315 matches found
Format String Bug in Posadis DNS Server
Date: Mar 27 02 Me: kkr [email protected] Software: Posadis DNS Server http://sourceforge.net/projects/posadis/ Ver: m5pre1 Bug: bad fmt string usage in log function, may lead to remote access Word Life: the warez dude Overview: Posadis dns server is a small dns server without cache or resolving...
AOL Instant Messenger 4.x - Remote Buffer Overflow
source: https://www.securityfocus.com/bid/3769/info AOL Instant Messenger AIM is a real time messaging service. The vulnerability exists in the way that AIM parses a game request with a TLV type, length, value type of 0x2711. This type of game request is prone to a buffer overflow which could all...
Lynx format string vulnerability in URL logging.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The vendor has been notified, but since this is a low risk I am releasing early. Vapid Labs Larry W. Cashdollar Bug Report Summary: lynx has a format string vulnerability in LYUtils.c line 7995 due to a bad call to syslog, where the format argument is...
Серьезная дырка воо всех утилитах семейства chpass
Утилиты chfn/chpass/chsh/ypchfn/ypchpass/ypchsh/passwd содержат уязвимость форматной строки...
CVE-2000-0534
The CVE-2000-0534 issue affects the apsfilter component in the FreeBSD ports package , where it does not properly read user filter configurations , enabling a local user to execute commands as the lpd user . The connected documents provide the vulnerability description and impact but do not inclu...
Еще одна дырка в Internet Explorer
Функция window.external.NavigateAndFind позволяет обращаться к локальным и удаленным документам...
Netauth: Web Based Email Management System
This is just a quick note of a simple hole in the Netauth system. What is Netauth? Netauth is a web based eMail management system for Windows NT and most Unix platforms. What is the hole? The nethauth.cgi file http://server/cgi-bin/netauth.cgi?cmd=show&page=../../../../../../../../.. /etc/passwd...
