableDeserializer.cc CVE-2009-3575 and a format string vulnerability in the AbstractCommand::onAbort...

CentOS 5 : kernel (CESA-2008:0957)

Updated kernel packages that resolve several security issues and fix various bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 12th November 2008 The original packages distributed wi...

CentOS 5 : vim (CESA-2008:0580)

Updated vim packages that fix security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Vim Visual editor IMproved is an updated and improved version of the vi editor. Several input...

HTTPDX tolog() Function Format String Vulnerability

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'HTTPDX tolog...

HTTPDX tolog() Function Format String Vulnerability

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'HTTPDX tolog...

Wu-ftpd SITE EXEC/INDEX Format String Vulnerability

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'wu-ftpd SITE...

apache mod-tcl 1.0 格式化字符串漏洞

No description provided by source...

Cyrus IMAPD pop3d popsubfolders USER Buffer Overflow

This exploit takes advantage of a stack based overflow. Once the stack corruption has occurred it is possible to overwrite a pointer which is later used for a memcpy. This gives us a write anything anywhere condition similar to a format string vulnerability. NOTE: The popsubfolders option is a...

SAP RFC SDK — Format String

Application: RFC SDK SAP AG Versions Affected: RFC SDK 6.40 7.11 Vendor URL: Bugs: Format String Vulnerability Exploits: YES Reported: 15.12.2009 Vendor response: 18.12.2009 Date of SAP Security Note Published: 14.09.2010 Date of Public Advisory: 14.12.2010 Author: Alexey Sintsov Description SAP...

Oracle Database Server String Conversion Function Buffer Overflow (CVE-2004-1364)

Oracle's implementation of SQL provides several conversion and transformation functions to help database users work with the various data types. Conversion functions can be executed by all authenticated database users. There exists an input validation vulnerability with Oracle database server...

Mandriva Security Advisory MDVSA-2009:234-2 (silc-toolkit)

The remote host is missing an update to silc-toolkit announced via advisory MDVSA-2009:234-2. OpenVAS Vulnerability Test $Id: mdksa20092342.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:234-2 silc-toolkit Authors: Thomas Reinke Copyright: Copyright...

Mandriva Security Advisory MDVSA-2009:234-2 (silc-toolkit)

The remote host is missing an update to silc-toolkit announced via advisory MDVSA-2009:234-2. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandriva Linux Security Advisory : mysql (MDVSA-2009:326)

Multiple vulnerabilities has been found and corrected in mysql : MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' b single-quote single-quote token, aka an empty bit-string literal, which allows remote attackers to cause a denial of service daemon...

WU-FTPD SITE EXEC/INDEX Format String Vulnerability

This module exploits a format string vulnerability in versions of the Washington University FTP server older than 2.6.1. By executing specially crafted SITE EXEC or SITE INDEX commands containing format specifiers, an attacker can corrupt memory and execute arbitrary code. This module requires...

OrzHTTPd - Format String

OrzHTTPd - Format String !/usr/bin/env python orzex.py -- Patroklos Argyroudis, argp at domain census-labs.com http://code.google.com/p/orzhttpd/source/detail?r=141 import os import sys import socket import struct import time import urllib GET = "GET " def mainargv: argc = lenargv if argc != 4:...

OrzHTTPD Format String

!/usr/bin/env python orzex.py -- Patroklos Argyroudis, argp at domain census-labs.com http://code.google.com/p/orzhttpd/source/detail?r=141 import os import sys import socket import struct import time import urllib GET = "GET " def mainargv: argc = lenargv if argc != 4: print "usage: %s " % argv0...

OrzHTTPd Format String Exploit

Exploit for unknown platform in category remote exploits ============================== OrzHTTPd Format String Exploit ============================== Title: OrzHTTPd Format String Exploit CVE-ID: OSVDB-ID: Author: Patroklos Argyroudis Published: 2009-12-03 Verified: yes view source print?...

OrzHTTPd Format String Exploit

No description provided by source. !/usr/bin/env python orzex.py -- Patroklos Argyroudis, argp at domain census-labs.com http://code.google.com/p/orzhttpd/source/detail?r=141 import os import sys import socket import struct import time import urllib GET = "GET " def mainargv: argc = lenargv if ar...

OrzHTTPd - Format String

!/usr/bin/env python orzex.py -- Patroklos Argyroudis, argp at domain census-labs.com http://code.google.com/p/orzhttpd/source/detail?r=141 import os import sys import socket import struct import time import urllib GET = "GET " def mainargv: argc = lenargv if argc != 4: print "usage: %s " % argv0...

BolinTech Dream FTP Server 1.02 Format String

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'BolinTech...