GLSA-200501-15 : UnRTF: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200501-15 UnRTF: Buffer overflow An unchecked strcat in unrtf may overflow the bounds of a static buffer. Impact : Using a specially crafted file, possibly delivered by e-mail or over the web, an attacker may execute arbitrary cod...

GNU a2ps - Anything to PostScript Not SUID Local Overflow

/ Not added to Local Non Poc section /str0ke / include include include // by lizard / lizstyleatgmail.com // greets go to slider/trog for helpin me // not suid by default ; define VULNTHING "/usr/bin/a2ps" define DEFRET 0xbffffffa - strlensc - strlenVULNTHING define xnullbitch 1100 //im not a asm...

[SECURITY] [DSA 677-1] New sympa packages fix potential arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 677-1 [email protected] http://www.debian.org/security/ Martin Schulze February 11th, 2005 http://www.debian.org/security/faq -...

xpcd -- buffer overflow

Debian Project reports: Erik Sjolund discovered a buffer overflow in pcdsvgaview, an SVGA PhotoCD viewer. xpcd-svga is part of xpcd and uses svgalib to display graphics on the Linux console for which root permissions are required. A malicious user could overflow a fixed-size buffer and may cause...

Debian DSA-676-1 : xpcd - buffer overflow

Erik Sjolund discovered a buffer overflow in pcdsvgaview, an SVGA PhotoCD viewer. xpcd-svga is part of xpcd and uses svgalib to display graphics on the Linux console for which root permissions are required. A malicious user could overflow a fixed-size buffer and may cause the program to execute...

DSA-677-1 sympa - buffer overflow

Bulletin has no description...

CVE-2005-0330

Buffer overflow in Painkiller 1.35 and earlier, and possibly other versions before 1.61, allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a long cd-key hash...

[Full-Disclosure] iDEFENSE Security Advisory 02.09.05: CA BrightStor ARCserve Backup v11 Discovery Service Remote Buffer Overflow

Computer Associates BrightStor ARCserve Backup v11 Discovery Service Remote Buffer Overflow Vulnerability iDEFENSE Security Advisory 02.09.05 www.idefense.com/application/poi/display?id=194&type=vulnerabilities February 09, 2005 I. BACKGROUND BrightStor ARCserve Backup for Windows delivers backup...

3COM 3CServer FTP Server multiple buffer overflows

Buffer overflows in multiple FTP commands...

Microsoft Office XP HTML Link Processing Remote Buffer Overflow Vulnerability

Description A remote buffer overflow vulnerability affects Microsoft Office XP. The problem presents itself when an unsuspecting user follows a malicious HTML link that points to a Office document. A boundary condition error is exposed during this operation that may allow attacker-specified data ...

Microsoft Windows Hyperlink Object Library Buffer Overflow Vulnerability

Description The Microsoft Windows Hyperlink Object Library is reported prone to a buffer overflow vulnerability. An attacker may exploit this condition to execute arbitrary code on a vulnerable computer, which may grant unauthorized access to the computer or lead to privilege escalation. It is...

Microsoft Windows License Logging Service Buffer Overflow Vulnerability

Description A buffer overflow exists in the Microsoft Windows License Logging Service. This could allow remote execution of arbitrary code. Technologies Affected Microsoft Small Business Server 2000 Microsoft Small Business Server 2003 Microsoft Windows 2000 Advanced Server Microsoft Windows 2000...

Operator Shell (osh) 1.7-12 Local Root Exploit

No description provided by source. !/usr/bin/perl Tested and working uid=50str0ke gid=100users euid=0root groups=100users /str0ke OSH 1.7 Exploit EDUCATIONAL purposes only.... :- by Charles Stevenson core [email protected] Description: The Operator Shell Osh is a setuid root, security enhanced,...

Fedora Core 3 : openswan-2.1.5-2.FC3.1 (2005-082)

This erratum fixes the remote exploitation of a stack based buffer overflow vulnerability in Xelerance Corp.'s Openswan, which could allow attackers to execute arbitrary code. The vulnerability specifically exists due to a lack of bounds checking in the pluto application when Openswan is compiled...

[SA14092] Newspost "socket_getline()" Buffer Overflow Vulnerability

TITLE: Newspost "socketgetline" Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA14092 VERIFY ADVISORY: http://secunia.com/advisories/14092/ CRITICAL: Less critical IMPACT: System access WHERE: From remote SOFTWARE: Newspost 2.x http://secunia.com/product/4589/ DESCRIPTION: Niels Heinen has...

RHEL 2.1 / 3 : ethereal (RHSA-2005:011)

Updated Ethereal packages that fix various security vulnerabilities are now available. Ethereal is a program for monitoring network traffic. A number of security flaws have been discovered in Ethereal. On a system where Ethereal is running, a remote attacker could send malicious packets to trigge...

Newspost < 2.0-r1 socket_getline Function Remote Overflow

Binary data 2585.prm...

CVE-2004-1150

Stack-based buffer overflow in the incdda.dll plugin for Winamp 5.0 through 5.08c allows attackers to execute arbitrary code via a cda:// URL with a long 1 device name or 2 sound track number, as demonstrated with a .m3u or .pls playlist file...

Vim - mch_expand_wildcards() Heap Buffer Overflow

Vim - mchexpandwildcards Heap Buffer Overflow source: https://www.securityfocus.com/bid/30648/info Vim is prone to a heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. An attacker may exploit this issue to execute arbitrary code wi...

CVE-2004-0888

Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service crash and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889...