Ubuntu 4.10 / 5.04 / 5.10 : libapache2-mod-auth-pgsql vulnerability (USN-239-1)

Several format string vulnerabilities were discovered in the error logging handling. By sending specially crafted user names, an unauthenticated remote attacker could exploit this to crash the Apache server or possibly even execute arbitrary code with the privileges of Apache user 'www-data'. Not...

CVE-2006-0328

CVE-2006-0328 describes a format-string vulnerability in Tftpd32 2.81 where processing of a crafted filename in a GET or SEND request can cause a remote denial of service. Some sources also indicate a risk of remote code execution under the server’s privileges. The issue is documented across mult...

CVE-2006-0328

Format string vulnerability in Tftpd32 2.81 allows remote attackers to cause a denial of service via format string specifiers in a filename in a 1 GET or 2 SEND request...

tftpd32 TFTP server format string vulnerability

SEND and GET TFTP commands format string bug...

tftpd32 format string

Critical security advisory 006 Tftpd32 2.81 Format String + DoS PoC Critical Security - 22:03 2006.01.19 Critical Security research: http://www.critical.lt Product site: http://tftpd32.jounin.net/ Credits : Critical Security Team www.critical.lt Original Advisory:...

ELOG < 2.6.2 Multiple Vulnerabilities

Binary data 3379.prm...

ELOG < 2.6.1 Multiple Remote Vulnerabilities (Traversal, FS)

The remote host appears to be using ELOG, a web-based electronic logbook application. The version of ELOG installed on the remote host fails to filter directory traversal strings before processing GET requests. An attacker can exploit this issue to retrieve the contents of arbitrary files from th...

Tftpd32 Error Message Format String

The remote host appears to be running Tftpd32, a tftpd server for Windows. There is a format string vulnerability in versions of Tftpd32 up to and including 2.81 that may allow remote attackers to crash the server or to execute code on the affected host subject to the privileges under which the...

Tftpd32 2.81 (GET Request) Format String Denial of Service PoC

Exploit for unknown platform in category dos / poc ============================================================== Tftpd32 2.81 GET Request Format String Denial of Service PoC ============================================================== !/usr/bin/perl Tftpd32 Format String PoC DoS by Critical...

TFTPD32 2.81 - GET Format String Denial of Service (PoC)

TFTPD32 2.81 - GET Format String Denial of Service PoC !/usr/bin/perl Tftpd32 Format String PoC DoS by Critical Security research http://www.critical.lt use IO::Socket; $port = "69"; $host = "127.0.0.1"; $tftpudp = IO::Socket::INET-newPeerPort = $port,PeerAddr = $host,Proto= 'udp'; $bzz =...

[SA18533] ELOG Format String and Directory Traversal Vulnerabilities

TITLE: ELOG Format String and Directory Traversal Vulnerabilities SECUNIA ADVISORY ID: SA18533 VERIFY ADVISORY: http://secunia.com/advisories/18533/ CRITICAL: Highly critical IMPACT: Security Bypass, DoS, System access WHERE: From remote SOFTWARE: ELOG 2.x http://secunia.com/product/4657/...

TFTPD32 2.81 - GET Format String Denial of Service (PoC)

!/usr/bin/perl Tftpd32 Format String PoC DoS by Critical Security research http://www.critical.lt use IO::Socket; $port = "69"; $host = "127.0.0.1"; $tftpudp = IO::Socket::INET-newPeerPort = $port,PeerAddr = $host,Proto= 'udp'; $bzz = "\x00\x01" ; GET $bzz .= "%.1000x\x00"; $bzz .=...

CVE-2006-0250

Format string vulnerability in the snmpinput function in snmptrapd in CMU SNMP utilities cmu-snmp allows remote attackers to execute arbitrary code by sending crafted SNMP messages to UDP port 162...

CVE-2006-0250

CVE-2006-0250 affects the CMU SNMP utilities (cmu-snmp), specifically the snmptrapd component’s snmp_input function. The root cause is a format string vulnerability that enables remote code execution by sending crafted SNMP messages to UDP port 162. Several connected sources confirm the vulnerabl...

CVE-2006-0250

Format string vulnerability in the snmpinput function in snmptrapd in CMU SNMP utilities cmu-snmp allows remote attackers to execute arbitrary code by sending crafted SNMP messages to UDP port 162...

PT-2006-1325 · Cmu · Cmu-Snmp

Name of the Vulnerable Software and Affected Versions: CMU SNMP utilities cmu-snmp affected versions not specified Description: The issue is related to a format string vulnerability in the snmp input function in snmptrapd. This vulnerability allows remote attackers to execute arbitrary code by...

CMU SNMP snmptrapd format string vulnerability

Format string vulnerability in snmpinput function...

Digital Armaments Security Advisory 01.16.2006: CMU SNMP utilities snmptrad Format String Vulnerability

CMU SNMP utilities snmptrad Format String Vulnerability Digital Armaments advisory is 01.04.2006 http://www.digitalarmaments.com/2006040164883273.html I. Background The package is CMU-SNMP utilities. In this package snmptrapd is an SNMP application that receives and logs SNMP TRAP and INFORM...

Fedora Core 4 : mod_auth_pgsql-2.0.1-8.1 (2006-015)

Several format string flaws were found in the way modauthpgsql logs information. It may be possible for a remote attacker to execute arbitrary code as the 'apache' user if modauthpgsql is used for user authentication. The Common Vulnerabilities and Exposures project assigned the name CVE-2005-365...

Ubuntu 4.10 / 5.04 : apache2, libapache-mod-ssl vulnerabilities (USN-177-1)

Apache did not honour the 'SSLVerifyClient require' directive within a block if the surrounding block contained a directive 'SSLVerifyClient optional'. This allowed clients to bypass client certificate validation on servers with the above configuration. CAN-2005-2700 Filip Sneppe discovered a...