870 matches found
[SECURITY] [DSA 254-1] New NANOG traceroute packages fix buffer overflow
-------------------------------------------------------------------------- Debian Security Advisory DSA 254-1 [email protected] http://www.debian.org/security/ Martin Schulze February 27th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA 254-1] New NANOG traceroute packages fix buffer overflow
-------------------------------------------------------------------------- Debian Security Advisory DSA 254-1 [email protected] http://www.debian.org/security/ Martin Schulze February 27th, 2003 http://www.debian.org/security/faq -...
DSA-254 traceroute-nanog - buffer overflow
Bulletin has no description...
CVE-2002-1386
Buffer overflow in traceroute-nanog aka traceroute-ng may allow local users to execute arbitrary code via a long hostname argument...
CVE-2002-1387
The spray mode in traceroute-nanog aka traceroute-ng may allow local users to overwrite arbitrary memory locations via an array index overflow using the nprobes number of probes argument...
CVE-2002-1386
CVE-2002-1386 affects traceroute-nanog (aka traceroute-ng). The vulnerability is a buffer overflow that could allow local users to execute arbitrary code via a long hostname argument. Debian security advisories (DSA-254-1) document this issue and provide fixed packages; affected releases needed u...
CVE-2002-1387
The spray mode in traceroute-nanog aka traceroute-ng may allow local users to overwrite arbitrary memory locations via an array index overflow using the nprobes number of probes argument...
CVE-2002-1387
CVE-2002-1387 affects traceroute-nanog: the spray mode may allow local users to overwrite arbitrary memory locations via an array index overflow when using the nprobes argument. The CVSS/NVD entry indicates local access, low attack complexity, and partial impact to confidentiality, integrity, and...
CVE-2002-1386
Buffer overflow in traceroute-nanog aka traceroute-ng may allow local users to execute arbitrary code via a long hostname argument...
CVE-2002-1364
Buffer overflow in the getorigin function in traceroute-nanog allows attackers to execute arbitrary code via long WHOIS responses...
TracerouteNG - never ending story
Hi everyone, I want to provide some additional information about the recently discovered traceroute-ng flaw. I decided to disclose to details right now because I do not believe that the flaw is easily exploitable. 1 The vulnerablilty. The patch provided by vendors like SuSE is not sufficient. It...
Traceroute-nanog 6 - Local Buffer Overflow
// source: https://www.securityfocus.com/bid/6166/info A vulnerability has been discovered in Traceroute-nanog. It has been reported that Traceroute-nanog contains a buffer overflow condition. The overflow occurs in the 'getorigin' function in the 'traceroute.c' file. Due to insufficient bounds...
Traceroute-nanog 6 - Local Buffer Overflow
Traceroute-nanog 6 - Local Buffer Overflow // source: https://www.securityfocus.com/bid/6166/info A vulnerability has been discovered in Traceroute-nanog. It has been reported that Traceroute-nanog contains a buffer overflow condition. The overflow occurs in the 'getorigin' function in the...
networking_utils.php
Title: The bug in networkingutils.php http://www.sourcecraft.org/downloads networkingutilsPHP Show Files Vulnerability Summary: networkingutils.php Includes a ping function, a traceroute function, and an nslookup function. Vulnerable systems: networkingutils networkingutils.php of the...
PHP.networking_utils
Title: The bug in networkingutils.php http://www.sourcecraft.org/downloads networkingutilsPHP Show Files Vulnerability Summary: networkingutils.php Includes a ping function, a traceroute function, and an nslookup function. Vulnerable systems: networkingutils networkingutils.php of the...
PT-2002-1539 · Linux Directory Penguin · Linux Directory Penguin Traceroute.Pl Cgi Script
Name of the Vulnerable Software and Affected Versions: Linux Directory Penguin traceroute.pl CGI script version 1.0 Description: The issue allows remote attackers to execute arbitrary code via shell metacharacters in the host parameter. This is a result of a flaw in the traceroute.pl CGI script...
Another small metacharacter bug in Penguin Traceroute v1.0
Hi, As I was surfing through some older Securityfocus archives I stumbled across the article about Penguin traceroute v1.0 http://online.securityfocus.com/archive/1/263285 This article described some metacharacter bugs in this CGI script, also it included a suggested fix. quote Fix === Open up th...
PHP script: Penguin Traceroute, Remote Command Execution
/ ------------------------------ --------Security Freaks------- ----www.securityfreaks.com---- ------------------------------ / Info ==== Software: Penguin Traceroute Website: http://www.linux-directory.com/scripts/traceroute.shtml Versions: 1.0 Platforms: Linux Vulnerability Type: Remote Command...
Network Tool 0.2 Addon for PHPNuke vulnerable to remote command execution
-- Network Tool 0.2 Addon for PHPNuke vulnerable to remote command execution -- Problem discovered: 16/11/2001 by Cabezon Aurйlien | [email protected] http://www.isecurelabs.com/article.php?sid=209 -- Description -- This Phpnuke addon includes web frontends for the following nix...