1959 matches found
CVE-2000-0583: Undefined Security Weakness
vchkpw program in vpopmail before version 4.8 does not properly cleanse an untrusted format string used in a call to syslog, which allows remote attackers to cause a denial of service via a USER or PASS command that contains arbitrary formatting directives...
Format strings: bug #2: LPRng
Hi, SUMMARY ------- LPRng is almost certainly vulnerable to remote-root compromise on account of a format string bug. The flaw is almost identical to the rpc.statd one I found; namely a faulty syslog wrapper. This is becoming a very common flaw. Details ------- Here is a code excerpt from:...
Format strings: bug #1: BSD-lpr
Hi, INTRO ----- Welcome to a short series of security bugs, all involving mistakes with "user supplied format strings". This class of bug is very popular on Bugtraq at the moment, so what an ideal time for a few examples. BSD-lpr ------- If we look into lpr/lpd/printjob.c, we can find the followi...
irix.telnetd.txt
We've found a very severe vulnerability in the IRIX telnetd service that upon successful exploitation can give remote root access to any IRIX 6.2-6.5.8m,f system. The bug discussed here appeared in IRIX 5.2-6.1 systems and was the result of SGI efforts to patch a security vulnerability reported b...
Conectiva 4.x/5.x / Debian 2.x / RedHat 6.x / S.u.S.E 6.x/7.0 / Trustix 1.x - rpc.statd Remote Format String (2)
// source: https://www.securityfocus.com/bid/1480/info A vulnerability exists in the 'rpc.statd' program, which is part of the 'nfs-utils' package that is shipped with a number of popular Linux distributions. Because of a format-string vulnerability when calling the 'syslog' function, a remote...
CVE-2000-0583
vchkpw program in vpopmail before version 4.8 does not properly cleanse an untrusted format string used in a call to syslog, which allows remote attackers to cause a denial of service via a USER or PASS command that contains arbitrary formatting directives...
PT-2000-1517 · Vpopmail · Vpopmail
Name of the Vulnerable Software and Affected Versions: vpopmail versions prior to 4.8 Description: The issue is related to the vchkpw program in vpopmail, which does not properly cleanse an untrusted format string used in a call to syslog. This allows remote attackers to cause a denial of service...
fcheck.txt
The short explanation: fcheck is a file integrity checker written in perl. It can send warnings to syslog via an external program such as logger1. Because it calls system with a scalar argument, a malicious user can cause it to execute programs by creating files with shell metacharacters in their...
CVE-1999-0171
Denial of service in syslog by sending it a large number of superfluous messages...
CVE-1999-0171
The CVE-1999-0171 issue is described in multiple connected sources as a denial-of-service in syslogd (notably on IRIX). SGI’s advisory attributes a buffer overrun in the syslogd binary that can crash the service, potentially enabling remote exploitation and DoS. The advisory states this vulnerabi...
CVE-1999-0381
super 3.11.6 and other versions have a buffer overflow in the syslog utility which allows a local user to gain root access...
CVE-1999-0171: Undefined Security Weakness
Denial of service in syslog by sending it a large number of superfluous messages...
CVE-1999-0381: Undefined Security Weakness
super 3.11.6 and other versions have a buffer overflow in the syslog utility which allows a local user to gain root access...
CVE-1999-0566
Affected software: SGI IRIX syslogd (remote logging daemon). Root cause / vulnerability type: remote buffer overflow in syslogd that can be triggered to crash or potentially execute code. Impact: denial of service (crash) and possible arbitrary code execution with syslogd privileges. Exploitation...
CVE-1999-0099
CVE-1999-0099 is a vulnerability in the syslog utility described as a buffer overflow that can allow local or remote attackers to gain root privileges. The connected sources (NVD, Red Hat CVE page, CVE list, EUVD/PTSecurity notes) corroborate the issue but do not consistently provide concrete det...
CVE-1999-0099
Buffer overflow in syslog utility allows local or remote attackers to gain root privileges...
CVE-1999-0063
Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port...
EUVD-1999-0063
Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port...