mod_security 1.7RC1 to 1.7.1 vulnerability

Program: modsecurity www.modsecurity.org Versions: 1.7RC1 to 1.7.1 Apache 2 version Synopsis: malloc based buffer overflow Author: Adam Dyga adeonato2.pl, adatadsystems.com.pl URL: http://adsystems.com.pl/adg-modsecurity171.txt Discovered: October 24, 2003 Published: October 28, 2003 Issue: There...

thttpd 2.2x - 'defang' Remote Buffer Overflow (PoC)

/ source: https://www.securityfocus.com/bid/8906/info A vulnerability has been reported in thttpd that may allow a remote attacker to execute arbitrary code on vulnerable host. The issue is reported to exist due to a lack of bounds checking by software, leading to a buffer overflow condition. The...

mIRC 6.1 ""IRC"" Protocol Remote Buffer Overflow Exploit

No description provided by source. / remote mirc 6.11 exploit by blasty TESTED ON: Windows XP No SP, Ducth Build: 2600.xpclient.010817-1148 A few days ago, I saw a mIRC advisory on packetstorm 1 and was surprised nobody had written an exploit yet. So I decided to start writing one. Since this was...

CVE-2003-0743

Heap-based buffer overflow in smtpin.c for Exim 3 exim3 before 3.36 and Exim 4 exim4 before 4.21 may allow remote attackers to execute arbitrary code via an invalid 1 HELO or 2 EHLO argument with a large number of spaces followed by a NULL character and a newline, which is not properly trimmed...

CVE-2003-0865

Heap-based buffer overflow in readstring of httpget.c for mpg123 0.59r and 0.59s allows remote attackers to execute arbitrary code via a long request...

CVE-2003-0826

lsh daemon lshd does not properly return from certain functions in 1 readline.c, 2 channelcommands.c, or 3 clientkeyexchange.c when long input is provided, which could allow remote attackers to execute arbitrary code via a heap-based buffer overflow attack...

CVE-2003-0826

lsh daemon lshd does not properly return from certain functions in 1 readline.c, 2 channelcommands.c, or 3 clientkeyexchange.c when long input is provided, which could allow remote attackers to execute arbitrary code via a heap-based buffer overflow attack...

Sendmail prescan() buffer overflow vulnerability

Overview Sendmail contains a buffer overflow vulnerability in code that parses email addresses. This vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service on a vulnerable system. Description Sendmail is a widely used mail transfer agent MTA. There is a...

CVE-2003-0471

Buffer overflow in WebAdmin.exe for WebAdmin allows remote attackers to execute arbitrary code via an HTTP request to WebAdmin.dll with a long USER argument...

CVE-2003-0407

Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 allows remote attackers to execute arbitrary code via a long connection string...

CVE-2003-0435

Buffer overflow in netswapscore for typespeed 0.4.1 and earlier allows remote attackers to execute arbitrary code...

[SECURITY] [DSA-322-1] New typespeed packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 322-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 16th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-321-1] New radiusd-cistron packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 321-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 13th, 2003 http://www.debian.org/security/faq -...

DSA-321 radiusd-cistron - buffer overflow

Bulletin has no description...

CVE-2003-0376

Buffer overflow in Eudora 5.2.1 allows remote attackers to cause a denial of service crash and failed restart and possibly execute arbitrary code via an Attachment Converted argument with a large number of . dot characters...

[SECURITY] [DSA 295-1] New pptpd packages fix remote root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 295-1 [email protected] http://www.debian.org/security/ Martin Schulze April 30th, 2003 http://www.debian.org/security/faq -...

[UNIX] Monkey HTTP Daemon Remote Buffer Overflow

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion In the US? Contact Beyond Security at our new California office housewarming rates on automated network vulnerability scanning. We also...

CVE-2002-0640

Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses during challenge response authentication when OpenBSD is using PAM modules with interactive keyboard authentication PAMAuthenticationViaKbdInt...

CVE-2002-0033

Heap-based buffer overflow in cfsdcalloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name...

IBM Tivoli Firewall Toolbox contains vulnerability

Overview A vulnerability in the Tivoli Firewall Toolbox version 1.2 has been discovered that can lead to remote unauthorized compromise of the environment with in the firewall system. Description A buffer overflow vulnerability in the communications layer of the Tivoli Firewall Toolbox has been...