4266 matches found
MNOGoSearch 3.1.20 Search.CGI UL Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/7865/info mnoGoSearch 'search.cgi' has been reported prone to a buffer overflow vulnerability. The issue is a result of a lack of sufficient bounds checking performed on user-supplied URI parameters that are passed to the...
Abuse-SDL 0.7 Command-Line Argument Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7982/info A buffer overflow vulnerability has been reported for Abuse-SDL that may result in the execution of attacker-supplied code. The vulnerability exists due to insufficient bounds checking performed on certain...
MNOGoSearch 3.1.20 Search.CGI UL Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/7865/info mnoGoSearch 'search.cgi' has been reported prone to a buffer overflow vulnerability. The issue is a result of a lack of sufficient bounds checking performed on user-supplied URI parameters that are passed to the...
aGSM 2.35 Half-Life Server Info Response Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10989/info aGSM is reported prone to a remote buffer overflow vulnerability. The issue presents itself in the aGSM server information parsing routines for Half-Life game servers. Due to a lack of sufficient bounds checkin...
ATFTP 0.7 Timeout Command Line Argument Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7902/info atftp is prone to a locally exploitable buffer overflow condition. This issue is due to insufficient bounds checking performed on input supplied to the command line parameter -t for timeout. Local attackers may...
NASA Ames Research Center BigView 1.8 - (.PNM File) Stack-Based Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29517/info NASA Ames Research Center BigView is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it to an insufficiently sized memory...
IA WebMail Server 3.0/3.1 Long GET Request Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8965/info IA WebMail Server is said to be prone to a remote buffer overrun that could allow an attacker to execute arbitrary code. The problem occurs due to insufficient bounds checking when handling GET requests. As a...
freebsd 4.2-stable ftpd glob() Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/2548/info The BSD ftp daemon and derivatives such as IRIX ftpd or the ftp daemon shipped with Kerberos 5 contain a number of buffer overflows that may lead to a compromise of root access to malicious users. During parsing...
TelCondex SimpleWebserver 2.12.30210 build 3285 HTTP Referer Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8925/info A vulnerability has been reported in SimpleWebServer that may allow a remote attacker to cause a denial of service condition or execute arbitrary code on vulnerable host. The issue is reported to exist due to a...
FoxWeb 2.5 PATH_INFO Remote Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8547/info FoxWeb is prone to a remotely exploitable buffer overrun vulnerability. This is due to insufficient bounds checking of user-supplied PATHINFO data to the Foxweb CGI and ISAPI extension. Successful exploitation...
ONO Hitron CDE-30364 Router - Denial of Service
No description provided by source. !/usr/bin/python ----------------------------------------------------------------------------------------- Description: ----------------------------------------------------------------------------------------- Hitron Technologies CDE-30364 is a famous ONO Router...
wu-ftpd 2.4.2,SCO Open Server <= 5.0.5,ProFTPD 1.2 pre1 realpath Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/113/info There is a vulnerability in ProFTPD versions 1.2.0pre1 and earlier and in wu-ftpd 2.4.2 beta 18 VR9 and earlier. This vulnerability is a buffer overflow triggered by unusually long path names directory structures...
Maelstrom Server 3.0.x Argument Buffer Overflow Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/7630/info Maelstrom for Linux has been reported prone to a buffer overflow vulnerability. The issue is reportedly due to a lack of sufficient bounds checking performed on user-supplied data before it is copied into an...
Core FTP LE 2.2 Heap Overflow
----------------------------------------------------------------------------- Exploit Title: Core FTP LE 2.2 - Heap Overflow PoC Date: Jun 11 2014 Exploit Author: Gabor Seljan Software Link: http://www.coreftp.com/ Version: 2.2 build 1798 Tested on: Windows XP SP3...
openSUSE Security Update : bind (openSUSE-SU-2013:1353-1)
The BIND nameserver was updated to 9.9.3P2 to fix a security issue where incorrect bounds checking on private type 'keydata' could lead to a remotely triggerable REQUIRE failure. CVE-2013-4854, bnc831899 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks ...
openSUSE Security Update : qemu (openSUSE-SU-2012:1170-1)
qemu was fixed to add bounds checking for VT100 escape code parsing and cursor placement. Also qemu was updated on 12.2 and 11.4 to the latest stable release v1.1.1 and v0.14.1 respectively. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...
openSUSE Security Update : libfreetype6 (openSUSE-SU-2010:0549-1)
This update of freetype2 fixes several vulnerabilities that could lead to remote system compromise by executing arbitrary code with user privileges : - CVE-2010-1797: stack-based buffer overflow while processing CFF opcodes - CVE-2010-2497: integer underflow - CVE-2010-2498: invalid free -...
Fedora 20 : qemu-1.6.2-4.fc20 (2014-5825)
Fix arm sd warnings with latest kernel bz 1091548 - Fix regression in CVE backport that affects openstack thanks lbezdick - Fix guest startup crashes from autotest bz 1081610 - Block/image format validation CVE-2014-0142 - 2014-0148 bz 1078201, bz 1086710, bz 1079140, bz 1086724, bz 1079240, bz...
Qemu: vhdx: bounds checking for block_size and logical_sector_size
Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries, due to missing bounds checks for blocksize and logicalsectorsize variables. These are used to derive other fields like 'sectorsperblock' etc. A user able t...
PT-2016-5773
Name of the Vulnerable Software and Affected Versions Squid versions 3.x through 3.5.15 Squid versions 4.x through 4.0.7 Description The issue is related to improper bounds checking, which can be exploited by remote attackers to cause a denial of service via a crafted HTTP response. This is...