[Full-Disclosure] iDEFENSE Security Advisory 09.02.04a: Oracle Database Server dbms_system.ksdwrt Buffer Overflow Vulnerability

Oracle Database Server dbmssystem.ksdwrt Buffer Overflow Vulnerability iDEFENSE Security Advisory 09.02.04a www.idefense.com/application/poi/display?id=135&type=vulnerabilities September 2, 2004 I. BACKGROUND Oracle Database Server is a family of database products that range from personal databas...

MailEnable HTTPMail Service Content-Length Header Overflow

The target is running at least one instance of MailEnable that has a flaw in the HTTPMail service MEHTTPS.exe in the Professional and Enterprise Editions. The flaw can be exploited by issuing an HTTP GET with an Content-Length header exceeding 100 bytes, which causes a fixed-length buffer to...

Ipswitch WhatsUp Gold 7.0/8.0 - Notification Instance Name Remote Buffer Overflow

source: https://www.securityfocus.com/bid/11109/info The Ipswitch WhatsUp Gold web interface is prone to a remotely exploitable buffer overflow vulnerability. This may be exploited by authenticated users of the interface to execute arbitrary code in the context of the program. !/usr/bin/perl...

Important: Red Hat Security Advisory: lha security update

An updated lha package that fixes a buffer overflow is now available. LHA is an archiving and compression utility for LHarc format archives. Lukasz Wojtow discovered a stack-based buffer overflow in all versions of lha up to and including version 1.14. A carefully created archive could allow an...

Titan FTP Server Multiple Command Remote Overflow

The remote is running Titan FTP Server. All versions up to and including 3.21 are reported vulnerable to a remote heap overflow in the CWD, STAT or LIST command processing. An attacker may deny service to legitimate users or execute arbitrary code on the remote host. C Tenable Network Security...

DSA-458-3 python2.2 - buffer overflow

Bulletin has no description...

[Full-Disclosure] iDEFENSE Security Advisory 08.25.04: Ipswitch WhatsUp Gold Remote Buffer Overflow Vulnerability

Ipswitch WhatsUp Gold Remote Buffer Overflow Vulnerability iDEFENSE Security Advisory 08.25.04 http://www.idefense.com/application/poi/display?type=vulnerabilities August 25, 2004 I. BACKGROUND Ipswitch WhatsUp Gold is a Microsoft Windows based network monitoring application. More information is...

FreeBSD : nss -- exploitable buffer overflow in SSLv2 protocol handler (129)

The following package needs to be updated: nss @DEPRECATED@ This script has been deprecated by freebsdpkg207f8ff3f69711d881b0000347a4fa7d.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006 Jacques Vidrine and...

GLSA-200407-11 : wv: Buffer overflow vulnerability

The remote host is affected by the vulnerability described in GLSA-200407-11 wv: Buffer overflow vulnerability A use of strcat without proper bounds checking leads to an exploitable buffer overflow. The vulnerable code is executed when wv encounters an unrecognized token, so a specially crafted...

Gaucho 1.4 - Mail Client Buffer Overflow

// // Gaucho Ver 1.4 Mail Client Buffer Overflow Vulnerability // Bind Shell POC Validation Code for English Win2K SP4 // 10 Aug 2004 // // Gaucho is an Email client developed by NakedSoft for Microsoft Windows // platforms. Gaucho supports SMTP, POP3 and other email delivery protocols. // Gaucho...

gaucho140poc.cpp.txt

// // Gaucho Ver 1.4 Mail Client Buffer Overflow Vulnerability // Bind Shell POC Validation Code for English Win2K SP4 // 10 Aug 2004 // // Gaucho is an Email client developed by NakedSoft for Microsoft Windows // platforms. Gaucho supports SMTP, POP3 and other email delivery protocols. // Gaucho...

Mozilla POP3 Mail Handler Remote Overflow (deprecated)

Binary data 1320.prm...

aGSM 2.35 Half-Life Server - Info Response Buffer Overflow (PoC)

aGSM 2.35 Half-Life Server - Info Response Buffer Overflow PoC source: https://www.securityfocus.com/bid/10989/info aGSM is reported prone to a remote buffer overflow vulnerability. The issue presents itself in the aGSM server information parsing routines for Half-Life game servers. Due to a lack...

CVE-2004-0769

Buffer overflow in LHA allows remote attackers to execute arbitrary code via long pathnames in LHarc format 2 headers for a .LHZ archive, as originally demonstrated using the "x" option but also exploitable through "l" and "v", and fixed in header.c, a different issue than CVE-2004-0771...

CVE-2004-0234

Multiple stack-based buffer overflows in the getheader function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long directory or file names in an LHA archive, which triggers the overflow when testi...

CVE-2004-0433

Multiple buffer overflows in the Real-Time Streaming Protocol RTSP client for 1 MPlayer before 1.0pre4 and 2 xine lib xine-lib before 1-rc4, when playing Real RTSP realrtsp streams, allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long URLs, b lo...

CVE-2004-0629

Buffer overflow in the ActiveX component pdf.ocx for Adobe Acrobat 5.0.5 and Acrobat Reader, and possibly other versions, allows remote attackers to execute arbitrary code via a URI for a PDF file with a null terminator %00 followed by a long string...

gv: Exploitable Buffer Overflow

Background gv is a PostScript and PDF viewer for X which provides a user interface for the ghostscript interpreter. Description gv contains a buffer overflow vulnerability where an unsafe sscanf call is used to interpret PDF and PostScript files. Impact By enticing a user to view a malformed PDF ...

AOL Instant Messenger buffer overflow

Buffer overflow in aim:goaway URI handler...

CVE-2004-0210

The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker...