Tivoli Storage Manager CAD Host header buffer overflow

Added: 10/26/2007 CVE: CVE-2007-4880 BID: 25743 OSVDB: 38161 Background IBM Tivoli Storage Manager TSM provides centralized management for automated backup and restoration operations. It runs a Client Acceptor Daemon CAD on port 1581/TCP. Problem A buffer overflow vulnerability in Tivoli Storage...

openSUSE 10 Security Update : xorg-x11-server (xorg-x11-server-2056)

This update fixes an integer overflow vulnerability when rendering CID-keyed fonts CVE-2006-3739/CVE-2006-3740. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update xorg-x11-server-2056. The text...

Eggdrop Server Module Message Handling Remote BoF Exploit

No description provided by source. / Eggdrop Server Module Message Handling Remote Buffer Overflow Vulnerability http://www.securityfocus.com/bid/24070 discovered by Bow Sineath tested on eggdrop 1.6.18 / linux 2.4 -exploit is a fake ircd...

EUVD-2007-5225

Multiple stack-based buffer overflows in Firebird LI 1.5.3.4870 and 1.5.4.4910, and WI 1.5.3.4870 and 1.5.4.4910, allow remote attackers to execute arbitrary code via 1 a long service attach request on TCP port 3050 to the SVCattach function or 2 unspecified vectors involving the INETconnect...

Trend Micro ServerProtect TMregChange buffer overflow

Added: 09/27/2007 CVE: CVE-2007-4731 OSVDB: 45878 Background Trend Micro ServerProtect is a virus scanner for servers. Problem A buffer overflow vulnerability in the TMregChange function in the TMreg.dll library allows remote attackers to execute arbitrary commands by sending specially crafted da...

Meiping network management family of software vulnerability completely analyze-vulnerability warning-the black bar safety net

My home city, Internet Cafe 1 0 0% with meiping network management system, no way! Also it is only the first look at Mae ping, also hope everyone to the sea Han it! Meiping network management software series actually also should be considered several network management software one! Reputation...

Talking about the CMD turned on under the Remote Desktop Services-vulnerability warning-the black bar safety net

This article has been published in the hacker X file of the first 7 issues of the magazine on One, the origin Close paragraph of time, Microsoft appears DNS overflow vulnerability crazy a period of time, is now also there are many server can successfully overflow. I believe we all have experience...

EUVD-2007-2826

Integer overflow in the TIFF parser in OpenOffice.org OOo before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite StarSuite; allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of...

lighttpd mod_fastcgi HTTP Request Header Remote Overflow

The remote web server appears to be lighttpd running with the FastCGI module modfastcgi. The version of the FastCGI module on the remote host is affected by a buffer overflow vulnerability. A remote attacker can exploit this, by sending a specially crafted request with a long header, to add or...

CVE-2007-4730

Buffer overflow in the compNewPixmap function in compalloc.c in the Composite extension for the X.org X11 server before 1.4 allows local users to execute arbitrary code by copying data from a large pixel depth pixmap into a smaller pixel depth pixmap...

Storm 2 mps. the dll component multiple buffer overflow vulnerabilities-vulnerability warning-the black bar safety net

Online burst a storm of the activex vulnerability, the call is rawParse this method, so simple to see, found the problem quite a bit. These issues are able to control eip or seh, that is each vulnerability can lead to arbitrary code execution. Affected versions: storm 2other not tested Unaffected...

GlobalLink glitemflat.dll SetClientInfo() overflow analysis-vulnerability warning-the black bar safety net

Affected version: Lianzhong game lobby 2. 7. 0. 8 2 0 0 7 years 8 months 1 6, released Unaffected version: Ourgame also didn't fill :- Brief analysis: Prior to the PoC code: OBJECT id=target classid=clsid:7D1425D4-E2FC-4A52-BDA9-B9DCAC5EF574/OBJECT SCRIPT...

Microsoft MSN Messenger 8.0 - Video Conversation Buffer Overflow

Microsoft MSN Messenger 8.0 - Video Conversation Buffer Overflow source: https://www.securityfocus.com/bid/25461/info Microsoft MSN Messenger is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue...

Media Player Classic 6.4.9 - FLI File Remote Buffer Overflow

Media Player Classic 6.4.9 - FLI File Remote Buffer Overflow source: https://www.securityfocus.com/bid/25437/info Media Player Classic is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data. Attackers may attempt to exploit this issue...

Mercury Mail Transport System AUTH CRAM-MD5远程栈溢出漏洞

BUGTRAQ ID: 25357 Mercury Mail Transport System是一款综合的Internet邮件服务器系统。 Mercury Mail Transport System的SMTP服务器没有正确地处理超长的AUTH CRAM-MD5字符串，远程攻击者可能利用此漏洞控制服务器。 如果用户向服务器提交了恶意的认证请求的话，就可能触发栈溢出，导致完全入侵服务器系统。 Pegasus Mail Mercury Mail Transport System 4.51 Pegasus Mail Mercury Mail Transport System 4.01b...

Microsoft Virtual PC and Virtual Server Heap Overflow Vulnerability

Description Microsoft Virtual PC and Virtual Server are prone to a local heap-overflow vulnerability. To exploit this issue, attackers must have administrative privileges for the guest operating system. Attackers may exploit this issue to execute arbitrary code in the context of the host operatin...

Microsoft DirectX Media 6.0 Live Picture Corporation DirectTransform FlashPix ActiveX control buffer overflow

Overview The Live Picture Corporation DirectTransform FlashPix ActiveX control contains a buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Microsoft DirectX Media 6.0 SDK includes an ActiveX control that is...

ZDI-07-044: BakBone NetVault Reporter Scheduler Heap Overflow Vulnerability

ZDI-07-044: BakBone NetVault Reporter Scheduler Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-044.html July 25, 2007 -- CVE ID: CVE-2007-3911 -- Affected Vendor: BakBone -- Affected Products: BakBone NetVault Reporter 3.5 Update4 -- TippingPointTM IPS Customer...

PHP 5.2.3 tidy extension local overflow vulnerability-vulnerability warning-the black bar safety net

? php if ! extensionloaded"tidy"die"you need Tidy extension loaded!"; $scode = "\xfc\xbb\xc7\xc4\x05\xc9\xeb\x0c\x5e\x56\x31\x1e\xad\x01\xc3\x85". "\xc0\x75\xf7\xc3\xe8\xef\xff\xff\xff\x3b\x2c\x41\xc9\xc3\xad\xc1". "\x8c\xff\x26\xa9\x0b\x87\x39\xbd\x9f\x38\x22\xca\xff\xe6\x53\x27"...

Trillian Instant Messenger client fails to properly handle malformed URIs

Overview The Trillian Instant Messaging client contains a buffer overflow vulnerability that may allow an attacker to execute code. Description A Uniform Resource Identifier URI is a string of characters that can be used to identify a location, resource, or protocol. The Trillian Instant Messenge...