Mandrake Linux Security Advisory : squid (MDKSA-2005:034)

More vulnerabilities were discovered in the squid server : The LDAP handling of search filters was inadequate which could be abused to allow logins using severial variants of a single login name, possibly bypassing explicit access controls CVE-2005-0173. Minor problems in the HTTP header parsing...

Symantec products vulnerable to buffer overflow via a specially crafted UPX file

Overview The Symantec AntiVirus Library DEC2EXE component is vulnerable to remote arbitrary code execution. Description The Symantec AntiVirus Library is used in many Symantec and third-party virus scanning products, including Symantec Norton Antivirus and Symantec BrightMail AntiSpam.The AntiVir...

USN-72-1: Perl vulnerabilities

Two exploitable vulnerabilities involving setuid-enabled perl scripts have been discovered. The package "perl-suid" provides a wrapper around perl which allows to use setuid-root perl scripts, i.e. user-callable Perl scripts which have full root privileges. Previous versions allowed users to...

Fedora Core 3 : libtiff-3.6.1-9.fc3 (2005-598)

The updated libtiff package fixes an integer overflow which could lead to a buffer overflow in the tiffdump utility. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

Oracle wrapped procedure overflow (#NISR2122004J)

NGSSoftware Insight Security Research Advisory Name: Oracle 10g/9i wrapped procedure buffer overflow Systems Affected: Oracle 10g/9i on all operating systems Severity: High risk Vendor URL: http://www.oracle.com/ Author: David Litchfield davidl at ngssoftware.com Relates to:...

SUSE-SA:2004:043: cyrus-imapd

The remote host is missing the patch for the advisory SUSE-SA:2004:043 cyrus-imapd. Stefan Esser reported various bugs within the Cyrus IMAP Server. These include buffer overflows and out-of-bounds memory access which could allow remote attackers to execute arbitrary commands as root. The bugs...

Gaucho buffer overflow

Buffer overflow on oversized Content-Length: field...

ISS Protection Brief: Entrust Libkmp Library Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Protection Brief August 26, 2004 Entrust LibKmp Library Buffer Overflow Summary: ISS X-Force has discovered a flaw in the Entrust LibKmp ISAKMP library. This library is used by multiple VPN vendors to facilitate IKE key exchange for...

Limited buffer overflow in Painkiller 1.31

Luigi Auriemma Application: Painkiller http://www.painkillergame.com Versions: = 1.3.1 Platforms: Windows Bug: memory corruption with limited code execution Risk: medium/high Exploitation: remote, versus server Date: 24 August 2004 Author: Luigi Auriemma e-mail: [email protected] web:...

[security bulletin] SSRT4782 rev. 0 HP-UX CIFS Server potential remote root access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01062 REVISION: 0 SSRT4782 rev. 0 HP-UX CIFS Server potential remote root access ----------------------------------------------------------------- NOTICE: There are no restrictions for distribution of this Bulletin provided...

SUSE-SA:2002:046: pine

The remote host is missing the patch for the advisory SUSE-SA:2002:046 pine. Pine, Program for Internet News and Email, is a well known and widely used eMail client. While parsing and escaping characters of eMail addresses pine does not allocate enough memory for storing the escaped mailbox part ...

Solaris 2.6 (sparc) : 108333-02

SunOS 5.6: jserver buffer overflow. Date this patch was last updated by Sun : Aug/16/00 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

MDaemon buffer overflow

Buffer overflow if FROM2Raw.exe CGI is used...

CVE-2003-0518

The screen saver in MacOS X allows users with physical access to cause the screen saver to crash and gain access to the underlying session via a large number of characters in the password field, possibly triggering a buffer overflow...

CVE-2003-0431

The tvbgetnstringz0 function in Ethereal 0.9.12 and earlier does not properly handle a zero-length buffer size, with unknown consequences...

CVE-2002-0983

IRC client irssi in irssi-text before 0.8.4 allows remote attackers to cause a denial of service crash via an IRC channel that has a long topic followed by a certain string, possibly triggering a buffer overflow...

RUS-CERT Advisory 2002-08:02: Flaw in calloc and similar routines

Flaw in calloc and similar routines Integer overflow can occur during the computation of the memory region size by calloc and similar functions. As a result, the function returns a buffer which is too small, possibly resulting in a subsequent buffer overflow. Who Should Read This Document This...

Alert: Vulnerability in frox transparent ftp proxy.

There is a security hole in all the 0.6.x versions of the frox transparent ftp proxy up to and including version 0.6.6. Version 0.6.7 fixes this vulnerability, and upgrading to this is advised. Development snapshots are also affected up to and including frox-20011031.tar.gz. The vulnerability is...

INN < 2.2.3 verifycancels Option Cancel Request Message Overflow

The remote version of INN is between 2.0 and 2.2.2 There is a known security flaw in this version of INN which may allow an attacker to execute arbitrary code on this server is the option 'verifycancels' is enabled in inn.conf C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

Stake AntiSniff 1.0.1/Researchers 1.0 - DNS Overflow (1)

// source: https://www.securityfocus.com/bid/1207/info Certain versions of @Stake Inc.'s Antisniffer software contain a remotely exploitable buffer overflow. AntiSniff is a program that was released by L0pht Heavy Industries in July of 1999. It attempts, through a number of tests, to determine if...