53 matches found
php: out-of-bounds write in fpm_log.c
An out-of-bounds write flaw was found in the fpmlogwrite logging function of PHP's FastCGI Process Manager service. A remote attacker could repeatedly send maliciously crafted requests to force FPM to exhaust file system space, creating a denial of service and preventing further logging...
Buffer Overflow Vulnerability in the log function of Interstage HTTP Server
Overview The log function ihsrlog/rotatelogs of Interstage HTTP Server contains a buffer overflow vulnerability. Impact An attacker could execute arbitrary code. Solution Please refer to the 'Vendor Information' section for the official countermeasure and take appropriate action...
Format string
Multiple format string vulnerabilities in Yet Another Radius Daemon YARD RADIUS 1.1.2 allow context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via format string specifiers in a request in the 1 logmsg function in log.c or 2 version or 3 buildversion...
PT-2012-5107 · Mozilla +1 · Firefox +1
Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 15.0 on Android Description: The issue is related to the improper implementation of unspecified callers of the android log print function in Mozilla Firefox on Android. This allows remote attackers to execute...
Discuz! X2.5最新版本 日志功能存在XSS漏洞
简要描述： Discuz! X2.5最新版本 日志功能存在XSS漏洞 详细说明： Discuz! X2.5最新版本 日志功能存在XSS漏洞 日志发表没有过滤代码 漏洞证明： 从Discuz全新下载的X2.5安装包 进行全新安装 发表一篇日志 写入XSS代码 日志源码编辑 没有进行XSS代码过滤...
Buffer overflow
Multiple buffer overflows in Georgia SoftWorks SSH2 Server GSWSSHD 7.01.0003 and earlier allow remote attackers to execute arbitrary code via a 1 a long username, which triggers an overflow in the log function; or 2 a long password...
Net::Server: Format string vulnerability
Background Net::Server is an extensible, generic Perl server engine. It is used by several Perl applications like Postgrey. Description The log function of Net::Server does not handle format string specifiers properly before they are sent to syslog. Impact By sending a specially crafted datastrea...
CVE-2002-1904
Buffer overflow in the Log function in util.c in GazTek ghttpd 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long HTTP GET request...
CVE-2002-1904
CVE-2002-1904 describes a buffer overflow in the Log function of GazTek ghttpd 1.4–1.4.3 (util.c) that can be triggered by a long HTTP GET request, enabling remote code execution. The vulnerability is risk-labeled as high (CVSS base score 7.5) with network access, no authentication, and the poten...
PT-2005-1982 · Mtftpd · Mtftpd
Name of the Vulnerable Software and Affected Versions: mtftpd version 0.0.3 Description: The issue is related to a format string vulnerability in the log do function in log.c. This vulnerability can be exploited when the statistics option is enabled, allowing remote attackers to execute arbitrary...
CVE-2004-1469
Format string vulnerability in the log function in SUS 2.0.2, and other versions before 2.0.6, allows local users to execute arbitrary code via format string specifiers in a command line argument that is passed directly to syslog...
