security flaw

OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a denial of service and possibly execute arbitrary code...

security flaw

OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a denial of service and possibly execute arbitrary code...

CVE-2002-0655

OpenSSL CVE-2002-0655 affects 0.9.6d and earlier and 0.9.7-beta2 and earlier; on 64-bit platforms it mishandles ASCII representations of integers, enabling denial of service and potentially arbitrary code execution. Public sources in the connected docs corroborate multiple related CVEs (0655, 065...

Vulnerability in OpenSSL CVE-2002-0655

Inproper handling of ASCII representations of integers on 64 bit platforms allowed remote attackers to cause a denial of service or possibly execute arbitrary code...

OpenSSL contains multiple buffer overflows in buffers that are used to hold ASCII representations of integers

Overview OpenSSL is an open-source implementation of the Secure Sockets Layer SSL protocol. There is a buffer overflow on 64-bit platforms related to the ASCII representation of integers. Description OpenSSL clients and servers running on 64-bit platforms prior to version 0.9.6e and pre-release...

CVE-2001-1139

The CVE-2001-1139 entry concerns a Directory traversal vulnerability in ASCII NT WinWrapper Professional. The underlying issue allows an attacker to read arbitrary files by injecting a .. in the server request, indicating a path traversal flaw in the software’s handling of input paths. Public det...

CVE-2001-1139

Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files via a .. dot dot in the server request...

CVE-2001-1139: Undefined Security Weakness

Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files via a .. dot dot in the server request...

CVE-2001-0265

ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malformed ASCII armored file...

CVE-2001-0265

CVE-2001-0265 concerns the Windows PGP ASCII Armor parser (versions Windows PGP 5 to 7.0.3, latest). The vulnerability arises from handling malformed ASCII-armored data, which allows an attacker to create arbitrary files in the same directory as the armored file. This can lead to arbitrary code e...

CVE-2001-0265: Undefined Security Weakness

ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malformed ASCII armored file...

CVE-2001-1139

Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files via a .. dot dot in the server request...

Icecast 1.1.x/1.3.x - Directory Traversal

source: https://www.securityfocus.com/bid/2932/info Icecast is an open source audio-streaming server for both Unix and Microsoft Windows systems. Icecast does not filter encoded characters from URLs when receiving web requests. If a remote attacker crafts a URL containing the ASCII equivalent of...

CVE-2001-0265

ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malformed ASCII armored file...

Дырка в PGP для Windows (ASCII parser)

Можно сконфигурировать .asc-файл таким образом, что при его разборе будет перезаписан любой файл...

PGP 5.x/6.x/7.0 - ASCII Armor Parser Arbitrary File Creation

source: https://www.securityfocus.com/bid/2556/info ASCII Armor is a text based encoding format used by PGP Pretty Good Privacy. While it is possible to encode any file using ASCII Armor, it is used by PGP to encode signature files and public keys to facilitate transmission in e-mail messages. Wh...

PGP 5.x6.x7.0 - ASCII Armor Parser Arbitrary File Creation

PGP 5.x6.x7.0 - ASCII Armor Parser Arbitrary File Creation source: https://www.securityfocus.com/bid/2556/info ASCII Armor is a text based encoding format used by PGP Pretty Good Privacy. While it is possible to encode any file using ASCII Armor, it is used by PGP to encode signature files and...

CVE-2000-1130

CVE-2000-1130 affects McAfee WebShield SMTP 4.5. An attacker can bypass email content filtering rules by using extended ASCII characters in the attachment name, enabling partial confidentiality/integrity impact as indicated by the record. The vulnerability description provided by multiple sources...

CVE-2000-1130: Undefined Security Weakness

McAfee WebShield SMTP 4.5 allows remote attackers to bypass email content filtering rules by including Extended ASCII characters in name of the attachment...

Дырки в WFTPD

Большое число расширенных ASCII-символов в строке приводит к переполнению буфера. Кроме того, имеется несколько недокументированных макросов, например C позволяет выяснить физическое расположение файлов...