167 matches found
Trellian FTP 'PASV' Response Buffer Overflow Vulnerability
This host is installed with Trellian FTP and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodtrellianftpbofvuln.nasl 7573 2017-10-26 09:18:50Z cfischer $ Trellian FTP 'PASV' Response Buffer Overflow Vulnerability Authors: Sooraj KS Copyright: Copyright c 2010...
Beatport Player '.m3u' File Buffer Overflow Vulnerability
This host is installed with Beatport Player and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbbeatportplayerbofvuln.nasl 5368 2017-02-20 14:34:16Z cfi $ Beatport Player '.m3u' File Buffer Overflow Vulnerability Authors: Madhuri D Copyright: Copyright c 2010 Greenbon...
Microsoft Windows '.ani' file Denial of Service vulnerability
The host has ANI parser in Microsoft Windows and is prone to denial of dervice vulnerability. OpenVAS Vulnerability Test $Id: secpodiedosvuln.nasl 5364 2017-02-20 13:26:07Z cfi $ Microsoft Windows '.ani' file Denial of Service vulnerability Authors: Madhuri D Copyright: Copyright c 2010 SecPod,...
Apple QuickTime FlashPix File Buffer Overflow (CVE-2009-2798)
Apple's QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous audio/video formats. One of the image file formats supported by QuickTime is the FlashPix image format. A heap buffer overflow...
sudosh -- buffer overflow
ISS reports: sudosh2 and sudosh3 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the replay function. By persuading a victim to replay a specially-crafted recorded sudo session, a local attacker could overflow a buffer and execute arbitrary code on the syste...
Mini Stream RM Downloader '.smi' File Buffer Overflow Vulnerability
The host is installed with Mini-stream RM Downloader and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodministreamrmdownloaderbofvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Mini Stream RM Downloader '.smi' File Buffer Overflow Vulnerability Authors: Madhuri D...
[Wintercore Research ] Fujitsu SystemcastWizard Lite PXEService Remote Buffer Overflow.
Wintercore Research:: Advisory W01-0109 html version: http://www.wintercore.com/advisories/advisoryW010109.html 1. Background "SystemcastWizard Lite is support software for the setup of the PRIMEQUEST system" 2. Non-technical description PXEService.exe is prone to a remote buffer overflow due to...
NoticeWare Email Server NG LOGIN Messages DoS Vulnerability
NoticeWare Email Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CA BrightStor ARCserve Backup XDR Parsing Buffer Overflow Vulnerability
This vulnerability allws attackers to execute arbitrary code on vulnerable installations of CA BrightStor ARCserve Backup for Linux. User interaction is not required to exploit this vulnerability. The specific flaw exists due to improper bounds checking in the xdrrwsstring library function. By...
Darwin Streaming Server < 5.5.5 Multiple RCE Vulnerabilities
According to its banner, the version of Apple Darwin Streaming Server running on the remote host is prior to version 5.5.5. It is, therefore, affected by multiple vulnerabilities : - A heap buffer overflow condition exists in the Apple Darwin Streaming Proxy that allows an unauthenticated, remote...
CVE-2006-3975
CVE-2006-3975 affects Computer Associates’ eTrust Antivirus WebScan ActiveX component. The root cause is missing bounds checking during processing of update manifests (filelist.txt) delivered by the WebScan update mechanism, which could enable remote code execution when a user visits a malicious ...
War FTP Daemon CWD/MKD Buffer Overflow
The version of the War FTP Daemon running on this host is vulnerable to a buffer overflow attack. This is due to improper bounds checking within the code that handles both the CWD and MKD commands. SPDX-FileCopyrightText: 2003 Digital Defense Inc. Some text descriptions might be excerpted from a...
War FTP Daemon CWD/MKD Buffer Overflow
The version of the War FTP Daemon running on this host is vulnerable to a buffer overflow attack. This is due to improper bounds checking within the code that handles both the CWD and MKD commands. By exploiting this vulnerability, it is possible to crash the server, and potentially run arbitrary...
CSV2XML 0.5.1 - Remote Buffer Overflow
CSV2XML 0.5.1 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/12027/info It is reported that csv2xml is susceptible to a buffer overflow vulnerability. This issue is due to a failure of the application to properly bounds check user-supplied data prior to copying it into a...
jabberd -- remote buffer overflow vulnerability
Caused by improper bounds-checking of username and password in the C2S module, it is possible for an attacker to cause a remote buffer overflow. The server directly handles the userinput with SQL backend functions - malicious input may lead to buffer overflow...
smbd -- buffer-overrun vulnerability
Caused by improper bounds checking of certain trans2 requests, there is a possible buffer overrun in smbd. The attacker needs to be able to create files with very specific Unicode filenames on the share to take advantage of this issue...
XFree86 4.3 - Font Information File Buffer Overflow
XFree86 4.3 - Font Information File Buffer Overflow // source: https://www.securityfocus.com/bid/9636/info It has been reported that the XFree86 X Windows system is prone to a local buffer overflow vulnerability. The issue arises from improper bounds checking when parsing the 'font.alias' file...
Squid 2.5.x3.x - NTLM Buffer Overflow (Metasploit)
Squid 2.5.x3.x - NTLM Buffer Overflow Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
multiple buffer overflows in xboing
Steve Kemp reports in a Debian bug submission: Due to improper bounds checking it is possible for a malicious user to gain a shell with membership group 'games'. The binary is installed setgid games. Environmental variables are used without being bounds-checked in any way, from the source code:...
WSMP3 0.0.10.0.2 - Multiple Buffer Overflow Vulnerabilities
WSMP3 0.0.10.0.2 - Multiple Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/6239/info Several buffer overflow conditions have been reported for WSMP3. The vulnerability is due to improper bounds checking when copying data to local buffers. An attacker can exploit this...