178 matches found
EUVD-2005-1464
Multiple buffer overflows in the 1 SIP, 2 CMIP, 3 CMP, 4 CMS, 5 CRMF, 6 ESS, 7 OCSP, 8 X.509, 9 ISIS, 10 DISTCC, 11 FCELS, 12 Q.931, 13 NCP, 14 TCAP, 15 ISUP, 16 MEGACO, 17 PKIX1Explitit, 18 PKIXQualified, 19 Presentation dissectors in Ethereal before 0.10.11 allow remote attackers to cause a...
CVE-2005-0101
Buffer overflow in the socketgetline function in Newspost 2.1.1 and earlier allows remote malicious NNTP servers to execute arbitrary code via a long string without a newline character...
squid -- buffer overflow in WCCP recvfrom() call
According to the Squid Proxy Cache Security Update Advisory SQUID-2005:3, The WCCP recvfrom call accepts more data than will fit in the allocated buffer. An attacker may send a larger-than-normal WCCP message to Squid and overflow this buffer. Severity: The bug is important because it allows remo...
CVE-2004-0902
Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of service application crash or execute arbitrary code via 1 the "Send page" functionality, 2 certain responses from a...
Debian DSA-624-1 : zip - buffer overflow
A buffer overflow has been discovered in zip, the archiver for .zip files. When doing recursive folder compression the program did not check the resulting path length, which would lead to memory being overwritten. A malicious person could convince a user to create an archive containing a speciall...
Jabber Server 2.0 - Multiple Remote Buffer Overflow Vulnerabilities
source: https://www.securityfocus.com/bid/11741/info Multiple remote buffer overflow vulnerabilities affect the Jabber Server. These issues are due to a failure of the application to properly validate the length of user-supplied strings prior to copying them into finite process buffers. An attack...
RHEL 2.1 / 3 : libxml2 (RHSA-2004:615)
An updated libxml2 package that fixes multiple buffer overflows is now available. libxml2 is a library for manipulating XML files. Multiple buffer overflow bugs have been found in libxml2 versions prior to 2.6.14. If an attacker can trick a user into passing a specially crafted FTP URL or FTP pro...
Debian DSA-571-1 : libpng3 - buffer overflows, integer overflow
Several integer overflows have been discovered by its upstream developers in libpng, a commonly used library to display PNG graphics. They could be exploited to cause arbitrary code to be executed when a specially crafted PNG image is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2004-0500
Buffer overflow in the MSN protocol plugins 1 object.c and 2 slp.c for Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via MSNSLP protocol messages that are not properly handled in a strncpy call...
freebsd/x86 connect 102 bytes
Exploit for freebsd/x86 platform in category shellcode ============================= freebsd/x86 connect 102 bytes ============================= ; Passive Connection Shellcode ; ; Coded by Scrippie - email protected - http://b0f.freebsd.lublin.pl ; Buffer0verfl0w Security ; Why? This evades...
GLSA-200405-21 : Midnight Commander: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200405-21 Midnight Commander: Multiple vulnerabilities Numerous security issues have been discovered in Midnight Commander, including several buffer overflow vulnerabilities, multiple vulnerabilities in the handling of temporary...
AIX 5.2 : IY55682
The remote host is missing AIX Critical Security Patch number IY55682 SECURITY: Possible buffer overflow in putlvcb command. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...
Buffer overflow in sarad
I have found several buffer overflows in the sarad program used to serve the British National Corpus http://www.natcorp.ox.ac.uk/SARA/. At least one I didn't check the others too closely allows execution of arbitrary code over the network with the rights of the daemon which is supposed to be a...
rftpd buffer overflow
No description provided...
Windows NT/2000/XP/2003 RPC buffer overflow
Multiple buffer overflows during RPC request parsing via TCP/135 and another RPC ports...
CVE-2003-0648
Multiple buffer overflows in vfte, based on FTE, before 0.50, allow local users to execute arbitrary code...
PicoPhone Internet Phone 1.63 - Remote Buffer Overflow
PicoPhone Internet Phone 1.63 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/9969/info It has been reported that Picophone is prone to a remote buffer overflow vulnerability. This issue is due to the application failing to verify the size of user input before storing it in a...
CVE-2003-1461
Buffer overflow in rwrite for HP-UX 11.0 could allow local users to execute arbitrary code via a long argument. NOTE: the vendor was unable to reproduce the problem on a system that had been patched for an lp vulnerability CVE-2002-1473...
[SECURITY] [DSA 297-1] New snort packages fix remote root exploits
-------------------------------------------------------------------------- Debian Security Advisory DSA 297-1 [email protected] http://www.debian.org/security/ Martin Schulze May 1st, 2003 http://www.debian.org/security/faq -...