security flaw

The binfmt functionality in the Linux kernel, when "memory overcommit" is enabled, allows local users to cause a denial of service kernel oops via a malformed a.out binary...

CVE-2003-1288

Multiple race conditions in Linux-VServer 1.22 with Linux kernel 2.4.23 and SMP allow local users to cause a denial of service kernel oops via unknown attack vectors related to the 1 sinfo and 2 ipinfo data structures and the a forgetoriginalparent, b goodness, c schedule, d updateprocesstimes, a...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that address several security vulnerabilites are now available for the IA64 architecture. Updated 28 August 2003 Changed the CVE name listed in description from the incorrect CAN-2002-0247 to CAN-2003-0247 The Linux kernel handles the basic functions of the operating syste...

[SECURITY] [DSA-358-2] New kernel packages fix potential "oops"

-------------------------------------------------------------------------- Debian Security Advisory DSA 358-2 [email protected] http://www.debian.org/security/ Matt Zimmerman August 5th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-358-3] New kernel packages fix potential "oops"

-------------------------------------------------------------------------- Debian Security Advisory DSA 358-3 [email protected] http://www.debian.org/security/ Matt Zimmerman August 4th, 2003 http://www.debian.org/security/faq -...

CVE-2001-0028

CVE-2001-0028 affects the oops WWW proxy server, version 1.5.2 and earlier, where a buffer overflow in the HTML parsing code can be triggered by a large number of " characters. The vulnerability allows remote attackers to execute arbitrary commands. The initial description does not specify affect...

CVE-2001-0028

Buffer overflow in the HTML parsing code in oops WWW proxy server 1.5.2 and earlier allows remote attackers to execute arbitrary commands via a large number of " quotation characters...

CVE-2001-0029

Buffer overflow in oops WWW proxy server 1.4.6 and possibly other versions allows remote attackers to execute arbitrary commands via a long host or domain name that is obtained from a reverse DNS lookup...

CVE-2001-0029

Buffer overflow in oops WWW proxy server 1.4.6 and possibly other versions allows remote attackers to execute arbitrary commands via a long host or domain name that is obtained from a reverse DNS lookup...

CVE-2001-0029

CVE-2001-0029 affects the ooops WWW proxy server (v1.4.6 and possibly earlier). The vulnerability is a buffer overflow in handling host/domain names obtained from reverse DNS lookups, enabling a remote attacker to execute arbitrary commands. The CVSS/impact metrics show a base score of 10.0 (HIGH...

pkc001.txt

/ pkc001.txt / -= SECURITY ADVISORY 001 =- | \ www.pkcrew.org / \ \ | / \ | | | | | / | | | | | / | | | | / | | / / | | | / | Application : Oops proxy server 1.4.22 1.4.6 and maybe prior Type: heap buffer overflow --- The problem --- Function listparser in ftputils.c : line is the line sent by th...

FreeBSD-SA-00:79.oops

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:79 Security Advisory FreeBSD, Inc. Topic: oops allows remote code execution Category: ports Module: oops Announced: 2000-12-20 Credits: |CyRaX| Affects: Ports collection...

[pkc] remote heap buffer overflow in oops

pkc001.txt --- Packet Knights Advisory 001 --- http://www.pkcrew.org Author : |CyRaX| [email protected] Application : Oops proxy server 1.4.22 1.4.6 and maybe prior Type: heap buffer overflow --- The problem --- Function listparser in ftputils.c : line is the line sent by the ftp server in result ...

Stack too ;) Re: [pkc] remote heap buffer overflow in oops

Uups..!.!.!.. another hole in oops-1.4.6. just a code fragment: / check if this is full name / if !strchrname, '.' if domainname0 / join / strcpychartmpname, name; strncatchartmpname, domainname, sizeoftmpname-strlenchartmpname -1 ; name=chartmpname; if result = lookupdnscachechartmpname, NULL, 0...

oops WWW Proxy Server Reverse DNS Response Overflow

The remote server appears to be running ooops WWW proxy server version 1.4.6 or older. Such versions are reportedly affected by a buffer overflow vulnerability. A remote attacker might exploit this vulnerability to crash the server or execute arbitrary commands on the remote system. C Tenable...

Oops Proxy Server 1.4.22 - Remote Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/2099/info Oops is a freely available proxy server package, written by Igor Khasilev. A problem exists in the package which could allow for the arbitrary execution of code. Multiple buffer overflows exist in this product. In one instance, it is possible...