CVE-2006-1830

Sun Java Studio Enterprise 8 is affected by CVE-2006-1830: when installed as root it creates certain files with world-writable permissions, enabling local users to execute arbitrary commands via unspecified vectors. The NVD entry documents this behavior and impact, with low base score (0.7) on CV...

[SA19632] Sun Java Studio Enterprise Insecure File Permissions

TITLE: Sun Java Studio Enterprise Insecure File Permissions SECUNIA ADVISORY ID: SA19632 VERIFY ADVISORY: http://secunia.com/advisories/19632/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Sun Java Studio Enterprise 8.x http://secunia.com/product/9354/...

Sun Java Studio Enterprise weak file permissions

Some files are installed world-writable...

Jabber Studio jabberd SASL Negotiation Remote DoS

The remote host is running jabberd, an open source messaging system based on the Jabber protocol. The version of jabberd installed on the remote host suffers a segfault when a client sends a SASL 'response' stanza before a SASL 'auth' stanza. An unauthenticated, remote attacker can leverage this...

CVE-2006-1329

The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service "c2s segfault" by sending a "response stanza before an auth stanza"...

Code injection

The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service "c2s segfault" by sending a "response stanza before an auth stanza"...

CVE-2006-1329

The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service "c2s segfault" by sending a "response stanza before an auth stanza"...

CVE-2006-1329

CVE-2006-1329 affects the Jabberd server used with Jabber Studio. The vulnerability is in the SASL negotiation: a remote attacker can trigger a denial of service by sending a lack of proper authentication flow, causing a segfault in the c2s path when a response stanza is received before auth. The...

CVE-2006-1329

The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service "c2s segfault" by sending a "response stanza before an auth stanza"...

CVE-2006-1329

The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service "c2s segfault" by sending a "response stanza before an auth stanza"...

Stack overflow

Stack-based buffer overflow in Microsoft Visual Studio 6.0 and Microsoft Visual InterDev 6.0 allows user-assisted attackers to execute arbitrary code via a long DataProject field in a 1 Visual Studio Database Project File .dbp or 2 Visual Studio Solution .sln...

CVE-2006-1043

Stack-based buffer overflow in Microsoft Visual Studio 6.0 and Microsoft Visual InterDev 6.0 allows user-assisted attackers to execute arbitrary code via a long DataProject field in a 1 Visual Studio Database Project File .dbp or 2 Visual Studio Solution .sln...

CVE-2006-1043

Stack-based buffer overflow in Microsoft Visual Studio 6.0 and Microsoft Visual InterDev 6.0 allows user-assisted attackers to execute arbitrary code via a long DataProject field in a 1 Visual Studio Database Project File .dbp or 2 Visual Studio Solution .sln...

CVE-2006-1043

CVE-2006-1043: A stack-based buffer overflow in Microsoft Visual Studio 6.0 and Visual InterDev 6.0 occurs when processing overly long DataProject fields in .dbp or .sln files. Root cause is improper boundary checks for long project name strings in Database Project (.dbp) and Solution (.sln) file...

Microsoft Visual Studio .dbp and .sln buffer overflow

Added: 03/07/2006 CVE: CVE-2006-1043 BID: 16953 OSVDB: 23711 Background Microsoft Visual Studio is a product for facilitating software development on Windows operating systems. Problem A buffer overflow vulnerability leads to command execution when a specially crafted Database Project .dbp or...

Microsoft Visual Studio .dbp and .sln buffer overflow

Added: 03/07/2006 CVE: CVE-2006-1043 BID: 16953 OSVDB: 23711 Background Microsoft Visual Studio is a product for facilitating software development on Windows operating systems. Problem A buffer overflow vulnerability leads to command execution when a specially crafted Database Project .dbp or...

Microsoft Visual Studio .dbp and .sln buffer overflow

Added: 03/07/2006 CVE: CVE-2006-1043 BID: 16953 OSVDB: 23711 Background Microsoft Visual Studio is a product for facilitating software development on Windows operating systems. Problem A buffer overflow vulnerability leads to command execution when a specially crafted Database Project .dbp or...

Microsoft Visual Studio .dbp and .sln buffer overflow

Added: 03/07/2006 CVE: CVE-2006-1043 BID: 16953 OSVDB: 23711 Background Microsoft Visual Studio is a product for facilitating software development on Windows operating systems. Problem A buffer overflow vulnerability leads to command execution when a specially crafted Database Project .dbp or...

Microsoft Visual Studio 6.0 sp6 - .dbp Local Buffer Overflow

Microsoft Visual Studio 6.0 sp6 - .dbp Local Buffer Overflow / Microsoft Visual Studio 6.0 Sp6 Malformed .dbp File BoF Exploit by Kozan Bug Discovered and Exploit Coded by: Kozan Credits to ATmaCA Web: www.spyinstructors.com Mail: [email protected] Affected Vendor: Microsoft...

MS Visual Studio 6.0 sp6 (Malformed .dbp File) Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ====================================================================== MS Visual Studio 6.0 sp6 Malformed .dbp File Buffer Overflow Exploit ====================================================================== / Microsoft Visual Studio 6.0...