rsync: Two buffer overflows

Background rsync is a file transfer program to keep remote directories synchronized. Description Sebastian Krahmer from the SUSE Security Team discovered two off-by-one errors in the function "fname" in file sender.c when processing overly long directory names. Impact A remote attacker could enti...

tcpdump: Integer overflow

Background tcpdump is a tool for capturing and inspecting network traffic. Description mu-b from Digital Labs discovered that the return value of a snprintf call is not properly checked before being used. This could lead to an integer overflow. Impact A remote attacker could send specially crafte...

PT-2007-1107 · Tcpdump +1 · Tcpdump +1

Name of the Vulnerable Software and Affected Versions: tcpdump versions 3.9.6 and earlier tcpdump versions prior to 3.9.5-r3 Description: The issue is related to an integer overflow in the BGP dissector in tcpdump, which allows remote attackers to execute arbitrary code via crafted TLVs in a BGP...

CVE-2007-2522: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the inoweb Console Server in CA Anti-Virus for the Enterprise r8, Threat Manager r8, Anti-Spyware for the Enterprise r8, and Protection Suites r3 allows remote attackers to execute arbitrary code via a long 1 username or 2 password...

CVE-2006-3078

Multiple SQL injection vulnerabilities in APBoard 2.2-r3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 PHPSESSID parameter in board.php and 2 viewcatmod parameter in main.php...

CVE-2006-3078

CVE-2006-3078 describes multiple SQL injection vulnerabilities in APBoard 2.2-r3 and earlier . Attackers can remotely execute arbitrary SQL commands via the PHPSESSID parameter in board.php and the viewcatmod parameter in main.php . The connected documents confirm these vectors and the affected s...

CVE-2005-3694

centericq 4.20.0-r3 with "Enable peer-to-peer communications" set allows remote attackers to cause a denial of service segmentation fault and crash via short zero-length packets, and possibly packets of length 1 or 2, as demonstrated using Nessus...

Qpopper: Multiple Vulnerabilities

Background Qpopper is a widely used server for the POP3 protocol. Description Jens Steube discovered that Qpopper doesn't drop privileges to process local files from normal users CAN-2005-1151. The upstream developers discovered that Qpopper can be forced to create group or world writeable files...

CVE-2005-1109

CVE-2005-1109 affects JunkBuster (before 2.0.2-r3): the URL filtering fails, allowing remote attackers to cause an application crash (DoS) and possibly execute arbitrary code via heap corruption. Remediation: upgrade to 2.0.2-r3 or later, per public descriptions. Exploitation details are not prov...

Hydra: SAP R3

This plugin runs Hydra to find SAP R3 accounts and passwords by brute force. To use this plugin, enter the 'Logins file' and the 'Passwords file' under the 'Hydra NASL wrappers options' advanced settings block. TRUSTED...