9630 matches found
zkfingerd 0.9.1 format string vulnerabilities (#NISR16122002A)
NGSSoftware Insight Security Research Advisory Name: zkfingerd Format String vulnerability Systems: zkfingerd version 0.9.1 and earlier Severity: High Risk Vendor URL: http://sourceforge.net/projects/zkfingerd Author: David Litchfield [email protected] Advisory URL:...
zkfingerd 0.9.1 - say() Format String
zkfingerd 0.9.1 - say Format String // source: https://www.securityfocus.com/bid/6404/info zkfingerd is prone to a format string vulnerability. The affected function does not perform sufficient checks when displaying user-supplied input. It is possible to corrupt memory by passing format strings...
zkfingerd 0.9.1 - 'say()' Format String
// source: https://www.securityfocus.com/bid/6404/info zkfingerd is prone to a format string vulnerability. The affected function does not perform sufficient checks when displaying user-supplied input. It is possible to corrupt memory by passing format strings through the vulnerable function. Thi...
zkfingerd SysLog 0.9.1 - Format String
zkfingerd SysLog 0.9.1 - Format String // source: https://www.securityfocus.com/bid/6402/info zkfingerd is prone to a format string vulnerability. This problem is due to incorrect use of the 'syslog' function to log error messages. It is possible to corrupt memory by passing format strings throug...
zkfingerd SysLog 0.9.1 - Format String
// source: https://www.securityfocus.com/bid/6402/info zkfingerd is prone to a format string vulnerability. This problem is due to incorrect use of the 'syslog' function to log error messages. It is possible to corrupt memory by passing format strings through the vulnerable logging function. This...
Remote multiple vulnerability in apt-www-proxy.
======================================== INetCop Security Advisory 2002-0x82-009 ======================================== Title: Remote multiple vulnerability in apt-www-proxy. 0x01. Description bash$ lynx -dump http://ironsides.terrabox.com/ahzz/apt-www-proxy/ apt-www-proxy apt-www-proxy is a...
Exim Internet Mailer 3.353.364.10 - Format String
Exim Internet Mailer 3.353.364.10 - Format String // source: https://www.securityfocus.com/bid/6314/info A format string vulnerability has been discovered in Exim. The problem occurs in the daemongo function. By supplying malicious format strings via the command line, it is possible for an attack...
Exim Internet Mailer 3.35/3.36/4.10 - Format String
// source: https://www.securityfocus.com/bid/6314/info A format string vulnerability has been discovered in Exim. The problem occurs in the daemongo function. By supplying malicious format strings via the command line, it is possible for an attacker to execute arbitrary code with root privileges...
Format string vulnerability in KDE talkd
No description provided...
Security Update: [CSSA-2002-SCO.42] UnixWare 7.1.1 Open UNIX 8.0.0 : in.talkd format string vulnerabilities
To: [email protected] [email protected] [email protected] [email protected] SCO Security Advisory Subject: UnixWare 7.1.1 Open UNIX 8.0.0 : in.talkd format string vulnerabilities Advisory number: CSSA-2002-SCO.42 Issue date: 2002 November 12 Cross reference: ...
CVE-2002-1244
Format string vulnerability in Pablo FTP Server 1.5, 1.3, and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format strings in the USER command...
Generic Format String Detection
Nessus killed the remote service by sending it specially crafted data. The remote service seems to be vulnerable to a format string attack. An attacker might use this flaw to make it crash or even execute arbitrary code on this host. C Tenable Network Security, Inc. References: Date: Wed, 20 Mar...
Pablo FTP format string vulnerability
No description provided...
DEBIAN-CVE-2002-1215
Multiple format string vulnerabilities in heartbeat 0.4.9 and earlier claimed as buffer overflows in some sources allow remote attackers to execute arbitrary code via certain packets to UDP port 694 incorrectly claimed as TCP in some sources...
CVE-2002-1215
Multiple format string vulnerabilities in heartbeat 0.4.9 and earlier claimed as buffer overflows in some sources allow remote attackers to execute arbitrary code via certain packets to UDP port 694 incorrectly claimed as TCP in some sources...
CVE-2002-1215
Multiple format string vulnerabilities in heartbeat 0.4.9 and earlier claimed as buffer overflows in some sources allow remote attackers to execute arbitrary code via certain packets to UDP port 694 incorrectly claimed as TCP in some sources...
CVE-2002-1215
CVE-2002-1215 affects heartbeat 0.4.9 and earlier. Multiple format string vulnerabilities allow a remote attacker to execute arbitrary code by sending crafted UDP packets to port 694 (some sources describe as a buffer overflow). Debian/OSS-related advisories reference this in DSAs and OpenVAS ent...
CVE-2002-1215
Multiple format string vulnerabilities in heartbeat 0.4.9 and earlier claimed as buffer overflows in some sources allow remote attackers to execute arbitrary code via certain packets to UDP port 694 incorrectly claimed as TCP in some sources...
CVE-2002-1215: Undefined Security Weakness
Multiple format string vulnerabilities in heartbeat 0.4.9 and earlier claimed as buffer overflows in some sources allow remote attackers to execute arbitrary code via certain packets to UDP port 694 incorrectly claimed as TCP in some sources...