[SECURITY] [DSA 281-1] New xftp packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 281-1 [email protected] http://www.debian.org/security/ Martin Schulze April 8th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 281-1] New xftp packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 281-1 [email protected] http://www.debian.org/security/ Martin Schulze April 8th, 2003 http://www.debian.org/security/faq -...

Samba 2.2.0 - 2.2.8 trans2open Overflow (OS X)

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

passlogd buffer overflow

Buffer overflow on syslog packets processing...

@(#)Mordred Labs advisory - Integer overflow in PHP array_pad() function

//@ Mordred Security Labs advisory Release date: April 1, 2003 Name: Integer overflow in PHP arraypad function Versions affected: all versions Risk: average Author: Sir Mordred [email protected] I. Description: PHP is a widely-used general-purpose scripting language that is especially suited for...

[SECURITY] [DSA 277-1] New apcupsd packages fix remote root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 277-1 [email protected] http://www.debian.org/security/ Martin Schulze April 3rd, 2003 http://www.debian.org/security/faq -...

iDEFENSE Security Advisory 03.31.03: Buffer Overflow in Windows QuickTime Player

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 03.31.03: http://www.idefense.com/advisory/03.31.03.txt Buffer Overflow in Windows QuickTime Player March 31, 2003 I. BACKGROUND QuickTime Player is a popular media player for both the Microsoft Windows and Apple Mac...

XMame 0.6x - Lang Local Buffer Overflow

// source: https://www.securityfocus.com/bid/7773/info Xmame is prone to a locally exploitable buffer overflow. This is due to insufficient bounds checking of the command line parameter used to specify language settings --lang. Successful exploitation on some systems could result in execution of...

Personal FTP Server buffer overflow

Buffer overflow on USER longer than 320 characters...

sa2003-01.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NSFOCUS Security AdvisorySA2003-01 Topic: Microsoft Windows XP Redirector Local Buffer Overflow Vulnerability Release Date: 2003-3-27 CVE CAN ID: CAN-2003-0004 Affected system: =================== - - Microsoft Windows XP - - Microsoft Windows XP SP1...

[SECURITY] [DSA 272-1] New dietlibc packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 272-1 [email protected] http://www.debian.org/security/ Martin Schulze March 28th, 2003 http://www.debian.org/security/faq -...

@(#)Mordred Labs advisory - PHP for Win32: buffer overflow in openlog() function

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 //@ Mordred Security Labs advisory Release date: March 27, 2003 Name: PHP for Windows - buffer overflow in openlog function Versions affected: all versions for Windows platforms Risk: average Author: Sir Mordred [email protected] I. Description: PHP ...

@(#)Mordred Labs advisory - Integer overflow in PHP socket_iovec_alloc() function

//@ Mordred Security Labs advisory Release date: March 25, 2003 Name: Integer overflow in PHP socketiovecalloc function Versions affected: 4.3.2 Conditions: PHP must be compiled with --enable-sockets option, which is turned off by default Risk: average Author: Sir Mordred [email protected] I...

GlobalScape CuteFTP 5.0 - LIST Response Buffer Overflow

source: https://www.securityfocus.com/bid/6642/info A buffer overflow condition has been reported for the CuteFTP application. The vulnerability is due to insufficient bounds checking performed on certain FTP command responses. If CuteFTP is used to connect to a malicious FTP server that sends an...

@(#)Mordred Labs advisory - Integer overflow in PHP memory allocator

//@ Mordred Security Labs advisory Release date: March 26, 2003 Name: Integer overflow in PHP memory allocator Versions affected: 4.3.2 Risk: very high Author: Sir Mordred [email protected], http://mslabs.iwebland.com I. Description: PHP is a widely-used general-purpose scripting language that i...

[SECURITY] [DSA 268-1] New mutt packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 268-1 [email protected] http://www.debian.org/security/ Martin Schulze March 25th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 267-1] New lpr packages fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 267-1 [email protected] http://www.debian.org/security/ Martin Schulze March 24th, 2003 http://www.debian.org/security/faq -...

CVE-2003-0140

Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other programs that use Mutt code such as Balsa before 2.0.10, allows a remote malicious IMAP server to cause a denial of service crash and possibly execute arbitrary code via a crafted folder...

CVE-2003-0010

Integer overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript JScript.dll on various Windows operating system allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail that uses a large array index value that enables a heap-based...

CVE-2003-0028

Integer overflow in the xdrmemgetbytes function, and possibly other functions, of XDR external data representation libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different...