irfan.view32.txt

The popular Image viewer "Irfan View32" contains the buffer overflow problem, this problem exists in the handling of Adobe Photoshop image file. Irfan view checks the image type by the image header, if "8BPS" pattern is found in the header, Irfan view judges this file as Photo Shop image. We thin...

Trend Micro Interscan VirusWall 3.2.3/3.3 - 'HELO' Remote Buffer Overflow (2)

source: https://www.securityfocus.com/bid/787/info There is a buffer overflow in the HELO command of the smtp gateway which ships as part of the VirusWall product. This buffer overflow could be used to launch arbitrary code on the vulnerable server. This issue was patched by InterScan, however ev...

BTD Studio Zom-Mail 1.0.9 - Remote Buffer Overflow

BTD Studio Zom-Mail 1.0.9 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/761/info In certain versions of the BTD Zom-Mail server there exists a buffer overflow which may be remotely exploitable by malicious users. The problem in question is in the handling of overly past 25...

OmniHTTPd imagemap.exe CGI Remote Overflow

The 'imagemap.exe' cgi is installed. This CGI is vulnerable to a buffer overflow that will allow a remote user to execute arbitrary commands with the privileges of your httpd server either nobody or root. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Omnicron OmniHTTPd 1.1/2.4 Pro - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/739/info There is a remotely exploitable buffer overflow vulnerability in the CGI program "imagemap", which is distributed with Omnicron's OmniHTTPD. During operations made on arguments passed to the program, a lack of bounds checking on a strcpy call...

OpenLink Web Configurator GET Request Remote Overflow

It is possible to crash the remote web server by sending overly long GET requests. An attacker may exploit this issue to crash the remote web server or execute arbitrary code on the remote system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10169;...

SCO_OpenServer_exploit.txt

Greetings, OK, I lied about being done with my OpenServer audit. I have a couple of these left over, mostly because they weren't root-compromises. There is an overflow in /opt/K/SCO/Unix/5.0.5Eb/.softmgmt/var/usr/bin/cancel which will allow any user to gain lp privs. Note that this is NOT an...

SCO Open Server 5.0.5 - cancel Buffer Overflow

// source: https://www.securityfocus.com/bid/702/info There is a buffer overflow vulnerability in /opt/K/SCO/Unix/5.0.5Eb/.softmgmt/var/usr/bin/cancel. It is important to know that the overflows are not in "/usr/bin/cancel" or "/usr/lpd/remote/cancel". The consequence of this vulnerability being...

Linux_mini-sql_bof.txt

hi, i was looking for an exploitable buffer overflow in w3-msql from Hughes Technology since there was many security flaws inside. There is a static variable named PrivateScript in main function with a 255 chars size length. No luck ! main finish everywhere with an exit call. The http internal...

MediaHouse Software Statistics Server 4.285.1 - Server ID Buffer Overflow

MediaHouse Software Statistics Server 4.285.1 - Server ID Buffer Overflow source: https://www.securityfocus.com/bid/734/info The web interface for Statistics Server contains an unchecked buffer which accepts input from the "Server ID" field of the login webpage. While the login webpage has a 16...

CVE-1999-0034

Buffer overflow in suidperl sperl, Perl 4.x and 5.x...

CVE-1999-0303

CVE-1999-0303 describes a buffer overflow in the BNU UUCP daemon (uucpd) triggered by long hostnames. The issue affects the BNU UUCP daemon and is caused by improper handling of hostname lengths, with CVSS metrics indicating a local, low-complexity attack that could impact confidentiality, integr...

CVE-1999-0069

Solaris ufsrestore buffer overflow...

Microsoft Internet Explorer 4.15 - Registration Wizard Buffer Overflow

Microsoft Internet Explorer 4.15 - Registration Wizard Buffer Overflow Microsoft Internet Explorer 4.1/5.0 for Windows 95/Windows NT 4,Windows 98 Registration Wizard Buffer Overflow Vulnerability source: https://www.securityfocus.com/bid/671/info There is a buffer overflow in the Internet Explore...

Mandriva Linux Mandrake 6.0 Gnome Libs 1.0.8 - espeaker Local Buffer Overflow

Mandriva Linux Mandrake 6.0 Gnome Libs 1.0.8 - espeaker Local Buffer Overflow source: https://www.securityfocus.com/bid/663/info A buffer overflow vulnerabilityin GNOME's shared libraries handling of the 'espeaker' command line argument may allow local users to attack setuid binaries linked again...

dtsession_vuln.txt

Subject: Vulnerability in dtsession To: [email protected] Hello, I discovered the following security problem in dtsession actually in libtt.so, part of CDE: Description ----------- The session manager dtsession contains an overflow vulnerability when parsing the environment variable...

FreeBSD-SA-99:06.amd

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-99:06 Security Advisory FreeBSD, Inc. Topic: remote amd attack Category: core Module: kernel Announced: 1999-09-16 Affects: FreeBSD 3.2 and earlier FreeBSD-current before th...

DIGITAL UNIX 4.0 df AIX 4.3.2 CDE 2.1 IRIX 6.5.14 Solaris 7.0 SunOS 4.1.4 - Local Buffer Overflow

DIGITAL UNIX 4.0 df AIX 4.3.2 CDE 2.1 IRIX 6.5.14 Solaris 7.0 SunOS 4.1.4 - Local Buffer Overflow / source: https://www.securityfocus.com/bid/641/info TRU64/DIGITAL UNIX 4.0 d/f,AIX Somehow the overflow is very sensitive to caching of the stack. To see that it really does work, run it in a debugg...

Solaris 7.0 /usr/bin/mail - '-m' Local Buffer Overflow

// source: https://www.securityfocus.com/bid/672/info A buffer overflow vulnerability in the '/usr/bin/mail' program's handling of the '-m' command line argument allows local users to obtain access to the 'mail' group. / Generic Solaris x86 exploit program by Brock Tellier For use against any x86...

Martin Stover Mars NWE 0.99 - Local Buffer Overflow

Martin Stover Mars NWE 0.99 - Local Buffer Overflow // source: https://www.securityfocus.com/bid/617/info There are several buffer overflows in the setuid root components of the Mars Netware Emulator package. They allow for a local root compromise through the overflowing of buffers without bounds...