1879 matches found
Gaim 1.2.1 - URL Handling Remote Stack Overflow
Gaim 1.2.1 - URL Handling Remote Stack Overflow // Written by Ron // Friday, May 13, 2005 // // This is a very weak demonstration of Gaim 1.2.1's stack overflow vulnerability // when processing email addresses. What this basically does is segfault you when you // do a /vuln command in a...
Moderate: Red Hat Security Advisory: XFree86 security update
Updated XFree86 packages that fix a libXpm integer overflow flaw and a number of bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. XFree86 is an open source implementation of the X Window System. It provides the basic low...
Low: Red Hat Security Advisory: postfix security update
Updated postfix packages that include a security fix and two other bug fixes are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team Postfix is a Mail Transport Agent MTA, supporting LDAP, SMTP AUTH SASL, and...
[ANNOUNCE] Apache HTTP Server 2.0.51 Released
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Apache Software Foundation and the The Apache HTTP Server Project are pleased to announce the release of version 2.0.51 of the Apache HTTP Server "Apache". This Announcement notes the significant changes in 2.0.51 as compared to 2.0.50. This versi...
GLSA-200403-12 : OpenLDAP DoS Vulnerability
The remote host is affected by the vulnerability described in GLSA-200403-12 OpenLDAP DoS Vulnerability A password extended operation password EXOP which fails will cause the slapd server to free an uninitialized pointer, possibly resulting in a segfault. This only affects servers using the...
apache2 -- SSL remote DoS
The Apache HTTP Server 2.0.51 release notes report that the following issues have been fixed: A segfault in modssl which can be triggered by a malicious remote server, if proxying to SSL servers has been configured. CAN-2004-0751 A potential infinite loop in modssl which could be triggered given...
OpenLinux: Multiple vulnerabilities have reported in Ethereal 0.9.12
To: [email protected] [email protected] [email protected] [email protected] -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SCO Security Advisory Subject: OpenLinux: Multiple vulnerabilities have reported in Ethereal 0.9.12 Advisory number:...
fetchmail -- denial-of-service vulnerability
Dave Jones discovered a denial-of-service vulnerability in fetchmail. An email message containing a very long line could cause fetchmail to segfault due to missing NUL termination in transact.c. Eric Raymond decided not to mention this issue in the release notes for fetchmail 6.2.5, but it was...
[SECURITY] [DSA 379-1] New sane-backends packages fix several vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 379-1 [email protected] http://www.debian.org/security/ Martin Schulze September 11th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA 379-1] New sane-backends packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 379-1 [email protected] http://www.debian.org/security/ Martin Schulze September 11th, 2003 http://www.debian.org/security/faq -...
0x333-lockdexvul.txt
0x333 OUTSIDERS SECURITY LABS - - www.0x333.org - lockdev in redhat 7.3 ,8.0 ,9.0 possible all linux os has Segmentation fault contents 0x0 Info 0x1 Description 0x2 Vulnerable code 0x3 Debug session 0x4 Exploit 0x0 Info Author : nic Email : [email protected] Date : 28 July 2003 Advisory :...
Apache Mod_Access_Referer 1.0.2 - Null Pointer Dereference Denial of Service
source: https://www.securityfocus.com/bid/7375/info A vulnerability has been reported for the modaccessreferer Apache module. The problem occurs when parsing invalid HTTP referer header fields. If this vulnerability were to be triggered, it may be possible to trigger a NULL pointer dereference,...
Security fix for the ALT Linux 10 package apache2 version 2.0.40-9
Oct. 2, 2002 Joe Orton &[email protected] 2.0.40-9 - security fixes for CAN-2002-0840 and CAN-2002-0843 - fix for possible moddav segfault for certain requests...
wwwoffle-2.7b and prior segfaults with negative Content-Length value
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 QITEST1 SECURITY ADVISORY 005 wwwoffle-2.7b and prior segfaults with negative Content-Length value PROGRAM DESCRIPTION WWWOFFLE, World Wide Web Offline Explorer, is a proxy HTTP/FTP server for computers with dial-up internet access. DETAILS When...
traceroute-4.4BSD (slack) heap overflow
Hi, A while ago I was studying the source code for this traceroute... I found this in the inetname function: ... static char line50; ... if cp void strcpyline, cp; else ... The cp variable holds at that point the hostname for the current host it's tracing. If the hostname is something like a litt...
format string in ssl dump
Sorry if this has already got posted. Seeweed found this in ssldump the other day. The follwoing text is from his website http://dropwire.dhs.org/seeweed/: SSLDUMP is a program witch is simallar to tcpdump, but also adds encryption to its network debugging procedures..It captures traffic then...
BitchX /ignore bug
I don't know whether this is the right place to put it, but i'm going to anyway : Because of a simple /invite nickname sssssssss, BitchX will segfault and coredump. This is a small programming error, you can find a patch at this location: http://root66.org/karin/BitchX-bug-patch-3-juli-2000.tar.g...
2.2.12.execve.txt
From: [email protected] Subject: execve bug linux-2.2.12 While doing some debugging, I discovered a really nasty stack smash bug in linux-2.2.12. The I haven't checked previous versions of the 2.2 kernel but bug appears to be fixed in linux-2.2.13pre17. If I am reading this correctly, the...
