Debian DSA-321-1 : radiusd-cistron - buffer overflow

radiusd-cistron contains a bug allowing a buffer overflow when a long NAS-Port attribute is received. This could allow a remote attacker to execute arbitrary code on the server with the privileges of the RADIUS daemon usually root. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Icecast < 2.0.2 Multiple HTTP Headers Remote Overflow

Binary data 2335.prm...

MDaemon < 6.5.2 Multiple Remote Buffer Overflows

According to its banner, the version of MDaemon running on the remote host has multiple buffer overflow vulnerabilities. A remote attacker could exploit these issues to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Apache < 2.0.51 IPv6 Remote Buffer Overflow

Binary data 2292.prm...

CVE-2004-0699

Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is implemented, allows remote attackers to execute arbitrary code by initiating an IKE negotiation and then sending an IKE packet with malformed ASN.1 data...

CVE-2002-1369

jobs.c in Common Unix Printing System CUPS 1.1.14 through 1.1.17 does not properly use the strncat function call when processing the options string, which allows remote attackers to execute arbitrary code via a buffer overflow attack...

CVE-2002-1122

Buffer overflow in the parsing mechanism for ISS Internet Scanner 6.2.1, when using the license banner HTTP check, allows remote attackers to execute arbitrary code via a long web server response...

[SECURITY] [DSA 458-2] New python2.2 packages really fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 458-2 [email protected] http://www.debian.org/security/ Martin Schulze Aughst 31st, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 458-2] New python2.2 packages really fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 458-2 [email protected] http://www.debian.org/security/ Martin Schulze Aughst 31st, 2004 http://www.debian.org/security/faq -...

GLSA-200403-13 : Remote buffer overflow in MPlayer

The remote host is affected by the vulnerability described in GLSA-200403-13 Remote buffer overflow in MPlayer A vulnerability exists in the MPlayer HTTP parser which may allow an attacker to craft a special HTTP header 'Location:' which will trick MPlayer into executing arbitrary code on the...

Mutt < 1.4.1 / 1.5 UTF-7 IMAP Remote Folder Buffer Overflow Vulnerability

Binary data 1296.prm...

CVE-2004-0768

libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attackers to execute arbitrary code via a buffer overflow attack...

CVSTrac history.c history_update Function Overflow

The remote host seems to be running cvstrac, a web-based bug and patch-set tracking system for CVS. This version contains a flaw related to the historyupdate function in history.c that may allow an attacker to cause a buffer overflow and execute arbitrary code on the remote system. Nessus has...

CESA-2004-001: libpng

CESA-2004-001 - rev 3 libPNG 1.2.5 stack-based buffer overflow and other code concerns ================================================================ Programs : libpng users including mozilla, konqueror, various e-mail clients, generally lots. Also reports that some versions of IE are vulnerabl...

SoX - '.wav' Local Buffer Overflow

//--------------------------------- Begin Code: sox-exploiter.c --------------------------------- / Copyright Rosiello Security 2004 http://www.rosiello.org CVE Reference: CAN-2004-0557 Bug Type: Stack Overflow Date: 01/08/2004 Ulf Harnhammar reported that there are two buffer overflows in the...

Mandrake Linux Security Advisory : tcpdump (MDKSA-2002:032)

Several buffer overflows were found in the tcpdump package by FreeBSD developers during a code audit, in versions prior to 3.5. However, newer versions of tcpdump, including 3.6.2, are also vulnerable to another buffer overflow in the AFS RPC decoding functions, which was discovered by Nick...

l2tpd < 0.69 control.c write_packet Function Remote Overflow

The remote host is running a version of l2tpd which is older or equal to 0.68. This version is vulnerable to a buffer overflow which might allow an attacker to execute arbitrary commands on the remote host with super-user privileges. C Tenable Network Security, Inc. include"compat.inc"; if...

CVE-2004-0397

Stack-based buffer overflow during the aprtimet data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitrary code via a 1 DAV2 REPORT query or 2 get-dated-rev svn-protocol command...

CVE-2004-0413

libsvnrasvn in Subversion 1.0.4 trusts the length field of 1 svn://, 2 svn+ssh://, and 3 other svn protocol URL strings, which allows remote attackers to cause a denial of service memory consumption and possibly execute arbitrary code via an integer overflow that leads to a heap-based buffer...

Subversion < 1.0.4 Pre-Commit-Hook Remote Overflow

The remote host is reported vulnerable to a remote overflow. An attacker, exploiting this hole, would be given full access to the target machine. Versions of Subversion less than 1.0.4 are vulnerable to this attack. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription...