Dr.Web 4.x - Virus Scanner Folder Name Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/7022/info A buffer overflow vulnerability has been reported for Dr. Web virus scanner. The vulnerability is due to insufficient bounds checking when processing folder names. An attacker is able to exploit this vulnerability by creating a malicious folder...

File 3.x - Local Stack Overflow Code Execution (1)

File 3.x - Local Stack Overflow Code Execution 1 // source: https://www.securityfocus.com/bid/7008/info It has been reported that a stack overflow exists in the file program. Although details of this issue are currently unavailable, it is likely that this issue could be exploited to execute code ...

snort RPC buffer overflo

Buffer overflow on RPC preprocessing...

ISS Security Brief: Snort RPC Preprocessing Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Brief March 3, 2003 Snort RPC Preprocessing Vulnerability Synopsis: ISS X-Force has discovered a remotely exploitable buffer overflow condition in Snort. Snort is an open source intrusion detection system. A buffer overflow fla...

XFree86 4.2 - XLOCALEDIR Local Buffer Overflow (2)

XFree86 4.2 - XLOCALEDIR Local Buffer Overflow 2 // source: https://www.securityfocus.com/bid/7002/info Several XFree86 utilities may be prone to a buffer overflow condition. The vulnerability exists due to insufficient boundary checks performed by these utilities when referencing the XLOCALEDIR...

Sendmail headers.c crackaddr Function Address Field Handling Remote Overflow

The remote Sendmail server, according to its version number, may be affected by a remote buffer overflow allowing remote users to gain root privileges. Sendmail versions from 5.79 to 8.12.7 are affected. Nessus reports this vulnerability using only the banner of the remote SMTP server. Therefore,...

XFree86 4.2 - 'XLOCALEDIR' Local Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/7002/info Several XFree86 utilities may be prone to a buffer overflow condition. The vulnerability exists due to insufficient boundary checks performed by these utilities when referencing the XLOCALEDIR environment variable. A local attacker can exploi...

Sendmail 8.12.x - Header Processing Buffer Overflow (2)

Sendmail 8.12.x - Header Processing Buffer Overflow 2 // source: https://www.securityfocus.com/bid/6991/info Sendmail is prone to a remotely buffer-overflow vulnerability in the SMTP header parsing component. Successful attackers may exploit this vulnerability to gain control of affected servers...

Microsoft Window ME Help Center buffer overflow

Buffer overflow during hcp:// URL processing...

ISMail Multiple Command Domain Name Handling Remote Overflow

The remote SMTP server probably ISMail seems to be vulnerable to a buffer overflow which could allow an attacker to gain LOCALSYSTEM privileges on this host. C Tenable Network Security, Inc. Ref: Message-ID: Date: Thu, 27 Feb 2003 15:45:17 -0800 From: "NGSSoftware Insight Security Research" To: ,...

CVE-2003-0099

Multiple buffer overflows in apcupsd before 3.8.6, and 3.10.x before 3.10.5, may allow attackers to cause a denial of service or execute arbitrary code, related to usage of the vsprintf function...

sircd proof-of-concept / advisory

I. BACKGROUND According to the vendor "The 'sircd' project started as an idea from the QuakeNet IRC Network coding team to develop a completely new irc server that had none of the problems of the original ircd, such as instability, scalability issues, redundant, badly written code and other nasty...

[SECURITY] [DSA 252-1] New slocate packages fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 252-1 [email protected] http://www.debian.org/security/ Martin Schulze February 21st, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 252-1] New slocate packages fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 252-1 [email protected] http://www.debian.org/security/ Martin Schulze February 21st, 2003 http://www.debian.org/security/faq -...

Lotus Domino Web Server vulnerable to buffer overflow via non-existent "h_SetReturnURL" parameter with an overly long "Host Header" field

Overview Lotus Domino Web Server is an application that provides access to Lotus Notes databases via HTTP requests. A vulnerability exists that could permit a remote attacker to execute arbitrary code on the server. Description Lotus Domino Web Server contains a vulnerability in the nhttp.exe...

Oracle9i Database contains remotely exploitable buffer overflow in "TO_TIMESTAMP_TZ" function

Overview A remotely exploitable buffer overflow vulnerability exists in Oracle9i Database. Description A buffer overflow vulnerability exists on all platforms in the following versions of Oracle9i Database: Oracle9i Database Release 2 9i Release 1 8i 8.1.7 8.0.6 A buffer overflow exists in...

Domino Advisories UPDATE

Hi All, Please note the following correction - The Notes Client Up-Date can be found at http://www14.software.ibm.com/webapp/download/search.jsp?q=&cat=&pf=&k=&dt=& go=y&rs=ESD-NOTECLNTi&STACT=&SCMP=&sb=r The Domino Web Server Update can be found at...

HP-UX 10.x - stmkfont Alternate Typeface Library Buffer Overflow (1)

HP-UX 10.x - stmkfont Alternate Typeface Library Buffer Overflow 1 // source: https://www.securityfocus.com/bid/6836/info A buffer overflow vulnerability has been reported in the stmkfont utility shipped with HP-UX systems. The problem occurs due to insufficient bounds checking on user-suplied da...

IBM AIX 4.3.35.15.2 - libIM Buffer Overflow

IBM AIX 4.3.35.15.2 - libIM Buffer Overflow source: https://www.securityfocus.com/bid/6840/info A buffer overflow vulnerability has been discovered in the libIM library available for the AIX 4.3, 5.1, 5.2 operating system. As a result it may be possible to overwrite sensitive memory in programs...

Nethack 3 - Local Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/6806/info By passing an overly large string when invoking nethack, it is possible to corrupt memory. By exploiting this issue it may be possible for an attacker to overwrite values in sensitive areas of memory, resulting in the execution of arbitrary...