CVE-2008-5105

Sami FTP Server 2.0.x is vulnerable to remote denial of service through multiple FTP commands, including MKD, APPE, CWD, DELE, RMD, RETR, RNFR, RNTO, SIZE, and STOR. OpenVAS entries describe a buffer overflow specifically for the MKD command and a general remote DoS condition, while the NVD entry...

CVE-2008-5105

KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service daemon crash or hang via certain 1 APPE, 2 CWD, 3 DELE, 4 MKD, 5 RMD, 6 RETR, 7 RNFR, 8 RNTO, 9 SIZE, and 10 STOR commands...

CVE-2008-5106

CVE-2008-5106 is a buffer overflow in KarjaSoft Sami FTP Server 2.0.x that allows a remote attacker to crash the daemon and potentially execute arbitrary code by sending a long argument to an FTP command. The overflow is triggered when the SamyFtp.binlog log file is viewed in the management conso...

CVE-2008-5106

Buffer overflow in KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via a long argument to an arbitrary command, which triggers the overflow when the SamyFtp.binlog log file is viewed in the management console...

CVE-2008-5105: Improper Input Validation

KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service daemon crash or hang via certain 1 APPE, 2 CWD, 3 DELE, 4 MKD, 5 RMD, 6 RETR, 7 RNFR, 8 RNTO, 9 SIZE, and 10 STOR commands...

CVE-2008-5106: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via a long argument to an arbitrary command, which triggers the overflow when the SamyFtp.binlog log file is viewed in the management console...

Vulnerabilities in DirectX Could Allow Remote Code Execution (951698)

This host has DirectX installed, which is prone to remote code execution vulnerabilities. OpenVAS Vulnerability Test $Id: gbms08-033.nasl 5863 2017-04-05 07:38:11Z antu123 $ Vulnerabilities in DirectX Could Allow Remote Code Execution 951698 Authors: Veerendra GG Updated by Madhuri D on 2010-12-0...

Stack overflow

Stack-based buffer overflow in Microsoft DirectX 7.0 and 8.1 on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a Synchronized Accessible Media Interchange SAMI file with crafted parameters for a Class Name variable, aka the "SAMI Format Parsing Vulnerability."...

CVE-2008-1444

Stack-based buffer overflow in Microsoft DirectX 7.0 and 8.1 on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a Synchronized Accessible Media Interchange SAMI file with crafted parameters for a Class Name variable, aka the "SAMI Format Parsing Vulnerability."...

CVE-2008-1444

CVE-2008-1444 is a DirectX SAMI Format Parsing Vulnerability affecting Microsoft DirectX 7.0 and 8.1 on Windows 2000 SP4. The issue is a stack-based buffer overflow in the SAMI file parser (Class Name parameter) that can enable remote code execution when a user opens a crafted SAMI file. OpenVAS ...

Microsoft DirectX SAMI文件及MJPEG视频流解析栈溢出漏洞（MS08-032）

BUGTRAQ ID: 29581,29578 CVECAN ID: CVE-2008-0011,CVE-2008-1444 Microsoft DirectX是Windows操作系统中的一项功能，流媒体在玩游戏或观看视频时通过这个功能支持图形和声音。 DirectX在解析SAMI文件中的Class Name变量属性参数时存在栈溢出漏洞，Windows MJPEG Codec在解析ASF或AVI媒体文件中内嵌的MJPEG音频流时存在另一个栈溢出漏洞。如果用户受骗打开或预览了恶意的媒体文件的话，就可以触发这些溢出，导致执行任意指令。 Microsoft DirectX 9.0...

CVE-2008-1444: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Microsoft DirectX 7.0 and 8.1 on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a Synchronized Accessible Media Interchange SAMI file with crafted parameters for a Class Name variable, aka the "SAMI Format Parsing Vulnerability."...

Microsoft DirectX code execution

MJPEG format AVI and ASF files parsing vulnerability, SAMI files parsing vulnerability...

ZDI-08-040: Microsoft DirectX SAMI File Format Name Parsing Stack Overflow Vulnerability

ZDI-08-040: Microsoft DirectX SAMI File Format Name Parsing Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-040 -- CVE ID: CVE-2008-1444 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Windows 2000 SP4 -- TippingPointTM IPS Customer Protection:...

Microsoft DirectX SAMI File Parsing Stack Based Buffer Overflow Vulnerability

Description Microsoft DirectX is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. The vulnerability occurs when handling malformed SAMI files. Successfully exploiting this issue allows remote attackers to execute...

Microsoft Media Player SAMI Format Parsing Code Execution (MS08-033; CVE-2008-1444)

Microsoft Synchronized Accessible Media Interchange SAMI is designed to simplify creating captions for media playback on a PC. SAMI captions coexist with digital media as separate, simple text files. A remote code execution vulnerability has been identified in Microsoft Windows Media Player which...

Microsoft DirectX SAMI File Format Name Parsing Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the parsing of SAM...

Sami FTP Server 2.0.* Multiple Remote Vulnerabilities

Sami FTP Server 2.0. Multiple Remote Vulnerabilities Bugs : 1Multiples remote denial of service CWD,DELE,MKD,RMD,RETR,RNFR,RNTO,SIZE,STOR 2Remote Buffer overflow Logs Remote Denial of service: APPE A = server gone CWD AA = server gone DELE AA == server gone MKD AA == server gone RMD AA == server...

Sami FTP Server multiple security vulnerabilities

Multiple DoS conditions and buffer overflows...

samiftp-multi.txt

Sami FTP Server 2.0. Multiple Remote Vulnerabilities Bugs : 1Multiples remote denial of service CWD,DELE,MKD,RMD,RETR,RNFR,RNTO,SIZE,STOR 2Remote Buffer overflow Logs Remote Denial of service: APPE A = server gone CWD AA = server gone DELE AA == server gone MKD AA == server gone RMD AA == server...