abcm2ps: Buffer overflow vulnerability

Background abcm2ps is a utility used to convert ABC music sheet files into PostScript format. Description Limin Wang has located a buffer overflow inside the putwords function in the abcm2ps code. Impact A remote attacker could convince the victim to download a specially-crafted ABC file. Upon...

Xine-Lib < 1.0-rc8 Remote Client-Side Buffer Overflow

Binary data 2459.prm...

abctab2ps 1.6.3 - Trim_Title .ABC File Remote Buffer Overflow

abctab2ps 1.6.3 - TrimTitle .ABC File Remote Buffer Overflow source: https://www.securityfocus.com/bid/12028/info abctab2ps is reported prone to a remote buffer overflow vulnerability. This issue arises because the application fails to carry out proper boundary checks before copying user-supplied...

000102advisory.txt

Hat-Squad Advisory: Remote buffer overflow in MailEnable IMAP service Product: MailEnable Mail Server Vendor Url: http://www.mailenable.com Version: MailEnable Professional Edition v1.52, MailEnable Enterprise Edition v1.01 Vulnerability: Remote buffer overflow in IMAP service Release Date: 26...

YardRadius process_menu Function Remote Buffer Overflow

The remote host appears to be running YARD RADIUS 1.0.20 or older. This version is vulnerable to a buffer overflow that allows a remote attacker to execute arbitrary code in the context of the RADIUS server. It is likely that this check made the remote RADIUS server crash C Tenable Network...

WeOnlyDo! COM Ftp DELUXE ActiveX Control Buffer Overflow Vulnerability

AUTHOR Komrade [email protected] http://unsecure.altervista.org DATE 22/11/2004 PRODUCT WodFtpDLX is an ActiveX component that supports encrypted and non-encrypted FTP access to the servers for transferring files. It can be used in various programs, scripts, web applications to connect to F...

CoffeeCup FTP Clients (Direct 6.2.0.62) (Free 3.0.0.10) - Remote Buffer Overflow

CoffeeCup FTP Clients Direct 6.2.0.62 Free 3.0.0.10 - Remote Buffer Overflow / CoffeeCup FTP Clients Buffer Overflow Vulnerability Exploit created by Komrade e-mail: unsecureataltervistadotorg web: http://unsecure.altervista.org Tested on: CoffeeCup Direct FTP 6.2.0.62 CoffeeCup Free FTP 3.0.0.10...

Digital Mappings Systems POP3 Server Remote Buffer Overflow

Binary data 2413.prm...

[SECURITY] [DSA 593-1] New imagemagick packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 593-1 [email protected] http://www.debian.org/security/ Martin Schulze November 16th, 2004 http://www.debian.org/security/faq -...

Pavuk: Multiple buffer overflows

Background Pavuk is web spider and website mirroring tool. Description Pavuk contains several buffer overflow vulnerabilities in the code handling digest authentication and HTTP header processing. This issue is similar to GLSA 200407-19, but contains more vulnerabilities. Impact A remote attacker...

libxml2: Remotely exploitable buffer overflow

Background libxml2 is an XML parsing library written in C. Description Multiple buffer overflows have been detected in the nanoftp and nanohttp modules. These modules are responsible for parsing URLs with ftp information, and resolving names via DNS. Impact An attacker could exploit an applicatio...

EEYE: RealPlayer Zipped Skin File Buffer Overflow

RealPlayer Zipped Skin File Buffer Overflow Release Date: October 27, 2004 Date Reported: October 11, 2004 Severity: High Code Execution Vendor: RealNetworks Systems Affected: For Microsoft Windows RealPlayer 10.5 6.0.12.1053 and earlier RealPlayer 10 RealOne Player v2 RealOne Player v1 Overview:...

iDEFENSE Security Advisory 10.27.04 - PuTTY SSH2_MSG_DEBUG Buffer Overflow Vulnerability

PuTTY SSH2MSGDEBUG Buffer Overflow Vulnerability iDEFENSE Security Advisory 10.27.04 www.idefense.com/application/poi/display?id=155&type=vulnerabilities October 27, 2004 I. BACKGROUND PuTTY is a free implementation of Telnet and SSH for Win32 and Unix platforms, along with an xterm terminal...

CVE-2004-1636

Heap-based buffer overflow in the WvTFTPServer::newconnection function in wvtftpserver.cc for WvTftp 0.9 allows remote attackers to execute arbitrary code via a long option string in a TFTP packet...

CVE-2004-0978

Heap-based buffer overflow in the Hrtbeat.ocx Heartbeat ActiveX control for Internet Explorer 5.01 through 6, when users who visit online gaming sites that are associated with MSN, allows remote attackers to execute arbitrary code via the SetupData parameter...

CVE-2004-0206

Network Dynamic Data Exchange NetDDE services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an "unchecked buffer,"...

Cyrus-SASL: Buffer overflow and SASL_PATH vulnerabilities

Background Cyrus-SASL is an implementation of the Simple Authentication and Security Layer. Description Cyrus-SASL contains a remote buffer overflow in the digestmda5.c file. Additionally, under certain conditions it is possible for a local user to exploit a vulnerability in the way the SASLPATH...

Debian DSA-297-1 : snort - integer overflow, buffer overflow

Two vulnerabilities have been discovered in Snort, a popular network intrusion detection system. Snort comes with modules and plugins that perform a variety of functions such as protocol analysis. The following issues have been identified : Heap overflow in Snort 'stream4' preprocessor VU139129,...

Debian DSA-407-1 : ethereal - buffer overflows

Several vulnerabilities were discovered upstream in ethereal, a network traffic analyzer. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2003-0925 A buffer overflow allows remote attackers to cause a denial of service and possibly execute arbitrary code...

Debian DSA-384-1 : sendmail - buffer overflows

Two vulnerabilities were reported in sendmail. - CAN-2003-0681 : A 'potential buffer overflow in ruleset parsing' for Sendmail 8.12.9, when using the nonstandard rulesets 1 recipient 2, final, or 3 mailer-specific envelope recipients, has unknown consequences. - CAN-2003-0694 : The prescan functi...