XFree86 X11R6 3.3.x - Font Server Remote Buffer Overrun

XFree86 X11R6 3.3.x - Font Server Remote Buffer Overrun source: https://www.securityfocus.com/bid/6241/info A remotely exploitable buffer overrun condition has been reported in the XFS font server, fs.auto used by multiple vendors. This vulnerability may be exploited by remote attackers to execut...

Solaris X Window Font Service (XFS) daemon contains buffer overflow in Dispatch() function

Overview A remotely exploitable buffer overflow has been discovered in the Solaris X Window Font Service XFS daemon fs.auto. Description ISS X-Force released an Advisory today regarding a remotely exploitable buffer overflow in XFS. According to ISS, XFS is installed and running by default on the...

XFree86 X11R6 3.3.x - Font Server Remote Buffer Overrun

source: https://www.securityfocus.com/bid/6241/info A remotely exploitable buffer overrun condition has been reported in the XFS font server, fs.auto used by multiple vendors. This vulnerability may be exploited by remote attackers to execute commands on the target host with privileges of user...

SGI IRIX rpc.xfsmd does not filter shell metacharacters from user input before invoking popen() function

Overview The XFS journaling filesystem daemon uses a call to popen3 with unfiltered client-controlled input. This will lead to arbitrary command execution on remote systems. Description XFS is a 64-bit compliant journaling file system. The XFS journaling filesystem daemon xfsmd on SGI systems use...

SGI IRIX rpc.xfsmd uses weak authentication mechanism for RPC authentication

Overview The XFS file system on SGI systems allows anonymous remote users to call xfs-related RPC functions. Description XFS is a 64-bit compliant journaling file system. The XFS journaling filesystem daemon rpc.xfsmd on SGI systems uses the default AUTHUNIX authentication mechanism a client-base...

CVE-2002-0042

Vulnerability in the XFS file system for SGI IRIX before 6.5.12 allows local users to cause a denial of service hang by creating a file that is not properly processed by XFS...

CVE-2002-0356

Vulnerability in XFS filesystem reorganizer fsrxfs in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by overwriting critical system files...

IRIX fsr_xfs vulnerability

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: fsrxfs vulnerability Number: 20020504-01-I Date: May 8, 2002 Reference: CAN-2002-0356 - ----------------------- - --- Issue Specifics --- - ----------------------- It's been reported that there is a problem with the fsrxfs XFS...

Irix XFS DoS

It's possible to create file to cause error in processing application...

IRIX XFS filesystem denial of service attack

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: IRIX XFS filesystem denial of service attack Number: 20020402-01-P Date: April 15, 2002 Reference: CAN-2002-0042 - ----------------------- - --- Issue Specifics --- - ----------------------- It has been reported that there is a...

DoS против XFree-xfs

Большое количество случайных данных в порт приложения приводит к отказу в обслуживнаии...

XFree86-xfs-4.0.1-1 DoS

Hello, xfs from the package XFree86-xfs-4.0.1-1 i386.rpm, RedHat 7.0 seems to suffer from a Denial of Service attack. To cause xfs to stop responding for requests, try to do the fillowing: $ telnet victim xfs /dev/urandom Repeat about 100 or 1000 times and you get Connection refused message...

CVE-2000-0263

CVE-2000-0263 affects the X font server (xfs) on Red Hat Linux 6.x. A malformed request can cause a denial of service, impacting availability (CVSS v2 base score 2.1). Vector: local, low complexity, no authentication required; impact is limited to availability. No explicit remediation details are...

CVE-2000-0263: Undefined Security Weakness

The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request...

CVE-2000-0798

The truncate function in IRIX 6.x does not properly check for privileges when the file is in the xfs file system, which allows local users to delete the contents of arbitrary files...

CVE-2000-0798

CVE-2000-0798 affects IRIX 6.x when files reside on the xfs filesystem. The vulnerability arises because the truncate function does not properly check privileges, enabling local users to delete contents of arbitrary files. Public sources (NVD/NVD-linked entries) confirm the affected component as ...

CVE-2000-0798: Undefined Security Weakness

The truncate function in IRIX 6.x does not properly check for privileges when the file is in the xfs file system, which allows local users to delete the contents of arbitrary files...

CVE-2000-0286

Technical details about CVE-2000-0286 are not publicly provided in the supplied documents. Monitor for updates from NVD/CVE feeds for affected products, fixes, and remediation guidance.

CVE-2000-0286: Undefined Security Weakness

X fontserver xfs allows local users to cause a denial of service via malformed input to the server...

xfs security issues (fwd)

Hi, I notice xfs the X font server recently hit the news. It seems I never sent the below message on to Bugtraq at least a search doesn't show up much. I'm guessing it's still relevant. This message illustrates that the xfs problem recently mentioned by Michal is but one of many minor...