Veritas NetBackup <= 6.0 (bpjava-msvc) Remote Exploit (OS X)

No description provided by source. !/usr/bin/perl VERITAS-OSX.pl - VERITAS NetBackup Format Strings OSX/ppc Remote Exploit johnhatdigitalmunitiondotcom bug found by kflistsatdigitalmunitiondotcom http://www.digitalmunition.com/ use POSIX; use IO::Socket; use IO::Select; my $shellcode = / OSX...

Hylafax 4.1.x HFaxD Unspecified Format String Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9005/info Hylafax hfaxd daemon has been reported prone to an unspecified format string vulnerability that may be exploited under non-standard configurations to execute arbitrary instructions remotely as the root user. /...

ssldump 0.9 b1 Format String Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2096/info ssldump is a traffic analyzer for monitoring network traffic in real time. It is written and maintained by Eric Rescorla. A problem exists which could allow the arbitrary execution of code. The problem exists in...

David Bagley xlock 4.16 User Supplied Format String Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/1585/info A vulnerability exists in versions of the xlockmore program, originally written by David Bagley. It is believed to affect all versions of xlock derived from xlockmore. This includes the xlock shipped with a numb...

Veritas NetBackup <= 6.0 (bpjava-msvc) Remote Exploit (linux)

No description provided by source. !/usr/bin/perl VERITAS-Linux.pl - VERITAS NetBackup Format Strings Linux/x86 Remote Exploit johnhatdigitalmunitiondotcom bug found by kflistsatdigitalmunitiondotcom http://www.digitalmunition.com/ use POSIX; use IO::Socket; use IO::Select; use strict; print STDE...

PT-2014-2181 · Condor · Condor

Name of the Vulnerable Software and Affected Versions: Condor versions 7.2.0 through 7.6.4 Condor versions 7.7.x Description: The issue allows local users to cause a denial of service, affecting the condor schedd daemon and potentially preventing job launches. It may also be possible for attacker...

PT-2013-3973 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 3.9.4 Description: The issue allows local users to gain privileges by leveraging root access and including format string specifiers in an fwpostfix modprobe parameter, leading to improper construction of an error...

Updated flightgear package fixes security vulnerability

It was reported that FlightGear suffers from improper handling of format strings when FlightGear is started with allowances for remote access via the --props or --telnet commandline arguments. If a remote attacker were able to connect to FlightGear and set special parameters related with clouds, ...

DEBIAN-CVE-2012-2090

Multiple format string vulnerabilities in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in certain data chunk values in an aircraft xml model to 1...

Condor: Multiple format string flaws

Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other products, allow local users to cause a denial of service condorschedd daemon and failure to launch jobs and possibly execute arbitrary code via...

Ubuntu: Security Advisory (USN-1130-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apple Mac OS X multiple security vulnerabilities

Multiple DoS conditions, format strings vulnerability in AppleScript, memory corruption on different file formats parsing, information leakage, privilege escalation...

SuSE 11 Security Update : CUPS (SAT Patch Number 2108)

lppasswd when running setuid or setgid still honors environment variables that specify the location of message files. Local attackers could exploit that to gather information by using crafted format strings. CVE-2010-0393 The previous fix for a use-after-free vulnerability CVE-2009-3553 was...

openSUSE Security Update : cups (cups-2102)

lppasswd when running setuid or setgid still honors environment variables that specify the location of message files. Local attackers could exploit that to gather information by using crafted format strings CVE-2010-0393. The previous fix for a use-after-free vulnerability CVE-2009-3553 was...

DEBIAN-CVE-2010-0393

The cupsGetlang function, as used by lppasswd.c in lppasswd in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4.1, relies on an environment variable to determine the file that provides localized message strings, which allows local users to gain privileges via a file that contains crafted localization data with...

OpenBSD 4.6 / NetBSD 5.0.1 - 'printf(1)' Format String Parsing Denial of Service

source: https://www.securityfocus.com/bid/36884/info OpenBSD and NetBSD are prone to a denial-of-service vulnerability because they fail to properly parse format strings to the 'printf1' function. An attacker can exploit this issue to cause applications using the vulnerable call to crash with a...

GemStone/S 6.3.1 (stoned) Local Buffer Overflow Exploit

No description provided by source. / wonderfulcaricatureofexploitability.c AKA GemStone/S 6.3.1 "stoned" Local Buffer Overflow Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 09.07.2009 Gemstone/S "stoned" suffers from a local buffer overflow when parsing input...

GemStone/S 6.3.1 (stoned) Local Buffer Overflow Exploit

Exploit for linux platform in category local exploits ======================================================= GemStone/S 6.3.1 stoned Local Buffer Overflow Exploit ======================================================= / wonderfulcaricatureofexploitability.c AKA GemStone/S 6.3.1 "stoned" Local...

Debian Security Advisory DSA 1879-1 (silc-client/silc-toolkit)

The remote host is missing an update to silc-client/silc-toolkit announced via advisory DSA 1879-1. OpenVAS Vulnerability Test $Id: deb18791.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1879-1 silc-client/silc-toolkit Authors: Thomas Reinke Copyright:...

GemStone/S 6.3.1 - 'stoned' Local Buffer Overflow

/ wonderfulcaricatureofexploitability.c AKA GemStone/S 6.3.1 "stoned" Local Buffer Overflow Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 09.07.2009 Gemstone/S "stoned" suffers from a local buffer overflow when parsing input either from the "-e" or "-l" flags,...