[SECURITY] [DSA 449-1] New metamail packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 449-1 [email protected] http://www.debian.org/security/ Martin Schulze February 24th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 440-1] New Linux 2.4.17 packages fix several local root exploits (powerpc/apus)

-------------------------------------------------------------------------- Debian Security Advisory DSA 440-1 [email protected] http://www.debian.org/security/ Martin Schulze February 18th, 2004 http://www.debian.org/security/faq -...

Important: Red Hat Security Advisory: : Updated XFree86 packages fix privilege escalation vulnerability

Updated XFree86 packages that fix a privilege escalation vulnerability are now available. XFree86 is an implementation of the X Window System, providing the core graphical user interface and video drivers. iDefense discovered two buffer overflows in the parsing of the 'font.alias' file. A local...

Palace buffer overflow

Buffer overflow on parsing palace:// URL...

RhinoSoft Serv-U FTPd Server 34 - MDTM Command Stack Overflow (2)

RhinoSoft Serv-U FTPd Server 34 - MDTM Command Stack Overflow 2 // source: https://www.securityfocus.com/bid/9483/info RhinoSoft Serv-U FTP Server is reportedly prone to a buffer overflow. The issue exists when a 'site chmod' command is issued on a non-existant file. If an excessively long filena...

RhinoSoft Serv-U FTPd Server 3/4 - MDTM Command Stack Overflow (2)

// source: https://www.securityfocus.com/bid/9483/info RhinoSoft Serv-U FTP Server is reportedly prone to a buffer overflow. The issue exists when a 'site chmod' command is issued on a non-existant file. If an excessively long filename is specified for the command, an internal buffer will be...

Low: Red Hat Security Advisory: wget security update

Updated wget packages that correct a buffer overrun are now available. GNU Wget is a file-retrieval utility that uses the HTTP and FTP protocols. A buffer overflow in the urlfilename function for wget 1.8.1 allows attackers to cause a segmentation fault via a long URL. Red Hat does not believe th...

TCM315.txt

. : Shell Security Advisory : . Subject: Buffer overflow in the cable modem Thomson TCM315 Issue date: 2003 November 23 Related link: http://www.shellsec.net/leeradvisory.php?id=2 Homepage: http://www.shellsec.net Info about product: http://www.qb.ro/docs/tcm315.pdf - 1 - Introduction...

DSA-398 conquest - buffer overflow

Bulletin has no description...

Apache: multiple buffer overflows

Background The Apache HTTP Server is one of the most popular web servers on the Internet. Description Multiple stack-based buffer overflows in modalias and modrewrite allow attackers who can create or edit configuration files including .htaccess files, to cause a denial of service and execute...

PerlEdit buffer overflow

Buffer overflow on invalid data to TCP/1956...

Plug And Play Web Server 1.0 002c - FTP Service Command Handler Buffer Overflow

Plug And Play Web Server 1.0 002c - FTP Service Command Handler Buffer Overflow source: https://www.securityfocus.com/bid/8667/info Plug and Play Web Server FTP service has been reported prone to multiple buffer overflow issues, the issues present themselves when the affected FTP service handles...

NullSoft Winamp 2.81/2.91/3.0/3.1 - MIDI Plugin 'IN_MIDI.dll' Track Data Size Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/8567/info Winamp MIDI plugin, INMIDI.DLL has been reported prone to a buffer overflow issue when handling malicious MIDI files. The issue presents itself when a malicious value is passed as the Track Data Size of a malicious MIDI file header. Although...

Avant Browser buffer overflow

Buffer overflow on oversized URL...

Avant Browser 8.0.2 - HTTP Request Buffer Overflow (PoC)

Avant Browser 8.0.2 - HTTP Request Buffer Overflow PoC source: https://www.securityfocus.com/bid/8471/info It has been reported that a buffer overflow condition exists in the Avant Browser software that may cause an attacker to run arbitrary code on a vulnerable host in order to gain unauthorized...

CVE-2003-0685

Buffer overflow in Netris 0.52 and earlier, and possibly other versions, allows remote malicious Netris servers to execute arbitrary code on netris clients via a long server response...

DSA-369 zblast - buffer overflow

Bulletin has no description...

Top 1.x/2.0 - 'HOME Environment' Local Buffer Overflow

// source: https://www.securityfocus.com/bid/8239/info A buffer overflow condition has been reported in top when handling environment variables of excessive length. This may result in an attacker potentially executing arbitrary code. / UHAGr CONFIDENTIAL SOURCE - DO NOT DISTRIBUTE Local...

[SECURITY] [DSA-329-1] New osh packages fix buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 329-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 20th, 2003 http://www.debian.org/security/faq -...

Internet Explorer Object Type Property Overflow

Internet Explorer Object Type Property Overflow Release Date: June 4, 2003 Severity: High Remote Code Execution Systems Affected: Microsoft Internet Explorer 5.01 Microsoft Internet Explorer 5.5 Microsoft Internet Explorer 6.0 Microsoft Internet Explorer 6.0 for Windows Server 2003 Description: T...