[EXPL] STMKFont Exploit Code Released

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion In the US? Contact Beyond Security at our new California office housewarming rates on automated network vulnerability scanning. We also...

Moderate: Red Hat Security Advisory: : Updated Webalizer packages fix vulnerability

Updated Webalizer packages which fix an obscure buffer overflow bug in the DNS resolver code are available for Red Hat Linux 7.2. The Webalizer is a Web server log file analysis program which produces detailed usage reports in HTML format. A buffer overflow in Webalizer versions prior to 2.01-10,...

DSA-175 syslog-ng - buffer overflow

Bulletin has no description...

[SECURITY] [DSA 140-2] New libpng packages fix potential buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 140-2 [email protected] http://www.debian.org/security/ Martin Schulze August 5th, 2002 - -------------------------------------------------------------------------- Package : libpng, libpng3...

Microsoft Mediaplayer ediaplayer .ASX/.NSC/.ASF buffer overflow, .WMS code execution

Oversized tag in .asx file causes buffer overflows. Skins allow code execution on client side with .WMS files...

ATPhttpd 0.4b - Remote Buffer Overflow

ATPhttpd 0.4b - Remote Buffer Overflow / source: https://www.securityfocus.com/bid/5215/info ATPhttpd is a small webserver designed for high-performance. It was developed by Yann Ramin. There exist several exploitable buffer overflow conditions in ATPhttpd. Remote attackers may levarage these...

Переполнение буфера в mod_ssl под Apache (buffer overflow)

Переполнение буфера при работе с идентификатором сеанса...

[SECURITY] [DSA-111-1] Multiple SNMP vulnerabilities

Package : ucd-snmp Problem type : remote exploit Debian-specific: no CERT Advisory : CA-2002-03 The Secure Programming Group of the Oulu University did a study on SNMP implementations and uncovered multiple problems which can cause problems ranging from Denial of Service attacks to remote exploit...

Security Update: [CSSA-2001-SCO.38] OpenServer: lpstat buffer overflow

To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: OpenServer: lpstat buffer overflow Advisory number: CSSA-2001-SCO.38 Issue date: 2001 December 7 Cross reference: sse072 1. Problem Description Even with sse072,...

[SECURITY] [DSA-089-1] several problems in icecast-server

Package : icecast-server Problem type : remote root exploit and others Debian-specific: no The icecast-server a streaming music server package as distributed in Debian GNU/Linux 2.2 has several security problems: if a client added a / after the filename of a file to be downloaded the server would...

Дырка в innfeed (buffer overflow)

Классическое переполнение буфера дает возможность получения uid news и возможно uid root пользователям имеющим gid news...

Переполнение буфера в Statistics Server

Переполнение буфера в одном из CGI-компонентов позволяет выполнение кода с привилегией сервера...

innd-2.2.2.txt

Newest innd 2.2.2, probably the most popular usenet news server as well as previous versions contain remotely exploitable, trivial on-stack buffer overflow in control articles handler. Offending piece of code in innd/art.c, function ARTcancelverify: if !EQlocal, p files = NULL; voidsprintfbuff,...

[SECURITY] New version of splitvt released (update)

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman June 5, 2000 - ------------------------------------------------------------------------ Package: splitvt Vulnerability: local root...

Re: An Analysis of the TACACS+ Protocol and its Implementations

-----BEGIN PGP SIGNED MESSAGE----- Hello, We acknowledge that a buffer overflow mentioned in the analysis by Solar Designer is indeed present in an unsupported free version of TACACS+ server officially it is a "developer's kit" and can be found at...

wu.ftpd buffer overflow

...

CVE-1999-0748

Buffer overflows in Red Hat net-tools package...

[SECURITY] Current versions of lpr fixes security problem

We have received reports that buffer overflows in lprm may allow users to gain root access to the local system. We recommend that you use the binaries from hamm or any newer release. dpkg -i file.deb will install the referred file. Debian GNU/Linux 2.0 alias hamm Source archives:...