Convex 3D 0.8 - Buffer Overflow

source: https://www.securityfocus.com/bid/11995/info It is reported that Convex 3D is susceptible to a stack-based buffer overflow vulnerability. This issue is due to a failure of the application to properly check the bounds of user-supplied image data prior to copying it into a fixed-size memory...

RTF2LATEX2E 1.0 - Remote Stack Buffer Overflow

source: https://www.securityfocus.com/bid/11994/info It is reported that rtf2latex2e is susceptible to a stack buffer overflow vulnerability. This issue is due to a failure of the application to properly bounds check user-supplied image data prior to copying it into a fixed-size memory buffer. Th...

Mesh Viewer 0.2.2 - Remote Buffer Overflow

Mesh Viewer 0.2.2 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/12025/info It is reported that Mesh Viewer is susceptible to a buffer overflow vulnerability. This issue is due to a failure of the application to properly bounds check user-supplied data prior to copying it into...

PGN2WEB 0.3 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/12023/info It is reported that pgn2web is susceptible to a buffer overflow vulnerability. This issue is due to a failure of the application to properly bounds check user-supplied data prior to copying it into a fixed-size memory buffer. This vulnerability...

Gamespy Software Development Kit - CD-Key Validation Buffer Overflow

source: https://www.securityfocus.com/bid/11881/info It has been reported that the GameSpy SDK is prone to a buffer overflow vulnerability in its CD-key validation functionality. This issue is due to a failure of the SDK to properly check the length of user-supplied network data prior to copying ...

Raven Software Soldier Of Fortune 2 - Remote Buffer Overflow

Raven Software Soldier Of Fortune 2 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/11735/info It is reported that Soldier of Fortune 2 is susceptible to a buffer overflow vulnerability. This issue is due to a failure of the application to perform sufficient bounds checking on...

Raven Software Soldier Of Fortune 2 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/11735/info It is reported that Soldier of Fortune 2 is susceptible to a buffer overflow vulnerability. This issue is due to a failure of the application to perform sufficient bounds checking on user-supplied input prior to copying it to a fixed-sized memo...

CVE-2002-1200: Improper Restriction of Operations within the Bounds of a Memory Buffer

Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when using template filenames or output, does not properly track the size of a buffer when constant characters are encountered during macro expansion, which allows remote attackers to cause a denial of service and possibly execute...

MailEnable 1.1x - Content-Length Denial of Service

source: https://www.securityfocus.com/bid/10838/info MailEnable is reported prone to a remote denial of service vulnerability. This vulnerability is reported to exist in the MailEnable HTTP header parsing code. When reading a large content-length header field from an HTTP request, the operation...

Athttpd 0.4b - GET Remote Buffer Overrun

Athttpd 0.4b - GET Remote Buffer Overrun // source: https://www.securityfocus.com/bid/8709/info Athttpd is said to be prone to a remote buffer overrun that could allow an attacker to execute arbitrary code. The problem occurs due to insufficient bounds checking when handling GET requests. As a...

IglooFTP PRO 3.8 - Multiple Buffer Overflow Vulnerabilities (2)

source: https://www.securityfocus.com/bid/8117/info IglooFTP PRO for Windows platforms has been reported prone to multiple buffer overrun vulnerabilities. The issue likely presents itself due do a lack of sufficient bounds checking performed on data that is copied into a reserved internal memory...

Tripbit Secure Code Analizer 1.0 - fgets() Local Buffer Overrun

Tripbit Secure Code Analizer 1.0 - fgets Local Buffer Overrun // source: https://www.securityfocus.com/bid/8028/info A buffer overrun has been discovered in Tripbit Secure Code Analizer when reading data from source files. The problem occurs due to an insecure use of the fgets function. This...

CVE-2002-1201: Undefined Security Weakness

IBM AIX 4.3.3 and AIX 5 allows remote attackers to cause a denial of service CPU consumption or crash via a flood of malformed TCP packets without any flags set, which prevents AIX from releasing the associated memory buffers...

Flood ACK packets cause AIX DoS

--------------------------------------------------------------------------- Title: Flood ACK packets cause AIX DoS. Released: 9th Oct 2002 --------------------------------------------------------------------------- Vulnerable: =========== - AIX version 4.3.3 with any ML - AIX 5 Overview: ========...

Проблемы со службой RunAs в Windows 2000 (privelege escalation)

Атакующий может подменить именованый канал службы чтобы перехватить логин и пароль пользователя. Кроме того, после выполнения приложения не производится очистка буфера памяти, что позволяет получить доступ к конфеденциальным данным. Имеется возможность DoS...