CVE-2006-6772

Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backend option, allows remote attackers to execute arbitrary code via format string specifiers in the Common Name CN field of an SSL certificate associated with an https URL...

CVE-2006-6772

CVE-2006-6772 is a format-string vulnerability in w3m’s inputAnswer function (file.c) that affects modes -dump/-backend; an attacker could craft a certificate CN in an HTTPS URL to execute arbitrary code. The issue is fixed in later w3m builds (e.g., w3m-0.5.3+git20180125-1.14 and related openSUS...

CVE-2006-6772

Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backend option, allows remote attackers to execute arbitrary code via format string specifiers in the Common Name CN field of an SSL certificate associated with an https URL...

[SECURITY] [DSA 1242-1] New elog packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1242-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 27th, 2006 http://www.debian.org/security/faq -...

CVE-2006-6751

Format string vulnerability in XM Easy Personal FTP Server 5.2.1 allows remote attackers to cause a denial of service application crash via format string specifiers in the USER command or certain other available or nonexistent commands. NOTE: It was later reported that 5.3.0 is also vulnerable...

CVE-2006-6751

CVE-2006-6751 : Format-string vulnerability in XM Easy Personal FTP Server (versions 5.2.1 and 5.3.0) allows remote attackers to trigger a crash via format specifiers in the USER command or other commands, causing a denial of service and partial availability impact. No remediation details are pro...

DSA-1242-1 elog

Bulletin has no description...

CVE-2006-6751

Format string vulnerability in XM Easy Personal FTP Server 5.2.1 allows remote attackers to cause a denial of service application crash via format string specifiers in the USER command or certain other available or nonexistent commands. NOTE: It was later reported that 5.3.0 is also vulnerable...

CVE-2006-6750

XM Easy Personal FTP Server is affected by a format string vulnerability in the PORT handling which can cause a denial of service (crash). The issue is documented for version 5.0.1, with related notes mentioning 5.3.0 in consolidated records. Root cause is improper handling of format specifiers i...

W3M SSL证书格式串处理漏洞

w3m是一款开放源码的文字式网页浏览器。 w3m在处理畸形格式的SSL证书里存在漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 如果HTTPS URL的SSL证书中CN包含有“%n%n%n%n%n%n”字符的话，则w3m在以-dump或-backend选项打开上述URL时就会导致崩溃。 W3M W3M 0.5.1 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://w3m.sourceforge.net/...

w3m browser format string vulnerability

Format string culnerability on certificate CN field...

[SA23492] w3m Certificate Handling Format String Vulnerability

TITLE: w3m Certificate Handling Format String Vulnerability SECUNIA ADVISORY ID: SA23492 VERIFY ADVISORY: http://secunia.com/advisories/23492/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: w3m 0.x http://secunia.com/product/12960/ DESCRIPTION: A vulnerability has be...

XM Easy Personal FTP Server 5.2.1 (USER) Format String DoS Exploit

No description provided by source. import sys,os,string import socket import time print "-----------------------------------------------------------------------" print " XM Easy Personal FTP Server 5.2.1 format string Denial of Service" print " url: http://www.dxm2008.com/" print " author: shinna...

XM Ease Personal FTP Server format string vulnerability

Format string vulnerability in FTP command...

XM Easy Personal FTP Server 5.2.1 (USER) Format String DoS Exploit

Exploit for unknown platform in category dos / poc ================================================================== XM Easy Personal FTP Server 5.2.1 USER Format String DoS Exploit ================================================================== import sys,os,string import socket import time...

XM Easy Personal FTP Server 5.2.1 - USER Format String Denial of Service

XM Easy Personal FTP Server 5.2.1 - USER Format String Denial of Service import sys,os,string import socket import time print "-----------------------------------------------------------------------" print " XM Easy Personal FTP Server 5.2.1 format string Denial of Service" print " url:...

XM Easy Personal FTP Server 5.2.1 - 'USER' Format String Denial of Service

import sys,os,string import socket import time print "-----------------------------------------------------------------------" print " XM Easy Personal FTP Server 5.2.1 format string Denial of Service" print " url: http://www.dxm2008.com/" print " author: shinnai" print " mail:...

CVE-2006-6692

Multiple format string vulnerabilities in zabbix before 20061006 allow attackers to cause a denial of service application crash and possibly execute arbitrary code via format string specifiers in information that would be recorded in the system log using 1 zabbixlog or 2 zabbixsyslog...

CVE-2006-6692

Multiple format string vulnerabilities in zabbix before 20061006 allow attackers to cause a denial of service application crash and possibly execute arbitrary code via format string specifiers in information that would be recorded in the system log using 1 zabbixlog or 2 zabbixsyslog...

CVE-2006-6692

Multiple format string vulnerabilities in zabbix before 20061006 allow attackers to cause a denial of service application crash and possibly execute arbitrary code via format string specifiers in information that would be recorded in the system log using 1 zabbixlog or 2 zabbixsyslog...