ed: Heap-based buffer overflow (arb. code execution)

Heap-based buffer overflow in the stripescapes function in signal.c in GNU ed before 1.0 allows context-dependent or user-assisted attackers to execute arbitrary code via a long filename. NOTE: since ed itself does not typically run with special privileges, this issue only crosses privilege...

PT-2007-6681 · Digium · Asterisk Zaptel

Name of the Vulnerable Software and Affected Versions: Asterisk Zaptel version 1.4.5.1 Description: The issue is related to a buffer overflow in the sethdlc.c file, potentially allowing local users to gain privileges via a long device name in the ifr name field. However, the vendor disputes this,...

CVE-2007-4004

CVE-2007-4004 affects the IBM AIX ftp client (bundled with AIX 5.3 SP6 and 5.2.0). A local buffer overflow in the ftp client occurs from gets() calls, and because the ftp client runs setuid root, an unprivileged local user can exploit it to execute arbitrary code with root privileges. Public advi...

CVE-2007-3659

CVE-2007-3659 affects FreeWRL 1.19.3. A buffer overflow in the doBrowserAction function can be triggered by a crafted BROWSER environment variable, potentially allowing local code execution. The public descriptions note it is not clear whether the issue crosses privilege boundaries. The Connected...

CVE-2006-5824

Integer overflow in the ffsrdextattr function in FreeBSD 6.1 allows local users to cause a denial of service kernel panic and trigger a heap-based buffer overflow via a crafted UFS filesystem, a different vulnerability than CVE-2006-5679. NOTE: a third party states that this issue does not cross...