Microsoft Internet Explorer COM Object Instantiation Buffer Overflow Vulnerability

Description Microsoft Internet Explorer is prone to a buffer-overflow vulnerability that is exposed when certain COM objects are instantiated as ActiveX controls. A malicious webpage could pass content to these objects to trigger memory corruption. Successful exploits could let remote attackers...

Lantronix Secure Console Server SCS820SCS1620 - Multiple Local Vulnerabilities

Lantronix Secure Console Server SCS820SCS1620 - Multiple Local Vulnerabilities source: https://www.securityfocus.com/bid/14486/info Lantronix Secure Console Server SCS820/SCS1620 devices are susceptible to multiple local vulnerabilities. The first issue is an insecure default permission...

Lantronix Secure Console Server SCS820/SCS1620 - Multiple Local Vulnerabilities

source: https://www.securityfocus.com/bid/14486/info Lantronix Secure Console Server SCS820/SCS1620 devices are susceptible to multiple local vulnerabilities. The first issue is an insecure default permission vulnerability. Attackers may exploit this vulnerability to write data to arbitrary files...

Computer Associates BrightStor ARCserve Backup Agents vulnerable to buffer overflow

Overview Several Computer Associates BrightStor ARCserve Backup Agents contain a buffer overflow, which may allow a remote attacker to execute arbitrary code. Description Computer Associates BrightStor ARCserve Backup is a cross-platform backup and recovery application. Backup Agents are availabl...

IBM Lotus Domino Server time/date Fields Remote Overflow

According to its banner, the remote host is running a version of Lotus Domino Server that is prone to a buffer overflow attack triggered by submitting a POST request with large amounts of data for certain date / time fields. A remote attacker can reportedly exploit this issue to crash the web...

Core Security Technologies Advisory 2005.0629

Core Security Technologies - Corelabs Advisory http://www.coresecurity.com/corelabs/ MailEnable Buffer Overflow Vulnerability Date Published: 2005-07-12 Last Update: 2005-07-12 Advisory ID: CORE-2005-0629 Bugtraq ID: None currently assigned CVE Name: None currently assigned Title: MailEnable Buff...

CORE-2005-0629: MailEnable Buffer Overflow Vulnerability

Core Security Technologies - Corelabs Advisory http://www.coresecurity.com/corelabs/ MailEnable Buffer Overflow Vulnerability Date Published: 2005-07-12 Last Update: 2005-07-12 Advisory ID: CORE-2005-0629 Bugtraq ID: None currently assigned CVE Name: None currently assigned Title: MailEnable Buff...

[VulnWatch] Buffer overflow vulnerability in VERITAS Software Backup Exec Web Administration Console (BEWAC)

Mark Litchfield of NGSSoftware has discovered a high risk vulnerability in the in VERITAS Software Backup Exec Web Administration Console BEWAC which can allow for remote code execution. Affected Products include - Backup Exec 10.0 for Windows Servers rev. 5484 Backup Exec 9.1 for Windows Servers...

CVE-2005-1212

CVE-2005-1212 is a buffer overflow in Microsoft Step-by-Step Interactive Training (orun32.exe). A crafted bookmark link file with a long User field in extensions .cbo/.cbl/.cbm allows remote code execution, running with the caller’s privileges. The issue affects Step-by-Step Interactive Training ...

MiniShare Webserver HTTP GET Request Remote Overflow

MiniShare 1.4.1 and prior versions are affected by a buffer overflow flaw. A remote attacker could execute arbitrary commands by sending a specially crafted file name in a the GET request. Version 1.3.4 and below do not seem to be vulnerable. written by Gareth Phillips - SensePost PTY ltd...

CVE-2005-0763

Buffer overflow in Midnight Commander mc 4.5.55 and earlier may allow attackers to execute arbitrary code...

CVE-2005-0469

Buffer overflow in the slcaddreply function in various BSD-based Telnet clients, when handling LINEMODE suboptions, allows remote attackers to execute arbitrary code via a reply with a large number of Set Local Character SLC commands...

CVS

New CVS packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, and -current to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0753 Here are the details from t...

Mandrake Linux Security Advisory : libcdaudio1 (MDKSA-2005:075)

A buffer overflow bug was found by Joseph VanAndel in the way that grip handles data returned by CDDB servers. If a user connected to a malicious CDDB server, an attacker could execute arbitrary code on the user's machine. This same vulnerability is present in the libcdaudio1 code. The updated...

CVE-2005-1187

Heap-based buffer overflow in WinHex 12.05 SR-14, and possibly other versions, may allow attackers to execute arbitrary code via a long file name argument. NOTE: since this overflow is in the command line of an unprivileged program, it is highly likely that this is not a vulnerability...

WheresJames Webcam Publisher Beta 2.0.0014 Remote Buffer Over

Exploit for unknown platform in category remote exploits ================================================================= WheresJames Webcam Publisher Beta 2.0.0014 Remote Buffer Overflow ================================================================= / WheresJames Webcam Publisher Beta 2.0.00...

iDEFENSE Security Advisory 04.11.05: Computer Associates BrightStor ARCserve Backup UniversalAgent Buffer Overflow

Computer Associates BrightStor ARCserve Backup UniversalAgent Buffer Overflow iDEFENSE Security Advisory 04.11.05 www.idefense.com/application/poi/display?id=232&type=vulnerabilities April 11, 2005 I. BACKGROUND BrightStor ARCserve Backup provides backup and restore protection for all classes of...

Microsoft Internet Explorer Malformed URI Buffer Overflow Vulnerability

Description A buffer overflow vulnerability is reported in Microsoft Internet Explorer. This issue is due to insufficient boundary verification of user-supplied input data causing a fixed-sized memory buffer to be overrun when attempting to copy data into it. This vulnerability allows...

Microsoft Jet Database - 'msjet40.dll' DB File Buffer Overflow

/ -------------------------------------- Microsoft Jet msjet40.dll Exploit -------------------------------------- Author: ---------- S.Pearson Computer Terrorism UK www.computerterrorism.com 11/04/2005 Credits: ---------- Hexview original advisory Tested on: ------------- Windows 2000 SP4 english...

AN HTTPD 1.42 - Arbitrary Log Content Injection

source: https://www.securityfocus.com/bid/13069/info AN HTTPD is affected by a vulnerability that may allow remote attacker to inject arbitrary content in to the log file. This issue arises due to a failure of input validation. Corruption of logs may result in concealing attacks and/or misleading...