GLSA-200510-15 : Lynx: Buffer overflow in NNTP processing

The remote host is affected by the vulnerability described in GLSA-200510-15 Lynx: Buffer overflow in NNTP processing When accessing a NNTP URL, Lynx connects to a NNTP server and retrieves information about the available articles in the target newsgroup. Ulf Harnhammar discovered a buffer overfl...

CVE-2005-3120

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape ESC characters...

CVE-2005-3120

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape ESC characters...

USN-206-1: Lynx vulnerability

Ulf Harnhammar discovered a remote vulnerability in Lynx when connecting to a news server NNTP. The function that added missing escape chararacters to article headers did not check the size of the target buffer. Specially crafted news entries could trigger a buffer overflow, which could be...

lynx security update

CentOS Errata and Security Advisory CESA-2005:803 An updated lynx package that corrects a security flaw is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Lynx is a text-based Web browser. Ulf Härnhammar discovered a stack overfl...

Critical: Red Hat Security Advisory: lynx security update

An updated lynx package that corrects a security flaw is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Lynx is a text-based Web browser. Ulf Härnhammar discovered a stack overflow bug in Lynx when handling connections to NNTP...

CVE-2005-3120

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape ESC characters...

CVE-2005-3120

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape ESC characters...

CVE-2005-3120

CVE-2005-3120 concerns Lynx, a text-mode web/browser, with a stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier. The overflow can be triggered when Lynx handles article headers containing Asian characters while connecting to an NNTP server, causing Lynx to write past a b...

Lynx 2.8.6dev.13 - Remote Buffer Overflow (PoC)

Lynx 2.8.6dev.13 - Remote Buffer Overflow PoC !/usr/bin/perl -- lynx-nntp-server by Ulf Harnhammar in 2005 I hereby place this program in the public domain. use strict; use IO::Socket; $main::port = 119; $main::timeout = 5; SUBROUTINES sub mysend$$ my $file = shift; my $str = shift; print $file...

Lynx < 2.8.6 dev14 NNTP Headers Buffer Overflow

Binary data 3261.prm...

Lynx: Buffer overflow in NNTP processing

Background Lynx is a text-mode browser for the World Wide Web. It supports multiple URL types, including HTTP and NNTP URLs. Description When accessing a NNTP URL, Lynx connects to a NNTP server and retrieves information about the available articles in the target newsgroup. Ulf Harnhammar...

lynx -- remote buffer overflow

Ulf Härnhammar reports: When Lynx connects to an NNTP server to fetch information about the available articles in a newsgroup, it will call a function called HTrjis with the information from certain article headers. The function adds missing ESC characters to certain data, to support Asian...

Debian DSA-812-1 : turqstat - buffer overflow

Peter Karlsson discovered a buffer overflow in Turquoise SuperStat, a program for gathering statistics from Fidonet and Usenet, that can be exploited by a specially crafted NNTP server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...

Turquoise SuperStat Fidonet / Usenet statistics utility buffer overflow

Buffer overflow on NNTP server reply parsing...

CVE-2005-2658

Buffer overflow in utility.cpp in Turquoise SuperStat turqstat 2.2.4 and earlier might allow remote NNTP servers to execute arbitrary code via a date with a long month...

CVE-2005-2658

Buffer overflow in utility.cpp in Turquoise SuperStat turqstat 2.2.4 and earlier might allow remote NNTP servers to execute arbitrary code via a date with a long month...

[SECURITY] [DSA 812-1] New turqstat packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 812-1 [email protected] http://www.debian.org/security/ Martin Schulze September 15th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 812-1] New turqstat packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 812-1 [email protected] http://www.debian.org/security/ Martin Schulze September 15th, 2005 http://www.debian.org/security/faq -...

CVE-2005-2658

Turquoise SuperStat (turqstat) up to version 2.2.4 is affected by a buffer overflow in utility.cpp that can allow remote NNTP servers to execute arbitrary code when a date with a long month is processed. Public advisories (Debian DSA-812-1) document the remote overflow and provide fixed package v...