Sun Solaris 7.0 - '/usr/bin/lpset' Local Buffer Overflow

/ source: https://www.securityfocus.com/bid/251/info A stack buffer overflow vulnerability in the handling of the "-a" command in the lpset program allows arbitrary execution of code with root privileges. The lpset utility sets printing configuration information in the system configuration...

Alt-N MDaemon Server 2.71 SP1 - SMTP HELO Argument Buffer Overflow

Alt-N MDaemon Server 2.71 SP1 - SMTP HELO Argument Buffer Overflow // source: https://www.securityfocus.com/bid/8622/info It has been reported that Alt-N MDaemon server is prone to an SMTP HELO command argument buffer overflow vulnerability. The issue presents itself likely due to insufficient...

Xcmail 0.99.6 - Local Buffer Overflow

Xcmail 0.99.6 - Local Buffer Overflow / source: https://www.securityfocus.com/bid/311/info XCmail is an X11 mail client for linux. Arthur discovered an exploitable buffer overflow vulnerability in xcmail. The bug appears when replying to a message with a long subject line, and only when autoquote...

Ipswitch IMail 5.0 - IMonitor Buffer Overflow (Denial of Service) (PoC)

Ipswitch IMail 5.0 - IMonitor Buffer Overflow Denial of Service PoC source: https://www.securityfocus.com/bid/504/info The IMail IMonitor service can be crashed by exploiting a buffer overflow vulnerability. Telnet to target machine, port 8181 Send: glob1 hit enter twice Where glob1 is 2045...

Ipswitch IMail 5.0 - IMonitor Buffer Overflow (Denial of Service) (PoC)

source: https://www.securityfocus.com/bid/504/info The IMail IMonitor service can be crashed by exploiting a buffer overflow vulnerability. Telnet to target machine, port 8181 Send: glob1 hit enter twice Where glob1 is 2045 characters...

Qbik WinGate 3.0Pro 4.0.1Standard 4.0.1 - Buffer Overflow (Denial of Service) (PoC)

Qbik WinGate 3.0Pro 4.0.1Standard 4.0.1 - Buffer Overflow Denial of Service PoC source: https://www.securityfocus.com/bid/509/info WinGate's Winsock redirector service is susceptible to a buffer overflow vilnerability that will crash all WinGate services. !/usr/bin/python Qbik Wingate 3.0 DoS Pro...

CVE-1999-0798

Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type...

[SECURITY] New version of zgv fixes buffer overflows

We have received reports that the zgv package is vulnerable to buffer overflows. We recommend you upgrade your zgv package immediately. wget url will fetch the file for you dpkg -i file.deb will install the referenced file. Debian GNU/Linux 2.0 alias hamm This version of Debian was released only...

[SECURITY] New versions of bash fixes buffer overflows

We have received reports that the bash shell had a problem with very long pathnames. When a very long path was encountered bash failed to check the result of getcwd in all places, which could be exploited. We recommend you upgrade your bash package immediately. wget url will fetch the file for yo...

CVE-1999-0102

Buffer overflow in SLmail 3.x allows attackers to execute commands using a large FROM line...

Qualcomm qpopper 2.4 - POP Server Buffer Overflow (2)

Qualcomm qpopper 2.4 - POP Server Buffer Overflow 2 // source: https://www.securityfocus.com/bid/133/info A number of buffer-overflow issues reside in versions prior to 2.5 of Qualcomm's 'qpopper' program. Exploiting this issue allows a remote attacker to execute arbitrary commands on hosts that...

Solaris 7.0 - ufsdump Local Buffer Overflow (1)

Solaris 7.0 - ufsdump Local Buffer Overflow 1 // source: https://www.securityfocus.com/bid/680/info A buffer overflow vulnerability in the /usr/lib/fs/ufs/ufsdump setuid program allows local users to obtain root and tty group access. The vulnerability is the result of 'ufsdump' not being able to...

Solaris 7.0 - 'ufsdump' Local Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/680/info A buffer overflow vulnerability in the /usr/lib/fs/ufs/ufsdump setuid program allows local users to obtain root and tty group access. The vulnerability is the result of 'ufsdump' not being able to handle device names of a large length. /...

Microsoft Exchange Server 4.05.0 - SMTP HELO Argument Buffer Overflow

Microsoft Exchange Server 4.05.0 - SMTP HELO Argument Buffer Overflow // source: https://www.securityfocus.com/bid/8555/info It has been reported that Microsoft Exchange server is prone to an SMTP HELO command argument buffer overflow vulnerability. The issue presents itself likely due to...

Ipswitch Imail Server 5.0 - SMTP HELO Argument Buffer Overflow

// source: https://www.securityfocus.com/bid/8621/info It has been reported that Ipswitch IMail server is prone to an SMTP HELO command argument buffer overflow vulnerability. The issue presents itself likely due to insufficient bounds checking performed when handling malicious SMTP HELO command...

CVE-1999-0125

Buffer overflow in SGI IRIX mailx program...

Linux Kernel 2.02.0.33 - i_count Overflow (PoC)

Linux Kernel 2.02.0.33 - icount Overflow PoC / source: https://www.securityfocus.com/bid/388/info The icount member in the Linux inode structure is an unsigned short integer. It can be overflowed by mapping a single file too many times, allowing for a local user to possibly gain root access on th...

Solaris 2.4 passwd / yppasswd / nispasswd - Local Overflow

---------------------------- file newpass.c ------------------------------- include include define hiddenpasswd "/bin/hpasswd" /change here .../ define MAXLENGTH 32 void mainint argc, char argv int i; char args10; ifargc MAXLENGTH printf"You reached the maximum length in args\n"; exit0; else...

SGI IRIX 6.4 - Permissions Buffer Overflow

SGI IRIX 6.4 - Permissions Buffer Overflow // source: https://www.securityfocus.com/bid/417/info A buffer overrun exists in the permissions program, as shipped by Silicon Graphics with the 5.x and 6.x Irix operating system. By supplying a long, well crafted buffer as the 4th argument to the...

Solaris 2.5.1 - 'chkey' Local Privilege Escalation

/ source: https://www.securityfocus.com/bid/207/info The chkey program is used to change a users secure RPC Diffie-Hellman public key and secret key pair. A buffer overflow condition has been found in the chkey program. Since chkey has setuid root permissions, an unauthorized user may be able to...