SquirrelMail - 'chpasswd' Local Buffer Overflow

/ 0x3142-sq-chpasswd.c Squirremail chpasswd buffer overflow. Tested on SuSE 9. The bug was found by Matias Neiff Coded by x314 c 2004 Copyright by x314. All Rights Reserved. Greets: m0s krewz. / include char shellcode= "\x31\xc0\xb0\x46\x31\xdb\x31\xc9\xcd\x80\xeb\x16\x5b\x31\xc0"...

Microsoft Windows XP/2000 - 'RunDLL32.exe' Local Buffer Overflow

source: https://www.securityfocus.com/bid/8114/info rundll32.exe has been reported prone to a buffer overflow vulnerability. The condition has been reported to be triggered when an excessive string is passed to the vulnerable application as a routine name for a module. Exploitation of this issue...

[SECURITY] [DSA-337-1] New gtksee packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 337-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 29th, 2003 http://www.debian.org/security/faq -...

CORE-2003-0303: Multiple Vulnerabilities in Mirabilis ICQ client

Core Security Technologies Advisory http://www.coresecurity.com Multiple Vulnerabilities in Mirabilis ICQ client Date Published: 2003-05-05 Last Update: 2003-05-02 Advisory ID: CORE-2003-0303 Bugtraq IDs: 7461, 7462, 7463, 7464, 7465, 7466 CVE Names: CAN-2003-0235, CAN-2003-0236, CAN-2003-0237,...

Sharity Cifslogin Buffer Overflow (arguments)

Sharity Cifslogin Buffer Overflow arguments ============================================= Author: Alex Hernandez [email protected] C 2002 Thanks all the people from Spain and Argentina. Greets to: Paco Spain, Gabriel M, L.martins. Thanks friends for all ur help Zillion & Kevin from Snosoft...

Microsoft Visual Studio RAD Support - Remote Buffer Overflow (MS03-051) (Metasploit)

source: https://www.securityfocus.com/bid/2906/info Due to an unchecked buffer in a subcomponent of FrontPage Server Extensions Visual InterDev RAD Remote Deployment Support, a specially crafted request via 'fp30reg.dll' could allow a user to execute arbitrary commands in the context of...

Trend Micro Interscan VirusWall (Linux) 3.0.1 - Multiple Program Buffer Overflows

Trend Micro Interscan VirusWall Linux 3.0.1 - Multiple Program Buffer Overflows source: https://www.securityfocus.com/bid/2579/info Interscan Viruswall is a Virus scanning software package distributed and maintained by Trend Micro. It is designed to scan for virus occurances in both incoming and...

Exploiting Kernel Buffer Overflows FreeBSD Style

-----BEGIN PGP SIGNED MESSAGE----- Exploiting Kernel Buffer Overflows FreeBSD Style: Defeating Security Levels and Breaking Out of Jail2 Esa Etelavuori December 28, 2000 1. Introduction This is a detailed case study discussing the exploitation of the FreeBSD kernel process filesystem buffer...

KTH Kerberos 4 - Arbitrary Proxy Usage

source: https://www.securityfocus.com/bid/2090/info Kerberos is a widely used network service authentication system. The version of Kerberos developed and maintained by KTH Swedish Royal Institute of Technology contains a vulnerability that may allow/assist in a local or remote root compromise. K...

XFree86 3.3.5/3.3.6 - Xlib Display Buffer Overflow

source: https://www.securityfocus.com/bid/1805/info A vulnerability exists in xlib, the C language interface to the X Window System protocol. When applications linked to the xlib library are run, user-supplied values for the DISPLAY environment variable and the command-line argument -display are...

CVE-1999-0863

Buffer overflow in FreeBSD seyon via HOME environmental variable, -emulator argument, -modems argument, or the GUI...

Sun Solaris 2.5.1 PAM / unix_scheme - 'passwd' Local Privilege Escalation

/ source: https://www.securityfocus.com/bid/201/info There is a buffer overflow condition on arguments in Pluggable Authentication Modules PAM and unixscheme 5.4 and 5.3. Therefore, an unauthorized user could exploit this vulnerability via the passwd program to gain root access. Under SunOS 5.5.1...

Multiple vulnerabilities in stack smashing protection technologies.

Advisory ID Internal CORE-20020409 Advisory Information: Advisory ID: CORE-20020409 Bugtraq ID:4586, 4589 CVE Name: Non-assigned yet Title: Multiple vulnerabilities in stack smashing protection technologies. Class: Design limitation, Implementation flaw Remotely Exploitable: Yes Locally...