DEBIAN-CVE-2003-0689

The getgrouplist function in GNU libc glibc 2.2.4 and earlier allows attackers to cause a denial of service segmentation fault and execute arbitrary code when a user is a member of a large number of groups, which can cause a buffer overflow...

CVE-2003-0689

The issue is in glibc getgrouplist (versions up to 2.2.4) where insufficient bounds checking can trigger a heap overflow when a user belongs to many groups, causing denial of service (segmentation fault) and possible arbitrary code execution. Connected advisories confirm a patch in glibc updates ...

Critical: Red Hat Security Advisory: glibc security update

Updated glibc packages are available to fix an integer overflow in the XDR decoder. The glibc package contains standard libraries which are used by multiple programs on the system. Sun RPC is a remote procedure call framework which allows clients to invoke procedures in a server process over a...

glibc XDR overflow fix

An integer overflow in the xdrmemgetbytes function found in the glibc library has been fixed. This could allow a remote attacker to execute arbitrary code by exploiting RPC service that use xdrmemgetbytes. None of the default RPC services provided by Slackware appear to use this function, but...

[SECURITY] [DSA 282-1] New glibc packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 282-1 [email protected] http://www.debian.org/security/ Martin Schulze April 9th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 282-1] New glibc packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 282-1 [email protected] http://www.debian.org/security/ Martin Schulze April 9th, 2003 http://www.debian.org/security/faq -...

CVE-2002-0391

CVE-2002-0391 describes an integer overflow in the xdr_array function of RPC servers using libc/glibc or SunRPC-based code (e.g., dietlibc), enabling remote code execution by passing a large number of RPC arguments. The OpenVAS/DSA entries show Debian advisories addressing this issue across multi...

[RHSA-2003:089-00] Updated glibc packages fix vulnerabilities in RPC XDR decoder

--------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated glibc packages fix vulnerabilities in RPC XDR decoder Advisory ID: RHSA-2003:089-00 Issue date: 2003-03-19 Updated on: 2003-03-19 Product: Red Hat Linux Keywords: sun RPC XDR integer...

Critical: Red Hat Security Advisory: : Updated glibc packages fix vulnerabilities in RPC XDR decoder

Updated glibc packages are available to fix an integer overflow in the XDR decoder. The glibc package contains standard libraries that are used by multiple programs on the system. Sun RPC is a remote procedure call framework that allows clients to invoke procedures in a server process over a...

Moderate: Red Hat Security Advisory: glibc security update

Updated glibc packages are available to fix a buffer overflow in the resolver. The GNU C library package, glibc, contains standard libraries used by multiple programs on the system. A read buffer overflow vulnerability exists in the glibc resolver code in versions of glibc up to and including...

GLIBC locale format strings exploit

Exploit for linux platform in category local exploits =================================== GLIBC locale format strings exploit =================================== / su.c by xp, modified by email protected - tested on redhat 5 - 7 / include include include include include include include include ch...

GLIBC locale - Format Strings

GLIBC locale - Format Strings / su.c by xp, modified by logikal@efnet - tested on redhat 5 - 7 / include include include include include include include include char shellcode = "\x31\xc0\x83\xc0\x17\x31\xdb\xcd\x80\xeb" "\x30\x5f\x31\xc9\x88\x4f\x17\x88\x4f\x1a"...

GLIBC locale - Format Strings

/ su.c by xp, modified by logikal@efnet - tested on redhat 5 - 7 / include include include include include include include include char shellcode = "\x31\xc0\x83\xc0\x17\x31\xdb\xcd\x80\xeb" "\x30\x5f\x31\xc9\x88\x4f\x17\x88\x4f\x1a" "\x8d\x5f\x10\x89\x1f\x8d\x47\x18\x89\x47"...

Domain Name System (DNS) stub resolver libraries vulnerable to buffer overflows via network name or address lookups

Overview The DNS stub resolver library in ISC BIND 4.9.2 through 4.9.10 contains buffer overflows in code that handles responses for network name and address requests. Other resolver libraries derived from BIND 4 such as BSD libc, GNU glibc, and those used by System V UNIX systems may also be...

Moderate: Red Hat Security Advisory: : Updated glibc packages fix vulnerabilities in resolver

Updated glibc packages are available to fix a buffer overflow in the resolver. The GNU C library package, glibc, contains standard libraries used by multiple programs on the system. A read buffer overflow vulnerability exists in the glibc resolver code in versions of glibc up to and including...

[SECURITY] [DSA 149-2] New glibc packages fix

-------------------------------------------------------------------------- Debian Security Advisory DSA 149-2 [email protected] http://www.debian.org/security/ Martin Schulze September 26th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 149-2] New glibc packages fix

-------------------------------------------------------------------------- Debian Security Advisory DSA 149-2 [email protected] http://www.debian.org/security/ Martin Schulze September 26th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 149-1] New glibc packages fix security related problems

-------------------------------------------------------------------------- Debian Security Advisory DSA 149-1 [email protected] http://www.debian.org/security/ Martin Schulze August 13th, 2002 - -------------------------------------------------------------------------- Package : glibc...

[SECURITY] [DSA 149-1] New glibc packages fix security related problems

-------------------------------------------------------------------------- Debian Security Advisory DSA 149-1 [email protected] http://www.debian.org/security/ Martin Schulze August 13th, 2002 - -------------------------------------------------------------------------- Package : glibc...

CVE-2002-0684

Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr...