7174 matches found
QNX Photon phrelay-cfg - '-s' Overflow
source: https://www.securityfocus.com/bid/11164/info Reportedly QNX Photon MicroGUI is affected by multiple buffer overflow vulnerabilities in MicroGUI utilities. These issues are due to a failure of the affected applications to validate user-supplied string lengths before copying them into finit...
trillian074i.txt
AUTHOR Komrade DATE 08/09/2004 PRODUCT Trillian is a chat client currently supporting IRC, AIM, ICQ, MSN Messenger, and Yahoo! Messenger. from readme.txt file DETAILS A buffer overflow vulnerability in basic edition version 0.74i latest version occours in the MSN module when receiving a string of...
Fedora Core 1 : lha-1.14i-12.2 (2004-294)
Lukasz Wojtow discovered a stack-based buffer overflow in all versions of lha up to and including version 1.14. A carefully created archive could allow an attacker to execute arbitrary code when a victim extracts or tests the archive. The Common Vulnerabilities and Exposures project cve.mitre.org...
Apple Mac OS X CoreFoundation contains a buffer overflow vulnerability
Overview There is a vulnerability in the Mac OS X CoreFoundation framework that could allow a local attacker to execute arbitrary code. Description The Core Foundation framework CoreFoundation.framework is designed to allow code and data sharing between frameworks, libraries, and applications in...
RHEL 3 : gaim (RHSA-2004:400)
An updated gaim package that fixes several security issues is now available. Gaim is an instant messenger client that can handle multiple protocols. Buffer overflow bugs were found in the Gaim MSN protocol handler. In order to exploit these bugs, an attacker would have to perform a man in the...
Trillian 0.74i MSN Module - Remote Buffer Overflow
Trillian 0.74i MSN Module - Remote Buffer Overflow / Cerulean Studios Trillian 0.74i Buffer Overflow in MSN module exploit created by Komrade - unsecure altervista org Written for Windows 2000 / Windows XP. Tested on Windows XP Professional sp0. This exploit spawn a shell on port 5555, you have...
Important: Red Hat Security Advisory: lha security update
An updated lha package that fixes a buffer overflow is now available. LHA is an archiving and compression utility for LHarc format archives. Lukasz Wojtow discovered a stack-based buffer overflow in all versions of lha up to and including version 1.14. A carefully created archive could allow an...
Ipswitch WhatsUp Gold Notification Instance Name Remote Overflow
Binary data 2264.prm...
Grokster 1.32.6 KaZaA Media Desktop 1.3.x1.6.12.0.x - ActiveX Control Remote Buffer Overflow
Grokster 1.32.6 KaZaA Media Desktop 1.3.x1.6.12.0.x - ActiveX Control Remote Buffer Overflow source: https://www.securityfocus.com/bid/11101/info Altnet is reported prone to a remote buffer overflow vulnerability. This issue presents itself in an ActiveX control installed by the application...
Ipswitch WhatsUp Gold 7.0/8.0 - Notification Instance Name Remote Buffer Overflow
source: https://www.securityfocus.com/bid/11109/info The Ipswitch WhatsUp Gold web interface is prone to a remotely exploitable buffer overflow vulnerability. This may be exploited by authenticated users of the interface to execute arbitrary code in the context of the program. !/usr/bin/perl...
[Full-Disclosure] iDEFENSE Security Advisory 09.02.04a: Oracle Database Server dbms_system.ksdwrt Buffer Overflow Vulnerability
Oracle Database Server dbmssystem.ksdwrt Buffer Overflow Vulnerability iDEFENSE Security Advisory 09.02.04a www.idefense.com/application/poi/display?id=135&type=vulnerabilities September 2, 2004 I. BACKGROUND Oracle Database Server is a family of database products that range from personal databas...
MailEnable HTTPMail Service Content-Length Header Overflow
The target is running at least one instance of MailEnable that has a flaw in the HTTPMail service MEHTTPS.exe in the Professional and Enterprise Editions. The flaw can be exploited by issuing an HTTP GET with an Content-Length header exceeding 100 bytes, which causes a fixed-length buffer to...
Important: Red Hat Security Advisory: lha security update
An updated lha package that fixes a buffer overflow is now available. LHA is an archiving and compression utility for LHarc format archives. Lukasz Wojtow discovered a stack-based buffer overflow in all versions of lha up to and including version 1.14. A carefully created archive could allow an...
Titan FTP Server Multiple Command Remote Overflow
The remote is running Titan FTP Server. All versions up to and including 3.21 are reported vulnerable to a remote heap overflow in the CWD, STAT or LIST command processing. An attacker may deny service to legitimate users or execute arbitrary code on the remote host. C Tenable Network Security...
DSA-458-3 python2.2 - buffer overflow
Bulletin has no description...
FreeBSD : nss -- exploitable buffer overflow in SSLv2 protocol handler (129)
The following package needs to be updated: nss @DEPRECATED@ This script has been deprecated by freebsdpkg207f8ff3f69711d881b0000347a4fa7d.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006 Jacques Vidrine and...
[Full-Disclosure] iDEFENSE Security Advisory 08.25.04: Ipswitch WhatsUp Gold Remote Buffer Overflow Vulnerability
Ipswitch WhatsUp Gold Remote Buffer Overflow Vulnerability iDEFENSE Security Advisory 08.25.04 http://www.idefense.com/application/poi/display?type=vulnerabilities August 25, 2004 I. BACKGROUND Ipswitch WhatsUp Gold is a Microsoft Windows based network monitoring application. More information is...
Pi3Web Webserver < 2.0.3 HTTP GET Request Overflow DoS
Binary data 2184.prm...
GLSA-200407-11 : wv: Buffer overflow vulnerability
The remote host is affected by the vulnerability described in GLSA-200407-11 wv: Buffer overflow vulnerability A use of strcat without proper bounds checking leads to an exploitable buffer overflow. The vulnerable code is executed when wv encounters an unrecognized token, so a specially crafted...