7174 matches found
EZMeeting 3.x - 'EZNet.exe' Long HTTP Request Remote Buffer Overflow
//source: https://www.securityfocus.com/bid/9167/info // //A problem has been identified in the handling of some types of requests by the eZ package, resulting in a buffer overrun. Because of this, it may be possible for a remote attacker to execute arbitrary code and gain unauthorized access to ...
PLD Software Ebola 0.1.4 - Remote Buffer Overflow
// source: https://www.securityfocus.com/bid/9156/info It has been reported that a buffer overflow condition is present in the authentication mechanism implemented in Ebola. The condition is due to the use of the C library function sprintf to construct an error message when authentication is not...
rsync security advisory
rsync 2.5.6 security advisory ----------------------------- December 4th 2003 Background ---------- The rsync team has received evidence that a vulnerability in rsync was recently used in combination with a Linux kernel vulnerability to compromise the security of a public rsync server. While the...
Critical: Red Hat Security Advisory: rsync security update
Updated rsync packages are now available that fix a heap overflow in the Rsync server. rsync is a program for sychronizing files over the network. A heap overflow bug exists in rsync versions prior to 2.5.7. On machines where the rsync server has been enabled, a remote attacker could use this fla...
RSync Daemon Mode Undisclosed Remote Heap Overflow Vulnerability
Description rsync has been reported prone to an undisclosed heap overflow vulnerability when running in daemon mode. The issue has been reported to be remotely exploitable and will provide for an execution of arbitrary code. Technologies Affected Apple Mac OS X 10.2.8 Apple Mac OS X 10.3.2 Apple...
Thomson TCM315, 510 DoS
Oversized request to HTTP interface leads to buffer overflow...
[RHSA-2003:342-01] Updated EPIC packages fix security vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated EPIC packages fix security vulnerability Advisory ID: RHSA-2003:342-01 Issue date: 2003-11-17 Updated on: 2003-11-17 Product: Red Hat...
Ethereal: security problems in ethereal 0.9.15
Background Ethereal is a popular network protocol analyzer. Description Ethereal contains buffer overflow vulnerabilities in the GTP, ISAKMP, and MEGACO protocol dissectors, and a heap overflow vulnerability in the SOCKS protocol dissector, which could cause Ethereal to crash or to execute...
AtGuard 3.2
Я тут случайно нашел в AtGuard 3.2, iamdrv.sys ver.3.22.09 size.102 976 вылетает под win2k, стандартное переполнение, проверяется как : открываешь 25 порт на прием, запускаешь atguard и retina 4.9.100 там есть такой cham attack вот через него и вылетает, я soft-ice посмотрел, простое переполнение...
Effect Office buffer overflow
Buffer overflow on few strings sent to TCP/56004...
Important: Red Hat Security Advisory: : Updated EPIC packages fix security vulnerability
Updated EPIC packages which fix an exploitable buffer overflow vulnerability are now available. EPIC Enhanced Programmable ircII Client is an advanced ircII chat client designed to connect to Internet Relay Chat IRC servers. A bug in various versions of EPIC allows remote malicious IRC servers to...
TelCondex Simple Webserver Buffer Overflow
The remote TelCondex SimpleWebserver is vulnerable to a remote executable buffer overflow, due to missing length check on the referer-variable of the HTTP-header. A remote attacker could exploit this to crash the web server, or potentially execute arbitrary code. include"compat.inc"; ifdescriptio...
Microsoft FrontPage Server Extensions - 'fp30reg.dll' (MS03-051)
/ Frontpage fp30reg.dll Overflow MS03-051 discovered by Brett Moore Exploit by Adik netmaniac hotmail kg Binds persistent command shell on port 9999 Tested on Windows 2000 Professional SP3 English version fp30reg.dll ver 4.0.2.5526 - 13/Nov/2003 - / include include include pragma commentlib,"ws23...
EEYE: Windows Workstation Service Remote Buffer Overflow
Windows Workstation Service Remote Buffer Overflow Release Date: November 11, 2003 Date Reported: September 15, 2003 Severity: High Remote Code Execution Systems Affected: Windows 2000 Windows XP Description: eEye Digital Security has discovered a remote buffer overflow in the Windows Workstation...
[SECURITY] [DSA 398-1] New conquest packages fix local conquest exploit
-------------------------------------------------------------------------- Debian Security Advisory DSA 398-1 [email protected] http://www.debian.org/security/ Martin Schulze November 10th, 2003 http://www.debian.org/security/faq -...
Winace UnAce 2.2 - Command Line Argument Buffer Overflow (1)
// source: https://www.securityfocus.com/bid/9002/info UnAce has been reported to be prone to a buffer overflow vulnerability. The issue presents itself when UnAce handles ace filenames that are of excessive length. When this filename is passed to the UnAce utility as an argument, the string is...
SHOUTcast Server buffer overflow
buffer overflow on long User-Agent HTTP header in admin.cgi and in processing of internal administration protocol...
VMWare GSX Server Authentication Server Buffer Overflow Vulnerability - Update
Author: Darryl Swofford Email: [email protected] Date: 2003/10/31 System: VMware GSX Server 2.0.1 build-2129 for Windows other versions not tested. Tested on Windows NT/2000/2003/XP systems. Description: After reviewing BugTaq 5294 VMWare GSX Server Authentication Server Buffer Overflow...
taper.txt
HI, There is a stack overflow vulnerability in taper program of linux 7.3 may be others.. On linux 7.3 its not suid by default. But i dont know about other distro/ver . may be its suid on others.. Advisory:...
Coreutils 4.5.x - LS Width Argument Integer Overflow
source: https://www.securityfocus.com/bid/8875/info Coreutils 'ls' has been reported prone to an integer overflow vulnerability. The issue reportedly presents itself when handling width and column display command line arguments. It has been reported that excessive values passed as a width argumen...