PT-2003-2006 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions prior to 0.10.0 Description: The issue allows remote attackers to cause a denial of service via a malformed SMB packet. This occurs when the SMB dissector triggers a segmentation fault during the processing of Selected...

Bug in libXcursor , is it exploitable?

INTRO: ------------------------------------------------------------------ off-by-one bug in libXcursor that shows up when $HOME does not start with a '/'. THE QUESTION: ------------------------------------------------------------------ Could this bug compromise a system? In what cases? TEST:...

CVE-2003-1139

Musicqueue 1.2.0 allows local users to overwrite arbitrary files by triggering a segmentation fault and using a symlink attack on the resulting musicqueue.crash file...

CVE-2003-0689

The getgrouplist function in GNU libc glibc 2.2.4 and earlier allows attackers to cause a denial of service segmentation fault and execute arbitrary code when a user is a member of a large number of groups, which can cause a buffer overflow...

CVE-2003-0777

saned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not properly handle dropped connections, which can prevent strings from being null terminated and cause a denial of service segmentation fault...

CVE-2003-0777

saned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not properly handle dropped connections, which can prevent strings from being null terminated and cause a denial of service segmentation fault...

CVE-2003-0774

saned in sane-backends 1.0.7 and earlier does not quickly handle connection drops, which allows remote attackers to cause a denial of service segmentation fault when invalid memory is accessed...

CVE-2003-0777

saned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not properly handle dropped connections, which can prevent strings from being null terminated and cause a denial of service segmentation fault...

CVE-2003-0777

saned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not properly handle dropped connections, which can prevent strings from being null terminated and cause a denial of service segmentation fault...

CVE-2003-0774

saned in sane-backends 1.0.7 and earlier does not quickly handle connection drops, which allows remote attackers to cause a denial of service segmentation fault when invalid memory is accessed...

CVE-2003-0774

saned in sane-backends 1.0.7 and earlier does not quickly handle connection drops, which allows remote attackers to cause a denial of service segmentation fault when invalid memory is accessed...

CVE-2003-0774: Undefined Security Weakness

saned in sane-backends 1.0.7 and earlier does not quickly handle connection drops, which allows remote attackers to cause a denial of service segmentation fault when invalid memory is accessed...

CVE-2003-0777: Undefined Security Weakness

saned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not properly handle dropped connections, which can prevent strings from being null terminated and cause a denial of service segmentation fault...

DSA-379 sane-backends - several vulnerabilities

Bulletin has no description...

CVE-2003-0689

The getgrouplist function in GNU libc glibc 2.2.4 and earlier allows attackers to cause a denial of service segmentation fault and execute arbitrary code when a user is a member of a large number of groups, which can cause a buffer overflow...

CVE-2003-0689

The getgrouplist function in GNU libc glibc 2.2.4 and earlier allows attackers to cause a denial of service segmentation fault and execute arbitrary code when a user is a member of a large number of groups, which can cause a buffer overflow...

[SECURITY] [DSA-364-3] New man-db packages fix segmentation fault

-------------------------------------------------------------------------- Debian Security Advisory DSA 364-3 [email protected] http://www.debian.org/security/ Matt Zimmerman August 18th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-364-2] New man-db packages fix problem with DSA-364-1

-------------------------------------------------------------------------- Debian Security Advisory DSA 364-2 [email protected] http://www.debian.org/security/ Matt Zimmerman August 8th, 2003 http://www.debian.org/security/faq -...

ManDB Utility 2.32.4 - Local Buffer Overflow

ManDB Utility 2.32.4 - Local Buffer Overflow source: https://www.securityfocus.com/bid/8303/info The mandb utility has been reported to be affected by multiple local buffer overflow vulnerabilities. These issues present themselves due to insufficient bounds checking performed on user-supplied dat...

ManDB Utility 2.3/2.4 - Local Buffer Overflow

source: https://www.securityfocus.com/bid/8303/info The mandb utility has been reported to be affected by multiple local buffer overflow vulnerabilities. These issues present themselves due to insufficient bounds checking performed on user-supplied data before it is copied into reserved buffers i...