CVE-2003-0390

CVE-2003-0390 is a vulnerability in the Options Parsing Tool (OPT) shared library ≤ 3.18 used by setuid programs. It describes multiple buffer overflows triggered by long command line options fed into macros such as opt_warn_2 (used in opt_atoi), enabling local arbitrary code execution. The provi...

CVE-2003-0390

Multiple buffer overflows in Options Parsing Tool OPT shared library 3.18 and earlier, when used in setuid programs, may allow local users to execute arbitrary code via long command line options that are fed into macros such as optwarn2, as used in functions such as optatoi...

CVE-2003-0390

Multiple buffer overflows in Options Parsing Tool OPT shared library 3.18 and earlier, when used in setuid programs, may allow local users to execute arbitrary code via long command line options that are fed into macros such as optwarn2, as used in functions such as optatoi...

Nokia GGSN DoS

IP packet with invalid options causes device to crash...

Some problems in Privatefirewall 3.0

UkR security team presents: Some problems in Privatefirewall 3.0 /////////////////////////////////////////////////////////////////////////////////////////// Product: Privatefirewall version: 3.0 Vendor : Privacyware http://www.privacyware.com Author : UkR-XblP [email protected] - the chief specialist...

Buffer overflow vulnerability found in MailMax version 5

, / | / / / Buffer Overflow Vulnerability / / / / / Found in MailMax Version 5 / / , http://www.smartmax.com / / | // matrix at 0x36.org ooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOoo SUMMARY------------------------------------------------------------------- This i...

Firebird 1.0.2 FreeBSD 4.7-RELEASE Local Root Exploit

Exploit for bsd platform in category local exploits ===================================================== Firebird 1.0.2 FreeBSD 4.7-RELEASE Local Root Exploit ===================================================== / DSR-firebird.c ------------------------------- Tested on: Firebird 1.0.2 FreeBSD...

SRT2003-04-24-1532 - Options Parsing Tool library buffer overflows.

Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...

Buffer overflow in Options Parsing Tool library

Buffer overflows in few argument processing functions...

Web Server HTTP OPTIONS Method URL Handling Remote Overflow

It may be possible to make the web server crash or even execute arbitrary code by sending it a too long URL through the OPTIONS method. C Tenable Network Security, Inc. Some vulnerable servers: VisNetic WebSite 3.5.13.1 References: Date: Fri, 13 Dec 2002 09:25:00 +0100 From:"Peter Kruse" Subject:...

mailman XSS in user options page

From the 2.1.1 release notes: Closed a cross-site scripting vulnerability in the user options page...

PT-2003-1325

Name of the Vulnerable Software and Affected Versions Mailman version 2.1 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject script or HTML into web pages via the email or language parameters. Recommendations For Mailman version 2.1, update the options.py fil...

CVE-2002-1832

Unknown vulnerability in the "ipopts decode" functionality in Firestorm IDS 0.4.0 through 0.4.2 allows remote attackers to cause a denial of service crash via certain IP options...

CVE-2002-2241

Buffer overflow in httpd32.exe in Deerfield VisNetic WebSite before 3.5.15 allows remote attackers to cause a denial of service crash via a long HTTP OPTIONS request...

Gallery v1.3.2 allows remote exploit (fixed in 1.3.3)

PROBLEM DESCRIPTION Gallery is an open source image management system. Learn more about it at http://gallery.sourceforge.net Gallery v1.3.2 introduced a new feature that allows users to publish images to their website-based Gallery using the Windows XP Publishing subsystem. This feature introduce...

CVE-2002-1369

jobs.c in Common Unix Printing System CUPS 1.1.14 through 1.1.17 does not properly use the strncat function call when processing the options string, which allows remote attackers to execute arbitrary code via a buffer overflow attack...

DSA-210 lynx - CRLF injection

Bulletin has no description...

Proxy vulnerability in TrendMicro InterScan-VirusWall V3.6

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greetings! A quite well known i.e. ancient type of proxy vulnerability was found for TrendMicro's InterScan VirusWall V3.6 This general problem has been known to be an issue with plain HTTP proxies like the Squid for ages e.g...

[SECURITY] [DSA 191-2] New squirrelmail packages fix problem in options page

-------------------------------------------------------------------------- Debian Security Advisory DSA 191-2 [email protected] http://www.debian.org/security/ Martin Schulze November 7th, 2002 http://www.debian.org/security/faq -...

HP CIFS/9000 Server A.01.05/A.01.06 - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/5088/info A vulnerability has been reported in the /opt/cifsclient/bin/cifslogin utility distributed with CIFS/9000. The utility is prone to several buffer overflow conditions and may lead to root compromise. The vulnerability occurs due to the lack of...