[SPSadvisory#48]RealONE Player Gold / RealJukebox2 Buffer Overflow

SPS Advisory 48 RealONE Player Gold / RealJukebox2 Buffer Overflow UNYUN [email protected] Shadow Penguin Security http://www.shadowpenguin.org -------------------------------------------------------------- Date July. 12, 2002 vulnerable RealONE Player Gold Ver. 6.0.10.505 RealJukebox2 Ver...

Microsoft Internet Information Server (IIS) vulnerable to buffer overflow via malformed server-side include directive

Overview A buffer overflow in the code that processes server-side include files on IIS 4.0 and IIS 5.0 could allow an intruder to execute code with the privileges of the web server. Description A buffer overflow exists in the code that processes server side include directives on IIS versions 4 an...

Real Networks RealJukebox 1.0.2RealOne 6.0.10 Player Gold - Skinfile Buffer Overflow

Real Networks RealJukebox 1.0.2RealOne 6.0.10 Player Gold - Skinfile Buffer Overflow // source: https://www.securityfocus.com/bid/5217/info Real Software has announced a vulnerability in RealJukebox2 and Real Player Gold. A buffer overflow condition exists due to insufficient bounds checking of...

Sun iPlanet Web Server Buffer Overflow (#NISR09072002)

NGSSoftware Insight Security Research Advisory Name: iPlanet Search Buffer Overflow Systems: iWS 6.0 and iWS 4.1 Severity: High Risk if Search enabled Category: Remote Buffer Overrun Vulnerability Vendor URL: http://www.iplanet.com/ Author: David Litchfield [email protected] Advisory URL:...

remote winamp 2.x exploit (all current versions)

2c79cbe14ac7d0b8472d3f129fa1df55 Security Advisory Nъmero Dos winamp has an option, enabled by default, which checks on startup for the latest version from www.winamp.com and will then notify the user of a possible upgrade via messagebox.. unfortunately, if it were to receive a huge response, the...

CVE-2002-0651

Buffer overflow in the DNS resolver code used in libc, glibc, and libbind, as derived from ISC BIND, allows remote malicious DNS servers to cause a denial of service and possibly execute arbitrary code via the stub resolvers...

HP Tru64/OSF1 DXTerm - Local Buffer Overflow

source: https://www.securityfocus.com/bid/5746/info The HP Tru64/OSF1 dxterm utility is prone to a locally exploitable buffer overflow condition. This issue is due to insufficient checking of command line input supplied via the "-xrm" parameter. This parameter serves the same purpose as the...

Foundstone Advisory - Buffer Overflow in AnalogX Proxy

---------------------------------------------------------------------- FS Advisory ID: FS-070102-23-AXPR Release Date: July 1st, 2002 Product: AnalogX Proxy Vendor: AnalogX http://www.analogx.com Vendor Advisory: See vendor web site Type: Buffer Overflow Severity: High Author: Robin Keir...

AnalogX SimpleServer:WWW Buffer Overflow

The remote installation of AnalogX SimpleServer:WWW is affected by a buffer overflow triggered when processing input, such as a series of 640 '@' characters. An unauthenticated, remote attacker can leverage this issue to crash the affected service or even to execute arbitrary code on the remote...

Mandrake 7/8/9 / RedHat 6.x/7 Bonobo EFSTool - Commandline Argument Buffer Overflow (2)

source: https://www.securityfocus.com/bid/5125/info Bonobo is a set of tools and CORBA interfaces included as part of the Gnome infrastructure. It is designed for use on the Linux and Unix operating systems. A boundry condition error has been discovered in the efstool program. Due to improper...

Buffer overflow in HP-UX cifslogin

Buffer overflow on oversized -P option...

Multiple vendors' Domain Name System (DNS) stub resolvers vulnerable to buffer overflows

Overview Buffer overflow vulnerabilities exists in the DNS stub resolver library used by BSD, ISC BIND, and GNU glibc. Other systems that use DNS resolver code derived from ISC BIND may also be affected. An attacker who is able to control DNS responses could exploit arbitrary code or cause a deni...

Microsoft SQLXML ISAPI filter vulnerable to buffer overflow via contenttype parameter

Overview A buffer overflow vulnerability exists in the Microsoft SQLXML Internet Services Application Programming Interface ISAPI extension for Internet Information Server IIS. This vulnerability could allow a remote attacker to cause a denial of service or execute arbitrary code with LocalSystem...

Buffer Overflow in UNIX VPN Client

...

CVE-2002-0593

Buffer overflow in Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long channel name in an IRC URI...

Interbase 6.0 malloc() issues

====================================================================== Strategic Reconnaissance Team Security Advisory SRT2002-06-17-1043 Topic : Interbase 6.0-1 Date : June 17, 2002 Credit : KF dotslashatsnosoft.com Site : http://www.snosoft.com...

Microsoft SQL Server 2000 - Password Encrypt procedure Buffer Overflow

Microsoft SQL Server 2000 - Password Encrypt procedure Buffer Overflow source: https://www.securityfocus.com/bid/5014/info A buffer overflow vulnerability has been reported in SQL Server 2000. The vunerability is a result of an unchecked buffer when using the password encrypt procedure. This...

Lumigent Log Explorer 3.0.1 - XP_LogAttach_SetPort Buffer Overflow

source: https://www.securityfocus.com/bid/5017/info A buffer overflow vulnerability in xplogattach.dll has been reported for Lumigent Log Explorer. Specifically, this affects the xplogattachsetport stored procedure. If this condition is successfully exploited, it is possible for locations in memo...

Lumigent Log Explorer XP - _LogAttach_StartProf Buffer Overflow

Lumigent Log Explorer XP - LogAttachStartProf Buffer Overflow source: https://www.securityfocus.com/bid/5016/info A buffer overflow vulnerability in xplogattach.dll has been reported for Lumigent Log Explorer. Specifically, this affects the xplogattachStartProf stored procedure. If this condition...

Lumigent Log Explorer 3.0.1 - XP_LogAttach_SetPort Buffer Overflow

Lumigent Log Explorer 3.0.1 - XPLogAttachSetPort Buffer Overflow source: https://www.securityfocus.com/bid/5017/info A buffer overflow vulnerability in xplogattach.dll has been reported for Lumigent Log Explorer. Specifically, this affects the xplogattachsetport stored procedure. If this conditio...