8677 matches found
Veritas NetBackup <= 6.0 (bpjava-msvc) Remote Exploit (win32)
Exploit for unknown platform in category remote exploits ============================================================= Veritas NetBackup rtlentercritical For win xp sp2 we overwrote SEH http://www.digitalmunition.com/ You may have to run this 2 times. use IO::Socket; use Getopt::Std;...
OpenVMPS Logging Function Format String
The remote host appears to be running OpenVMPS, an open source VLAN Management Policy Server VMPS. There is a format string vulnerability in versions of OpenVMPS up to and including 1.3 that may allow remote attackers to crash the server or execute code on the affected host subject to the...
Debian DSA-863-1 : xine-lib - format string vulnerability
Ulf Harnhammar from the Debian Security Audit Project discovered a format string vulnerability in the CDDB processing component of xine-lib, the xine video/media player library, that could lead to the execution of arbitrary code caused by a malicious CDDB entry. %NASLMINLEVEL 70300 C Tenable...
Mandrake Linux Security Advisory : xine-lib (MDKSA-2005:180)
When playing an Audio CD, a xine-lib based media application contacts a CDDB server to retrieve metadata like the title and artist's name. During processing of this data, a response from the server, which is located in memory on the stack, is passed to the fprintf function as a format string. An...
CVE-2005-2967
Format string vulnerability in inputcdda.c in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0 through 1.0.2, and 1.1.1 allows remote servers to execute arbitrary code via format string specifiers in metadata in CDDB server responses when the victim plays a CD...
CVE-2005-2661
Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows remote IMAP servers to execute arbitrary code via format string specifiers in a banner or capability line...
CVE-2005-2967
Format string vulnerability in inputcdda.c in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0 through 1.0.2, and 1.1.1 allows remote servers to execute arbitrary code via format string specifiers in metadata in CDDB server responses when the victim plays a CD...
CVE-2005-2661
Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows remote IMAP servers to execute arbitrary code via format string specifiers in a banner or capability line...
CVE-2005-2661
Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows remote IMAP servers to execute arbitrary code via format string specifiers in a banner or capability line...
CVE-2005-2967
CVE-2005-2967 is a format-string vulnerability in xine-lib’s CDDB processing. The flaw exists in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0 through 1.0.2, and 1.1.1, allowing a remote attacker to execute arbitrary code via specially crafted CDDB responses when a CD is played. The issue is tied t...
CVE-2005-2661
The CVE-2005-2661 issue affects up-imapproxy (IMAP Proxy) versions 1.2.3 and 1.2.4. It is a format string vulnerability in the ParseBannerAndCapability function in main.c, allowing a remote IMAP server to execute arbitrary code via format specifiers in a banner or capability line. Public sources ...
CVE-2005-2967
Format string vulnerability in inputcdda.c in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0 through 1.0.2, and 1.1.1 allows remote servers to execute arbitrary code via format string specifiers in metadata in CDDB server responses when the victim plays a CD...
DTSA-20-1 mailutils - Format string vulnerability
Bulletin has no description...
Immunity Canvas: NETBACKUP_JAVAUI
Name| netbackupjavaui ---|--- CVE| CVE-2005-2715 Exploit Pack| CANVAS Description| VERITAS NetBackup Java User Interface Format String Notes| CVE Name: CVE-2005-2715 VENDOR: Symantec VersionsAffected: Repeatability: References: http://www.zerodayinitiative.com/advisories/ZDI-05-001.html CVE Url:...
CVE-2005-2715
Format string vulnerability in the Java user interface service bpjava-msvc daemon for VERITAS NetBackup Data and Business Center 4.5FP and 4.5MP, and NetBackup Enterprise/Server/Client 5.0, 5.1, and 6.0, allows remote attackers to execute arbitrary code via the COMMANDLOGONTOMSERVER command...
CVE-2005-2715
Format string vulnerability in the Java user interface service bpjava-msvc daemon for VERITAS NetBackup Data and Business Center 4.5FP and 4.5MP, and NetBackup Enterprise/Server/Client 5.0, 5.1, and 6.0, allows remote attackers to execute arbitrary code via the COMMANDLOGONTOMSERVER command...
CVE-2005-2715
CVE-2005-2715 involves a format-string vulnerability in VERITAS NetBackup Java Authentication Service (bpjava-msvc) daemon. The flaw affects NetBackup components listed in the description (e.g., 4.5FP/4.5MP and 5.0–6.0 families) and allows remote code execution via the COMMAND_LOGON_TO_MSERVER co...
[SECURITY] [DSA 863-1] New xine-lib packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 863-1 [email protected] http://www.debian.org/security/ Martin Schulze October 12th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 863-1] New xine-lib packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 863-1 [email protected] http://www.debian.org/security/ Martin Schulze October 12th, 2005 http://www.debian.org/security/faq -...