938 matches found
SuSE 10 Security Update : Linux kernel (i386) (ZYPP Patch Number 2097)
This kernel update fixes the following security problems : - A double userspace copy in a SCTP ioctl allows local attackers to overflow a buffer in the kernel, potentially allowing code execution and privilege escalation. 199441. CVE-2006-3745 - Local attackers were able to crash PowerPC systems...
SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 2606)
This kernel update fixes the following security problems : - The ftdisio driver allowed local users to cause a denial of service memory consumption by writing more data to the serial port than the hardware can handle, which causes the data to be queued. This requires this driver to be loaded, whi...
EMC Legato Networker buffer overflow
Buffer overflow in SUNRPC TCP/111 Networker Remote Exec Service...
ZDI-07-049: EMC Legato Networker Remote Exec Service Stack Overflow Vulnerabilities
ZDI-07-049: EMC Legato Networker Remote Exec Service Stack Overflow Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-07-049.html August 20, 2007 -- CVE ID: CVE-2007-3618 -- Affected Vendor: EMC Software -- Affected Products: Networker 7.x.x -- TippingPointTM IPS Customer Protection...
EMC Legato Networker Remote Exec Service Stack Overflow Vulnerabilities
These vulnerabilities allow remote attackers to execute arbitrary code on vulnerable installations of EMC Networker. Authentication is not required to exploit this vulnerability. The specific flaws exist in the Networker Remote Exec Service, nsrexecd.exe. The location of this service is available...
Computer Associates BrightStor ARCserve Backup MediaSVR.EXE远程缓冲区溢出漏洞
Computer Associates BrightStor ARCserve Backup是商业性质的企业级备份解决方案。 Computer Associates BrightStor ARCserve Backup包含的MediaSVR.EXE服务存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题存在于SUNRPC接口中，其中用户定义的长度用于多个strncpy函数，当拷贝用户定义数据到固定大小的堆栈缓冲区时，可导致缓冲区溢出，精心构建提交数据可能以应用程序进程权限执行任意指令。 Computer Associates Server Protection...
CVE-2006-5171
Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates CA Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe Overflow...
CVE-2006-5171
Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates CA Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe Overflow...
CA BrightStor ARCServe BackUp mediasvr.exe远程代码执行漏洞
BrightStor ARCserve Backup可为各种平台的服务器提供备份和恢复保护功能。 Brightstor ARCserve的mediasvr.exe服务在处理特制RPC请求时存在两个栈溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 在SUNRPC接口上用户定义的长度被拷贝到了几个strncpy的静态大小栈缓冲区上，因此攻击者可以通过发送特制报文触发这些溢出，导致以在有漏洞的系统上执行任意代码。 Computer Associates BrightStor ARCserve Backup r11.0 for Windows Computer Associates...
CVE-2002-0391
CVE-2002-0391 describes an integer overflow in the xdr_array function of RPC servers using libc/glibc or SunRPC-based code (e.g., dietlibc), enabling remote code execution by passing a large number of RPC arguments. The OpenVAS/DSA entries show Debian advisories addressing this issue across multi...
CVE-2002-0391
Integer overflow in xdrarray function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdrarray through RPC services such as rpc.cmsd and dmispd...
CVE-2003-0028
Integer overflow in the xdrmemgetbytes function, and possibly other functions, of XDR external data representation libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different...
DEBIAN-CVE-2003-0028
Integer overflow in the xdrmemgetbytes function, and possibly other functions, of XDR external data representation libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different...
CVE-2003-0028
Integer overflow in the xdrmemgetbytes function, and possibly other functions, of XDR external data representation libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different...
CVE-2003-0028
Integer overflow in the xdrmemgetbytes function, and possibly other functions, of XDR external data representation libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different...
CVE-2003-0028
Technical details about CVE-2003-0028 are not present in the provided documents. The connected sources reference the CVE in Debian/OpenVAS advisories but do not specify affected products, root cause, versions, impact, or fixes.