CVE-2002-1548: Undefined Security Weakness

Unknown vulnerability in autofs on AIX 4.3.0, when using executable maps, allows attackers to execute arbitrary commands as root, possibly related to "string handling around how the executable map is called."...

CVE-2001-0825: Undefined Security Weakness

Buffer overflow in internal string handling routines of xinetd before 2.1.8.8 allows remote attackers to execute arbitrary commands via a length argument of zero or less, which disables the length check...

CVE-2003-0432

Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the 1 BGP, 2 WTP, 3 DNS, 4 802.11, 5 ISAKMP, 6 WSP, 7 CLNP, 8 ISIS, and 9 RMI dissectors...

Proxomitron Proxy Server - GET Remote Denial of Service

Proxomitron Proxy Server - GET Remote Denial of Service source: https://www.securityfocus.com/bid/7954/info It has been reported that Proxomitron does not properly handle some string types. Because of this, an attacker can cause the server to become unstable and crash. GET /../..0%%../ 4504 chars...

Proxomitron Proxy Server - GET Remote Denial of Service

source: https://www.securityfocus.com/bid/7954/info It has been reported that Proxomitron does not properly handle some string types. Because of this, an attacker can cause the server to become unstable and crash. GET /../..0%%../ 4504 chars GET ......\ 4504 chars...

CVE-2001-0825

Buffer overflow in internal string handling routines of xinetd before 2.1.8.8 allows remote attackers to execute arbitrary commands via a length argument of zero or less, which disables the length check...

xinetd 2.3.0 audit status

Hi, As some of you may know, I've performed an audit of the xinetd 2.3.0 source code for certain classes of vulnerabilities. The audit has resulted in a significant number of fixes many are for non-security issues. The patch was over 100 KB large and got incorporated into xinetd starting with...

suid scotty / ntping overflow

here is the offending code and the attached letter has the general information for this issue. in /home/d0tslash/scotty-2.1.0/tnm/ntping/ntping.c char hname; / hostname / ... else char tmp 512; struct hostent hp; strcpy tmp, hname; ifdef HAVERES / try to spend no longer than some seconds: /...