7174 matches found
Coreutils 4.5.x - LS Width Argument Integer Overflow
Coreutils 4.5.x - LS Width Argument Integer Overflow source: https://www.securityfocus.com/bid/8875/info Coreutils 'ls' has been reported prone to an integer overflow vulnerability. The issue reportedly presents itself when handling width and column display command line arguments. It has been...
MS Exchange 2000 XEXCH50 Heap Overflow PoC (MS03-046)
No description provided by source. !/usr/bin/perl -w ms03-046.pl - hdm metasploit com This vulnerability allows a remote unauthenticated user to overwrite big chunks of the heap used by the inetinfo.exe process. Reliably exploiting this bug is non-trivial; even though the entire buffer is binary...
CVE-2003-0755
Buffer overflow in syscmd.c for gtkftpd 1.0.4 and earlier allows remote attackers to execute arbitrary code by creating long directory names and listing them with a LIST command...
Oracle Database Server 9.0.x - Oracle Binary Local Buffer Overflow
// source: https://www.securityfocus.com/bid/8844/info Oracle Database Server 'oracle' binary has been reported prone to a local buffer overflow vulnerability. The issue likely presents itself due to a lack of sufficient boundary checks performed on command line arguments passed to the affected...
Cfengine cfservd ReceiveTransaction Function Remote Overflow (intrusive check)
The remote Cfserver seems to be vulnerable to a remote buffer overflow bug. Such a bug might be exploited by an attacker to execute arbitrary code on this host, with the privileges cfservd is running with. C Tenable Network Security, Inc. script based on exploit code by kokaninATdtors.net...
MS03-042: Buffer Overflow in Windows Troubleshooter ActiveX Control (826232)
The remote host contains a version of the Troubleshooter ActiveX control module that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit this web page. C Tenable Network Security, Inc. include"compat.inc"; if...
Microsoft Exchange Server Buffer Overflow Vulnerability
Description Microsoft has announced that Exchange Server is affected by a remotely exploitable buffer overflow condition. The overflow can be triggered remotely by unauthenticated SMTP clients. The source of the issue appears to be in how the XEXCH50 verb is handled by the server. Microsoft has...
IRCnet IRCD 2.10 - Local Buffer Overflow
// source: https://www.securityfocus.com/bid/8817/info IRCnet IRCD has been reported prone to a buffer overflow vulnerability that may be exploited by local users. This issue may be exploited to crash the affected server. Although unconfirmed, due to the nature of this vulnerability it has been...
IRCnet IRCD 2.10 - Local Buffer Overflow
IRCnet IRCD 2.10 - Local Buffer Overflow // source: https://www.securityfocus.com/bid/8817/info IRCnet IRCD has been reported prone to a buffer overflow vulnerability that may be exploited by local users. This issue may be exploited to crash the affected server. Although unconfirmed, due to the...
SLocate 2.6 - User-Supplied Database Heap Overflow
// source: https://www.securityfocus.com/bid/8780/info It has been reported that a local off-by-one heap overflow exists in the handling of user-supplied databases by slocate. Because of this, an attacker may be able to gain elevated privileges. include define CODEDPATH 0x080520 define DATABASE...
[SECURITY] [DSA-392-1] New webfs packages fix buffer overflows, file and directory exposure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 392-1 [email protected] http://www.debian.org/security/ Matt Zimmerman September 29th, 2003 http://www.debian.org/security/faq -...
Buffer overflow in cfengine
Stack overflow on ACL check...
DSA-391 freesweep - buffer overflow
Bulletin has no description...
Solaris libc getopt(3) contains buffer overflow
Overview Solaris libc getopt3 contains a buffer overflow vulnerability. Please note the date of this report: 1/27/1997. This does not affect current versions of Solaris. Description From :A buffer overflow condition exists in the getopt3 routine in Solaris libc. By supplying an invalid option and...
[SECURITY] [DSA-385-1] New hztty packages fix buffer overflows
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 385-1 [email protected] http://www.debian.org/security/ Matt Zimmerman September 18th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA-385-1] New hztty packages fix buffer overflows
-------------------------------------------------------------------------- Debian Security Advisory DSA 385-1 [email protected] http://www.debian.org/security/ Matt Zimmerman September 18th, 2003 http://www.debian.org/security/faq -...
DSA-384 sendmail - buffer overflows
Bulletin has no description...
Liquid War 5.4.55.5.6 - HOME Environment Variable Buffer Overflow
Liquid War 5.4.55.5.6 - HOME Environment Variable Buffer Overflow // source: https://www.securityfocus.com/bid/8629/info Liquid War has been reported prone to a buffer overflow condition when handling HOME environment variables of excessive length. The issue presents itself, due to a lack of...
CVE-2003-0780
Buffer overflow in getsaltfrompassword from sqlacl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field...
MySQL 3.23.x4.0.x - Password Handler Buffer Overflow
MySQL 3.23.x4.0.x - Password Handler Buffer Overflow source: https://www.securityfocus.com/bid/8590/info MySQL server has been reported prone to a buffer overflow vulnerability when handling user passwords of excessive size. The issue presents itself, due to a lack of sufficient bounds checking...