Format string

The Platform Service Process asampsp in Fan-Out Driver Platform Services for Novell Identity Manager IDM 3.5.1 allows remote attackers to cause a denial of service daemon crash via unspecified network traffic that triggers a syslog message containing invalid format string specifiers, as...

CVE-2007-6625

The Platform Service Process asampsp in Fan-Out Driver Platform Services for Novell Identity Manager IDM 3.5.1 allows remote attackers to cause a denial of service daemon crash via unspecified network traffic that triggers a syslog message containing invalid format string specifiers, as...

CVE-2003-1518

CVE-2003-1518 affects Adiscon WinSyslog 4.21 SP1. A remote attacker can cause a denial of service by sending a long syslog message, leading to CPU consumption or the system freeze. Public sources describe the vulnerable component as WinSyslog’s handling of syslog input over the network (default p...

CVE-2003-1518: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adiscon WinSyslog 4.21 SP1 allows remote attackers to cause a denial of service CPU consumption via a long syslog message...

Design/Logic Flaw

Unspecified vulnerability in Cisco Firewall Services Module FWSM 3.x before 3.13.3, when set to log at the "debug" level, allows remote attackers to cause a denial of service device reboot by sending packets that are not of a particular protocol such as TCP or UDP, which triggers the reboot durin...

CVE-2007-0963: Undefined Security Weakness

Unspecified vulnerability in Cisco Firewall Services Module FWSM 3.x before 3.13.3, when set to log at the "debug" level, allows remote attackers to cause a denial of service device reboot by sending packets that are not of a particular protocol such as TCP or UDP, which triggers the reboot durin...

CVE-2004-2417

Format string vulnerability in smtp.c for smtp.proxy 1.1.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the 1 client hostname or 2 message-id, which are injected into a syslog message...

CVE-2004-2417

CVE-2004-2417 : A format string vulnerability in smtp.c for smtp.proxy 1.1.3 and earlier allows remote code execution by injecting format string specifiers via the client hostname or message-id into a syslog message. Affected: smtp.proxy before 1.1.3. Impact and remediation details are not provid...

CVE-2004-2417: Undefined Security Weakness

Format string vulnerability in smtp.c for smtp.proxy 1.1.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the 1 client hostname or 2 message-id, which are injected into a syslog message...

CVE-2004-1484

Format string vulnerability in the msg function in error.c in socat 1.4.0.3 and earlier, when used as an HTTP proxy client and run with the -ly option, allows remote attackers or local users to execute arbitrary code via format string specifiers in a syslog message...

DEBIAN-CVE-2004-1484

Format string vulnerability in the msg function in error.c in socat 1.4.0.3 and earlier, when used as an HTTP proxy client and run with the -ly option, allows remote attackers or local users to execute arbitrary code via format string specifiers in a syslog message...

CVE-2004-1484

Format string vulnerability in the msg function in error.c in socat 1.4.0.3 and earlier, when used as an HTTP proxy client and run with the -ly option, allows remote attackers or local users to execute arbitrary code via format string specifiers in a syslog message...