442 matches found
zeus 3.1.9 空结束字符串漏洞
No description provided by source...
SSL NULL Termination Certificate Validation Security Bypass (CVE-2009-2408; CVE-2009-2510; CVE-2009-4565)
Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Firefox is a popular, open source web browser developed by Mozilla Foundation. A security bypass vulnerability has been reported in Mozilla Networ...
cyrus-sasl: sasl_encode64() does not reliably null-terminate its output
Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service application crash via strings that are used as input to the saslencode64 function in lib/saslutil.c...
Debian DSA-1807-1 : cyrus-sasl2, cyrus-sasl2-heimdal - buffer overflow
"James Ralston discovered that the saslencode64 function of cyrus-sasl2, a free library implementing the Simple Authentication and Security Layer, suffers from a missing null termination in certain situations. This causes several buffer overflows in situations where cyrus-sasl2 itself requires th...
Ubuntu: Security Advisory (USN-730-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-730-1: libpng vulnerabilities
It was discovered that libpng did not properly perform bounds checking in certain operations. An attacker could send a specially crafted PNG image and cause a denial of service in applications linked against libpng. This issue only affected Ubuntu 8.04 LTS. CVE-2007-5268, CVE-2007-5269 Tavis...
CentOS Update for python CESA-2007:1077-01 centos2 i386
Check for the Version of python OpenVAS Vulnerability Test CentOS Update for python CESA-2007:1077-01 centos2 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
python off-by-one locale.strxfrm() (possible memory disclosure)
Off-by-one error in the PyLocalestrxfrm function in Modules/localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due ...
Moderate: Red Hat Security Advisory: python security update
Updated python packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Python is an interpreted, interactive, object-oriented programming language. An...
openldap -- multiple remote denial of service vulnerabilities
BugTraq reports: OpenLDAP is prone to multiple remote denial-of-service vulnerabilities because of an incorrect NULL-termination issue and a double-free issue...
DEBIAN-CVE-2007-2488
The IAX2 channel driver chaniax2 in Asterisk before 20070504 does not properly null terminate data, which allows remote attackers to trigger loss of transmitted data, and possibly obtain sensitive information memory contents or cause a denial of service application crash, by sending a frame that...
CVE-2007-2052
Off-by-one error in the PyLocalestrxfrm function in Modules/localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due ...
CVE-2007-0803
Multiple buffer overflows in STLport before 5.0.3 allow remote attackers to execute arbitrary code via unspecified vectors relating to 1 "print floats" and 2 a missing null termination in the "rope constructor."...
CVS 1.11.x - Multiple Vulnerabilities
CVS 1.11.x - Multiple Vulnerabilities // source: https://www.securityfocus.com/bid/10499/info CVS is prone to multiple vulnerabilities. The issues include a double free vulnerability, format string vulnerabilities, and integer overflows. There is also a null termination issue in the security patc...
CVS 1.11.x - Multiple Vulnerabilities
// source: https://www.securityfocus.com/bid/10499/info CVS is prone to multiple vulnerabilities. The issues include a double free vulnerability, format string vulnerabilities, and integer overflows. There is also a null termination issue in the security patch for BID 10384, potentially leading t...
DEBIAN-CVE-2003-0777
saned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not properly handle dropped connections, which can prevent strings from being null terminated and cause a denial of service segmentation fault...
Qpopper 4.0.x - Remote Memory Corruption
// source: https://www.securityfocus.com/bid/7058/info A memory corruption vulnerability has been discovered in Qpopper version 4.0.4 and earlier. The vulnerability occurs when calling the 'mdef' command and a malicious macro name is supplied. By filling a target buffer with a malicious macro nam...
Qpopper 4.0.x - Remote Memory Corruption
Qpopper 4.0.x - Remote Memory Corruption // source: https://www.securityfocus.com/bid/7058/info A memory corruption vulnerability has been discovered in Qpopper version 4.0.4 and earlier. The vulnerability occurs when calling the 'mdef' command and a malicious macro name is supplied. By filling a...
PT-2002-2273 · Cyrus · Cyrus Sasl Library
Name of the Vulnerable Software and Affected Versions: Cyrus SASL library versions 2.1.9 and earlier Description: The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via multiple buffer overflows. These overflows can occur due to long inputs during...
Security Update: [CSSA-2001-SCO.39] Open UNIX, UnixWare 7: timed does not enforce nulls
To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: Open UNIX, UnixWare 7: timed does not enforce nulls Advisory number: CSSA-2001-SCO.39 Issue date: 2001 December 10 Cross reference: 1. Problem Description The...