KLA10133 ACE vulnerabilities in IBM DB2

Multiple buffer overflows was found in the IBM DB2. By using this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited locally via a specially designed libname, environment variable or parameter. Original advisories - Related products DB2-Universal-Databas...

VMware vulnerability in NAT networking

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 VULNERABILITY SUMMARY A vulnerability has been discovered in vmnat.exe on Windows hosts and vmnet-natd on Linux systems. The vulnerability makes it possible for a malicious guest using a NAT networking configuration to execute unwanted code on the hos...

CVE-2005-4459

The CVE-2005-4459 issue is a heap-based buffer overflow in VMware’s NAT service components vmnat.exe and vmnet-natd across several products (Workstation 5.5, GSX Server 3.2, ACE 1.0.1, Player 1.0). The flaw is triggered by malformed FTP PORT and EPRT commands processed by the NAT service, allowin...

GLSA-200511-10 : RAR: Format string and buffer overflow vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200511-10 RAR: Format string and buffer overflow vulnerabilities Tan Chew Keong reported about two vulnerabilities found in RAR: A format string error exists when displaying a diagnostic error message that informs the user of an...

RAR: Format string and buffer overflow vulnerabilities

Background RAR is a powerful archive manager that can decompress RAR, ZIP and other files, and can create new archives in RAR and ZIP file format. Description Tan Chew Keong reported about two vulnerabilities found in RAR: A format string error exists when displaying a diagnostic error message th...

CVE-2005-3317

Multiple stack-based buffer overflows in ZipGenius 5.5.1.468 and 6.0.2.1041, and other versions before 6.0.2.1050, allow remote attackers to execute arbitrary code via 1 a ZIP archive that contains a file with a long filename, which is not properly handled by a zipgenius.exe, b zg.exe, c...

CVE-2005-3317

Multiple stack-based buffer overflows in ZipGenius 5.5.1.468 and 6.0.2.1041, and other versions before 6.0.2.1050, allow remote attackers to execute arbitrary code via 1 a ZIP archive that contains a file with a long filename, which is not properly handled by a zipgenius.exe, b zg.exe, c...

CVE-2005-3317

CVE-2005-3317 affects ZipGenius: multiple stack-based buffer overflows in ZipGenius 5.5.1.468, 6.0.2.1041 and earlier than 6.0.2.1050. Vulnerable components include zipgenius.exe, zg.exe, zgtips.dll, contmenu.dll (ZIP long filenames); zipgenius.exe can mishandle long original names in UUE/XXE/MIM...

SEC-20051025-1.txt

SEC-CONSULT Security Advisory 20051025-1 ===================================================================== title: RSA ACE Web Agent XSS program: RSA ACE/Agent for Web vulnerable version: 5.1, 5.1.1 newer versions may be vulnerable homepage: www.rsasecurity.com found: 2005-10 by: SEC-CONSULT /...

RSA ACE Agent 5.x - Image Cross-Site Scripting

RSA ACE Agent 5.x - Image Cross-Site Scripting source: https://www.securityfocus.com/bid/15206/info RSA ACE Agent is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary scrip...

RSA ACE Agent 5.x - Image Cross-Site Scripting

source: https://www.securityfocus.com/bid/15206/info RSA ACE Agent is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user i...

KLA10410 ACE vulnerability in ZipGenius

Buffer overflows were found in ZipGenius. By exploiting these vulnerabilities malicious users can execute arbitrary code. This vulnerability can be exploited remotely via specially designed ZIP & ACE archives or UUE, XXE or MIM files with specially designed filenames. Original advisories...

CVE-2005-3263

Stack-based buffer overflow in UNACEV2.DLL for RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via an ACE archive containing a file with a long name...

CVE-2005-3263

CVE-2005-3263 describes a stack-based buffer overflow in UNACEV2.DLL used by RARLAB WinRAR 2.90–3.50. An attacker can trigger the overflow by supplying an ACE archive containing a file with a long name, allowing remote code execution. The vulnerability affects WinRAR’s ACE archive handling via UN...

CVE-2005-3263

Stack-based buffer overflow in UNACEV2.DLL for RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via an ACE archive containing a file with a long name...

Multiple WinRAR archiver vulnerabilities

UUEncoded files format string bug, ACE archives buffer overflow...

CVE-2005-3061

Multiple stack-based buffer overflows in PowerArchiver 8.10 through 9.5 Beta 4 and Beta 5 allow remote attackers to execute arbitrary code via a long filename in a 1 ACE or 2 ARJ archive...

CVE-2005-3061

PowerArchiver is affected by a vulnerability (CVE-2005-3061) described as multiple stack-based buffer overflows in PowerArchiver 8.10 through 9.5 Beta 4 and Beta 5. The issue allows remote attackers to execute arbitrary code by supplying a long filename inside a (1) ACE or (2) ARJ archive. Affect...

PowerArchiver buffer overflow

Buffer overflow on ARJ and ACE archives parsing...

CVE-2005-3029

Stack-based buffer overflow in AhnLab V3Pro 2004 build 6.0.0.383, V3 VirusBlock 2005 build 6.0.0.383, and V3Net for Windows Server 6.0 build 6.0.0.383 allows remote attackers to execute arbitrary code via a long filname in an ACE archive...