17 matches found
EUVD-2008-1553
Malware in sbrugna...
EUVD-2003-1429
Malware in sbrugna...
EUVD-2008-1433
Malware in sbrugna...
EUVD-2005-2810
Malware in sbrugna...
EUVD-2009-3035
Malware in sbrugna...
Fedora Core 10 FEDORA-2009-9356 (libsilc)
The remote host is missing an update to libsilc announced via advisory FEDORA-2009-9356. OpenVAS Vulnerability Test $Id: fcore20099356.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9356 libsilc Authors: Thomas Reinke Copyright: Copyright c 2009...
CVE-2008-7159: Use of Externally-Controlled Format String
The silcasn1encoder function in lib/silcasn1/silcasn1encode.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.8 allows remote attackers to overwrite a stack location and possibly execute arbitrary code via a crafted OID value, related to incorrect use of a %lu format string...
CVE-2009-3163: Use of Externally-Controlled Format String
Multiple format string vulnerabilities in lib/silcclient/command.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.10, and SILC Client 1.1.8 and earlier, allow remote attackers to execute arbitrary code via format string specifiers in a channel name, related to 1...
CVE-2008-7160: Use of Externally-Controlled Format String
The silchttpserverparse function in lib/silchttp/silchttpserver.c in the internal HTTP server in silcd in Secure Internet Live Conferencing SILC Toolkit before 1.1.9 allows remote attackers to overwrite a stack location and possibly execute arbitrary code via a crafted Content-Length header,...
CVE-2009-3051: Use of Externally-Controlled Format String
Multiple format string vulnerabilities in lib/silcclient/cliententry.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.10, and SILC Client before 1.1.8, allow remote attackers to execute arbitrary code via format string specifiers in a nickname field, related to the 1...
CVE-2008-1552: Undefined Security Weakness
The silcpkcs1decode function in the silccrypt library silcpkcs1.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.7, SILC Client before 1.1.4, and SILC Server before 1.1.2 allows remote attackers to execute arbitrary code via a crafted PKCS1 message, which triggers an integer...
CVE-2008-1429: Undefined Security Weakness
Secure Internet Live Conferencing SILC Server before 1.1.1 allows remote attackers to cause a denial of service daemon crash via a NEWCLIENT packet without a nickname...
CVE-2008-1227: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in the silcfingerprint function in lib/silcutil/silcutil.c in Secure Internet Live Conferencing SILC Toolkit 1.1.5, and unspecified earlier versions, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via long input data. NOTE...
CVE-2003-1439: Undefined Security Weakness
Secure Internet Live Conferencing SILC 0.9.11 and 0.9.12 stores passwords and sessions in plaintext in memory, which could allow local users to obtain sensitive information...
SILC Server: Denial of service
Background SILC Server is a server for the Secure Internet Live Conferencing SILC protocol. Description Frank Benkstein discovered a possible NULL pointer dereference in apps/silcd/command.c if a new channel is created without specifying a valid hmac or cipher algorithm name. Impact A remote...
CVE-2005-2809: Undefined Security Weakness
silc daemon silcd.c in Secure Internet Live Conferencing SILC 1.0 and earlier allows local users to overwrite arbitrary files via a symlink attack on the silcd.PID.stats temporary file...
