Conectiva 4.x/5.x / Debian 2.x / RedHat 6.x / S.u.S.E 6.x/7.0 / Trustix 1.x - rpc.statd Remote Format String (2)

// source: https://www.securityfocus.com/bid/1480/info A vulnerability exists in the 'rpc.statd' program, which is part of the 'nfs-utils' package that is shipped with a number of popular Linux distributions. Because of a format-string vulnerability when calling the 'syslog' function, a remote...

CVE-2000-0583

vchkpw program in vpopmail before version 4.8 does not properly cleanse an untrusted format string used in a call to syslog, which allows remote attackers to cause a denial of service via a USER or PASS command that contains arbitrary formatting directives...

PT-2000-1517 · Vpopmail · Vpopmail

Name of the Vulnerable Software and Affected Versions: vpopmail versions prior to 4.8 Description: The issue is related to the vchkpw program in vpopmail, which does not properly cleanse an untrusted format string used in a call to syslog. This allows remote attackers to cause a denial of service...

fcheck.txt

The short explanation: fcheck is a file integrity checker written in perl. It can send warnings to syslog via an external program such as logger1. Because it calls system with a scalar argument, a malicious user can cause it to execute programs by creating files with shell metacharacters in their...

CVE-1999-0171

Denial of service in syslog by sending it a large number of superfluous messages...

CVE-1999-0171

The CVE-1999-0171 issue is described in multiple connected sources as a denial-of-service in syslogd (notably on IRIX). SGI’s advisory attributes a buffer overrun in the syslogd binary that can crash the service, potentially enabling remote exploitation and DoS. The advisory states this vulnerabi...

CVE-1999-0381

super 3.11.6 and other versions have a buffer overflow in the syslog utility which allows a local user to gain root access...

CVE-1999-0171: Undefined Security Weakness

Denial of service in syslog by sending it a large number of superfluous messages...

CVE-1999-0381: Undefined Security Weakness

super 3.11.6 and other versions have a buffer overflow in the syslog utility which allows a local user to gain root access...

CVE-1999-0063

Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port...

CVE-1999-0099

Buffer overflow in syslog utility allows local or remote attackers to gain root privileges...

CVE-1999-0099

CVE-1999-0099 is a vulnerability in the syslog utility described as a buffer overflow that can allow local or remote attackers to gain root privileges. The connected sources (NVD, Red Hat CVE page, CVE list, EUVD/PTSecurity notes) corroborate the issue but do not consistently provide concrete det...

CVE-1999-0566

Affected software: SGI IRIX syslogd (remote logging daemon). Root cause / vulnerability type: remote buffer overflow in syslogd that can be triggered to crash or potentially execute code. Impact: denial of service (crash) and possible arbitrary code execution with syslogd privileges. Exploitation...

EUVD-1999-0063

Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port...

CVE-1999-0566

An attacker can write to syslog files from any location, causing a denial of service by filling up the logs, and hiding activities...

CVE-1999-0063: Undefined Security Weakness

Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port...

CVE-1999-0099: Undefined Security Weakness

Buffer overflow in syslog utility allows local or remote attackers to gain root privileges...

CVE-1999-0566: Undefined Security Weakness

An attacker can write to syslog files from any location, causing a denial of service by filling up the logs, and hiding activities...

putsyslog.txt

http://www.rootshell.com/ From [email protected] Wed Jul 8 10:18:27 1998 Date: Wed, 8 Jul 1998 19:08:41 +0200 From: Paul Boehm To: [email protected] Subject: putsyslog hi, users can write messages to syslog and thus hide files in there and bypass quotas.. later they can extract it if they ha...

cisco-ios-DoS.alert.txt

Date: Mon, 11 Jan 1999 16:00:56 -0000 From: [email protected] Reply-To: [email protected] To: [email protected] Subject: Cisco Security Notice: Cisco IOS Syslog Crash -----BEGIN PGP SIGNED MESSAGE----- Field Notice: Cisco IOS Syslog Crash...