Stack overflow

Stack-based buffer overflow in the ttinternalrealpath function in the ToolTalk library libtt.a in IBM AIX 5.2.0, 5.3.0, 5.3.7 through 5.3.10, and 6.1.0 through 6.1.3, when the rpc.ttdbserver daemon is enabled in /etc/inetd.conf, allows remote attackers to execute arbitrary code via a long...

CVE-2009-2727

Stack-based buffer overflow in the ttinternalrealpath function in the ToolTalk library libtt.a in IBM AIX 5.2.0, 5.3.0, 5.3.7 through 5.3.10, and 6.1.0 through 6.1.3, when the rpc.ttdbserver daemon is enabled in /etc/inetd.conf, allows remote attackers to execute arbitrary code via a long...

CVE-2009-2727

Stack-based buffer overflow in the ttinternalrealpath function in the ToolTalk library libtt.a in IBM AIX 5.2.0, 5.3.0, 5.3.7 through 5.3.10, and 6.1.0 through 6.1.3, when the rpc.ttdbserver daemon is enabled in /etc/inetd.conf, allows remote attackers to execute arbitrary code via a long...

HP-UX Update for XDR Library HPSBUX00215

Check for the Version of XDR Library OpenVAS Vulnerability Test HP-UX Update for XDR Library HPSBUX00215 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

HP-UX Update for XDR Library HPSBUX00215

Check for the Version of XDR Library OpenVAS Vulnerability Test HP-UX Update for XDR Library HPSBUX00215 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Slackware 8.1 / 9.0 : glibc XDR overflow fix (SSA:2003-141-03)

An integer overflow in the xdrmemgetbytes function found in the glibc library has been fixed. This could allow a remote attacker to execute arbitrary code by exploiting RPC service that use xdrmemgetbytes. None of the default RPC services provided by Slackware appear to use this function, but...

[Backports-security-announce] Security Update for openafs

Russ Allbery uploaded new packages for openafs a distributed file system which fixed the following security problems: CVE-2009-1251 An attacker with control of a file server or the ability to forge RX packets may be able to execute arbitrary code in kernel mode on an OpenAFS client, due to a...

DSA-1768-1 openafs - potential code execution

Bulletin has no description...

Heap overflow

Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allows remote attackers to cause a denial of service system crash or possibly execute arbitrary code via an RX response containing more data than specified in a...

CVE-2009-1251

Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allows remote attackers to cause a denial of service system crash or possibly execute arbitrary code via an RX response containing more data than specified in a...

CVE-2009-1251

Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allows remote attackers to cause a denial of service system crash or possibly execute arbitrary code via an RX response containing more data than specified in a...

CVE-2009-1251

Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allows remote attackers to cause a denial of service system crash or possibly execute arbitrary code via an RX response containing more data than specified in a...

CVE-2009-1251

Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allows remote attackers to cause a denial of service system crash or possibly execute arbitrary code via an RX response containing more data than specified in a...

CVE-2009-0319

Unspecified vulnerability in the autofs module in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv108, allows local users to cause a denial of service autofs mount outage or possibly gain privileges via vectors related to "xdr processing problems."...

Code injection

Unspecified vulnerability in the autofs module in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv108, allows local users to cause a denial of service autofs mount outage or possibly gain privileges via vectors related to "xdr processing problems."...

CVE-2009-0319

Unspecified vulnerability in the autofs module in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv108, allows local users to cause a denial of service autofs mount outage or possibly gain privileges via vectors related to "xdr processing problems."...

CVE-2009-0319

CVE-2009-0319 affects Sun Solaris autofs kernel module (Solaris 8–10) and OpenSolaris before snv_108. Root cause cited as xdr processing problems in autofs. Impact scope: local user can cause autofs mount outage (DoS) and possibly gain privileges. Affected components: autofs in the kernel; vulner...

CVE-2008-4619

The RPC subsystem in Sun Solaris 9 allows remote attackers to cause a denial of service daemon crash via a crafted request to procedure 8 in program 100000 rpcbind, related to the XDRDECODE operation and the taddr2uaddr function. NOTE: this might be a duplicate of CVE-2007-0165...

Solaris 9 PortBind XDR-DECODE taddr2uaddr() Remote DoS Exploit

No description provided by source. / //////////////////////////////////////////////////////////// // Solaris 9 PortBind XDR-DECODE taddr2uaddr Remote DoS //////////////////////////////////////////////////////////// // // Federico L. Bossi Bonin // fbossiatglobalSTdotcomdotar...

Solaris 9 PortBind - XDR-DECODE 'taddr2uaddr()' Remote Denial of Service

/ //////////////////////////////////////////////////////////// // Solaris 9 PortBind XDR-DECODE taddr2uaddr Remote DoS //////////////////////////////////////////////////////////// // // Federico L. Bossi Bonin // fbossiatglobalSTdotcomdotar /////////////////////////////////////////////////////...