277 matches found
Ubuntu 4.10 / 5.04 / 5.10 : perl vulnerability (USN-222-2)
USN-222-1 fixed a vulnerability in the Perl interpreter. It was discovered that the version of USN-222-1 was not sufficient to handle all possible cases of malformed input that could lead to arbitrary code execution, so another update is necessary. Original advisory : Jack Louis of Dyad Security...
[SECURITY] [DSA 943-1] New Perl packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 943-1 [email protected] http://www.debian.org/security/ Martin Schulze January 16th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 943-1] New Perl packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 943-1 [email protected] http://www.debian.org/security/ Martin Schulze January 16th, 2006 http://www.debian.org/security/faq -...
DSA-943-1 perl - integer overflow
Bulletin has no description...
security flaw
Integer overflow in the format string functionality Perlsvvcatpvfn in Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap and leads to a buffer overflow, as...
security flaw
Integer overflow in the format string functionality Perlsvvcatpvfn in Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap and leads to a buffer overflow, as...
USN-222-2: Perl vulnerability
USN-222-1 fixed a vulnerability in the Perl interpreter. It was discovered that the version of USN-222-1 was not sufficient to handle all possible cases of malformed input that could lead to arbitrary code execution, so another update is necessary. Original advisory: Jack Louis of Dyad Security...
Perl programs providing user-controlled I/O format strings may contain format string vulnerabilities
Overview Programs written in Perl may contain many of the same types of format string vulnerabilities as programs written in C. Description Perl is a programming language used in many applications and commonly used for web applications. It provides many of the same functions for formatted I/O as ...
USN-222-1: Perl vulnerability
Jack Louis of Dyad Security discovered that Perl did not sufficiently check the explicit length argument in format strings. Specially crafted format strings with overly large length arguments led to a crash of the Perl interpreter or even to execution of arbitrary attacker-defined code with the...
VERITAS-Linux.pl.txt
!/usr/bin/perl VERITAS-Linux.pl - VERITAS NetBackup Format Strings Linux/x86 Remote Exploit johnhatdigitalmunitiondotcom bug found by kflistsatdigitalmunitiondotcom http://www.digitalmunition.com/ This exploit May NOT be posted to a public Archive like k-otik without being in its original GPG for...
Veritas NetBackup 6.0 (OSX) - 'bpjava-msvc' Remote Command Execution
!/usr/bin/perl VERITAS-OSX.pl - VERITAS NetBackup Format Strings OSX/ppc Remote Exploit johnhatdigitalmunitiondotcom bug found by kflistsatdigitalmunitiondotcom http://www.digitalmunition.com/ use POSIX; use IO::Socket; use IO::Select; my $shellcode = / OSX BINDSHELLCODE PORT=5557 NO-0x0 /...
Veritas NetBackup 6.0 (Linux) - 'bpjava-msvc' Remote Command Execution
!/usr/bin/perl VERITAS-Linux.pl - VERITAS NetBackup Format Strings Linux/x86 Remote Exploit johnhatdigitalmunitiondotcom bug found by kflistsatdigitalmunitiondotcom http://www.digitalmunition.com/ use POSIX; use IO::Socket; use IO::Select; use strict; print STDERR "\nveritas.pl - VERITAS NetBacku...
Veritas NetBackup 6.0 (Linux) - bpjava-msvc Remote Command Execution
Veritas NetBackup 6.0 Linux - bpjava-msvc Remote Command Execution !/usr/bin/perl VERITAS-Linux.pl - VERITAS NetBackup Format Strings Linux/x86 Remote Exploit johnhatdigitalmunitiondotcom bug found by kflistsatdigitalmunitiondotcom http://www.digitalmunition.com/ use POSIX; use IO::Socket; use...
Veritas NetBackup <= 6.0 (bpjava-msvc) Remote Exploit (linux)
Exploit for multiple platform in category remote exploits ============================================================= Veritas NetBackup \n\n"; exit 1; my $hostName = $ARGV0; my $port = $ARGV1 || 13722; buildexploit $hostName, $port; my $shellport = 5570; print " Connect to remote shell port\n";...
CVE-2005-3150
Format string vulnerability in the LogFlush function in Weex 2.6.1.5, 2.6.1, and possibly other versions allows remote FTP servers to execute arbitrary code via format strings in filenames...
ProFTPD < 1.3.0rc2 Multiple Format Strings
Binary data 3113.prm...
CVE-2004-2264
Format string bug in the openaltfile function in filename.c for GNU less 382, 381, and 358 might allow local users to cause a denial of service or possibly execute arbitrary code via format strings in the LESSOPEN environment variable. NOTE: since less is not setuid or setgid, then this is not a...
CVE-2002-1788
Format string vulnerability in the nnexitmsg function in nn 6.6.0 through 6.6.3 allows remote NNTP servers to execute arbitrary code via format strings in server responses...