4308 matches found
DSA-525 apache - buffer overflow
Bulletin has no description...
ISC DHCP contains a stack buffer overflow vulnerability in handling log lines containing ASCII characters only
Overview The Internet Systems Consortium's ISC Dynamic Host Configuration Protocol DHCP 3 application contains a buffer overflow vulnerability. Exploitation of this vulnerability can cause a denial of service condition to the DHCP Daemon DHCPD and may permit a remote attacker to execute arbitrary...
ISC DHCP contains C Includes that define vsnprintf() to vsprintf() creating potential buffer overflow conditions
Overview The Internet Systems Consortium's ISC Dynamic Host Configuration Protocol DHCP 3 application contains a vulnerability that introduces several potential buffer overflow conditions. Exploitation of this vulnerability can cause a denial-of-service condition to the DHCP Daemon DHCPD and may...
[Full-Disclosure] [SECURITY] [DSA 523-1] New www-sql packages fix buffer overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 523-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 19th, 2004 http://www.debian.org/security/faq -...
DSA-523 www-sql - buffer overflow
Bulletin has no description...
Winagent buffer overflow
Buffer overflow on oversized filename...
CVE-2004-0227
Buffer overflow in the zms script in ZoneMinder before 1.19.2 may allow a remote attacker to execute arbitrary code via a long query string...
DSA-517 cvs - buffer overflow
Bulletin has no description...
cvs
New cvs packages that have been upgraded to cvs-1.11.17 are available for Slackware 8.1, 9.0, 9.1, and -current to fix various security issues. Sites running a CVS server should upgrade to the new CVS package right away. More details about the issues may be found in the Common Vulnerabilities and...
[SECURITY] [DSA 516-1] New odbc-postgresql packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 516-1 [email protected] http://www.debian.org/security/ Martin Schulze June 7th, 2004 http://www.debian.org/security/faq -...
TildeSlash Monit 1-4 - Authentication Handling Buffer Overflow
// source: https://www.securityfocus.com/bid/10581/info It is reported that TildeSlash Monit is vulnerable to a buffer overflow vulnerability during authentication handling. This issue arises due to a failure of the affected application to properly handle user-supplied strings when copying them...
mysql -- mysql_real_connect buffer overflow vulnerability
The mysqlrealconnect function doesn't properly handle DNS replies by copying the IP address into a buffer without any length checking. A specially crafted DNS reply may therefore be used to cause a buffer overflow on affected systems. Note that whether this issue can be exploitable depends on the...
MDKSA-2004:053 - Updated xpcd package fix vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrakelinux Security Update Advisory Package name: xpcd Advisory ID: MDKSA-2004:053 Date: June 1st, 2004 Affected versions: 10.0, 9.2 Problem Description: A vulnerability in xpcd-svga, part of xpcd, was discovered by Jaguar. xpcd-svga uses svgalib t...
CVE-2003-0719
Buffer overflow in the Private Communications Transport PCT protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via PCT...
Important: Red Hat Security Advisory: lha security update
An updated LHA package that fixes several security vulnerabilities is now available. LHA is an archiving and compression utility for LHarc format archives. Ulf Harnhammar discovered two stack buffer overflows and two directory traversal flaws in LHA. An attacker could exploit the buffer overflows...
Buffer Overflow in Firebird
Background Firebird is an open source relational database that runs on Linux, Windows, and various UNIX systems. Description A buffer overflow exists in three Firebird binaries gdsinetserver, gdslockmgr, and gdsdrop that is exploitable by setting a large value to the INTERBASE environment variabl...
CVE-2004-0396
Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines...
ZoneMinder buffer overflow
No description provided...
ActivePerl 5.x Cygwin 1.5.x - System Function Call Buffer Overflow
ActivePerl 5.x Cygwin 1.5.x - System Function Call Buffer Overflow source: https://www.securityfocus.com/bid/10375/info ActiveState Perl and Perl for cygwin are both reported to be prone to a buffer overflow vulnerability. The issue is reported to exist due to a lack of sufficient bounds checking...
Multiple Symantec firewall products fail to properly process NBNS response packets
Overview There is a buffer overflow vulnerability in multiple Symantec firewall products in which attempts to process a specially crafted NetBIOS Name Service NBNS response packet could allow an unauthenticated, remote attacker to execute arbitrary code with kernel privileges. Description Symante...