CVE-2003-0774

saned in sane-backends 1.0.7 and earlier does not quickly handle connection drops, which allows remote attackers to cause a denial of service segmentation fault when invalid memory is accessed...

DSA-379 sane-backends - several vulnerabilities

Bulletin has no description...

CVE-2003-0689

The getgrouplist function in GNU libc glibc 2.2.4 and earlier allows attackers to cause a denial of service segmentation fault and execute arbitrary code when a user is a member of a large number of groups, which can cause a buffer overflow...

CVE-2003-0689

The getgrouplist function in GNU libc glibc 2.2.4 and earlier allows attackers to cause a denial of service segmentation fault and execute arbitrary code when a user is a member of a large number of groups, which can cause a buffer overflow...

[SECURITY] [DSA-364-3] New man-db packages fix segmentation fault

-------------------------------------------------------------------------- Debian Security Advisory DSA 364-3 [email protected] http://www.debian.org/security/ Matt Zimmerman August 18th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-364-2] New man-db packages fix problem with DSA-364-1

-------------------------------------------------------------------------- Debian Security Advisory DSA 364-2 [email protected] http://www.debian.org/security/ Matt Zimmerman August 8th, 2003 http://www.debian.org/security/faq -...

ManDB Utility 2.32.4 - Local Buffer Overflow

ManDB Utility 2.32.4 - Local Buffer Overflow source: https://www.securityfocus.com/bid/8303/info The mandb utility has been reported to be affected by multiple local buffer overflow vulnerabilities. These issues present themselves due to insufficient bounds checking performed on user-supplied dat...

ManDB Utility 2.3/2.4 - Local Buffer Overflow

source: https://www.securityfocus.com/bid/8303/info The mandb utility has been reported to be affected by multiple local buffer overflow vulnerabilities. These issues present themselves due to insufficient bounds checking performed on user-supplied data before it is copied into reserved buffers i...

IBM U2 UniVerse 10.0.0.9 - UVADMSH Buffer Overflow

IBM U2 UniVerse 10.0.0.9 - UVADMSH Buffer Overflow source: https://www.securityfocus.com/bid/8209/info Under certain configurations, UniVerse allows the 'uvadm' user to perform certain administration tasks for the software. It has been reported that the uvadmsh binary does not perform bounds...

[Full-Disclosure] Bahamut IRCd <= 1.4.35 and several derived daemons

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ========================================================================== 0xbadc0ded Advisory 01 - 2003/06/26 - Bahamut IRCd = 1.4.35 and others ========================================================================== Reference...

MyServer 0.4.1 - Remote Denial of Service

source: https://www.securityfocus.com/bid/8010/info MyServer HTTP server has been reported prone to a remote denial of service attack. The issue presents itself, likely due to a lack of sufficient bounds checking, performed on arguments that are supplied via malicious HTTP GET requests. It has be...

MyServer 0.4.1 - Remote Denial of Service

MyServer 0.4.1 - Remote Denial of Service source: https://www.securityfocus.com/bid/8010/info MyServer HTTP server has been reported prone to a remote denial of service attack. The issue presents itself, likely due to a lack of sufficient bounds checking, performed on arguments that are supplied...

CVE-2002-1565

CVE-2002-1565: GNU Wget 1.8.1 contains a buffer overflow in the url_filename function that can cause a segmentation fault and may allow arbitrary code execution via a very long URL. Debian and Red Hat advisories confirm fixes (upgraded wget packages) to mitigate the issue; Conectiva also issued u...

possible remote buffer overflow in atftpd

Hello, There is possible remote buffer overflow in atftpd. It has to do with length of filename which client sends to atftpd server. If you send filename over 253 bytes, it crashes with segfault. When I attach to process with gdb I can see it trying to run instruction from EIP 0x41414141. That ca...

HP-UX 11.0 /usr/lbin/rwrite

Hi! There is a vulnerability in /usr/lbin/rwrite on HP-UX 11.0 other versions might be vulnerable too. /usr/lbin/rwrite is installed setuid to root by default. $ /usr/lbin/rwrite something perl -e 'print "A" x 14628' something Segmentation fault Solution : remove setuid bit until patch is...

Sendmail 8.12.8 (BSD) - 'Prescan()' Remote Command Execution

/ Sendmail 8.12.8 prescan PROOF OF CONCEPT exploit by bysin This is to prove that the bug in sendmail 8.12.8 and below is vulnerable. On sucessful POC exploitation the program should crash with the following: Program received signal SIGSEGV, Segmentation fault. 0x5c5c5c5c in ?? / include include...

Sendmail <= 8.12.8 prescan() BSD Remote Root Exploit

Exploit for linux platform in category remote exploits ==================================================== Sendmail include include include include include include include include int maxarch=1; struct arch char os; // The OS int pos; // The position of ebp in the stack, with the last byte being...

Sendmail 8.12.8 (BSD) - Prescan() Remote Command Execution

Sendmail 8.12.8 BSD - Prescan Remote Command Execution / Sendmail 8.12.8 prescan PROOF OF CONCEPT exploit by bysin This is to prove that the bug in sendmail 8.12.8 and below is vulnerable. On sucessful POC exploitation the program should crash with the following: Program received signal SIGSEGV,...

@&#40;#&#41;Mordred Labs advisory - Integer overflow in PHP socket_iovec_alloc&#40;&#41; function

//@ Mordred Security Labs advisory Release date: March 25, 2003 Name: Integer overflow in PHP socketiovecalloc function Versions affected: 4.3.2 Conditions: PHP must be compiled with --enable-sockets option, which is turned off by default Risk: average Author: Sir Mordred [email protected] I...

XFree86 4.2 - 'XLOCALEDIR' Local Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/7002/info Several XFree86 utilities may be prone to a buffer overflow condition. The vulnerability exists due to insufficient boundary checks performed by these utilities when referencing the XLOCALEDIR environment variable. A local attacker can exploi...