ISS Security Brief: Remote Buffer Overflow Vulnerability in Sun RPC

Internet Security Systems Security Brief July 31, 2002 Remote Buffer Overflow Vulnerability in Sun RPC Synopsis: Internet Security Systems ISS X-Force has discovered a buffer overflow in the xdrarray filter primitive. This function is a part of the Sun RPC library, and it is used in multiple RPC...

Trillian 0.x IRC Module - Remote Buffer Overflow

Trillian 0.x IRC Module - Remote Buffer Overflow source: https://www.securityfocus.com/bid/5373/info A buffer overflow condition has been reported in the Trillian IRC module. The condition is due to insecure handling of data extracted from server responses. An attacker in control of a malicious...

Trillian 0.x IRC Module - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/5373/info A buffer overflow condition has been reported in the Trillian IRC module. The condition is due to insecure handling of data extracted from server responses. An attacker in control of a malicious server may exploit vulnerable clients who have...

Important: Red Hat Security Advisory: bind security update

Version 9 of ISC BIND, prior to version 9.2.1, contained a denial of service DoS attack vulnerability. Various versions of the ISC BIND resolver libraries are vulnerable to a buffer overflow attack. ISC BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocol...

Apache mod_ssl < 2.8.7 OpenSSL - 'OpenFuck.c' Remote Buffer Overflow

/ source: https://www.securityfocus.com/bid/5363/info A buffer-overflow vulnerability has been reported in some versions of OpenSSL. The issue occurs in the handling of the client key value during the negotiation of the SSLv2 protocol. A malicious client may be able to exploit this vulnerability ...

Microsoft Windows Media Player 6/7 - Filename Buffer Overflow

source: https://www.securityfocus.com/bid/5357/info The Microsoft Windows Media Player executable is prone to a buffer overflow condition when invoked with an oversized filename. Since the program is executed in the context of the user invoking it, it is not likely that a local attacker could...

MS02-037: Microsoft Exchange EHLO Long Hostname Overflow

A security vulnerability results because of an unchecked buffer in the IMC code that generates the response to the EHLO protocol command. If the buffer were overrun with data it would result in either the failure of the IMC or could allow the attacker to run code in the security context of the IM...

CVE-2002-0743

mail and mailx in AIX 4.3.3 core dump when called with a very long argument, an indication of a buffer overflow...

Buffer overflow in Microsoft Exchange

Buffer overflow on EHELO reply parsing...

Microsoft SQL Server contains buffer overflow in code used to process "BULK INSERT" queries

Overview The Microsoft SQL Server contains a buffer overflow vulnerability that may allow remote attackers to execute arbitrary code with system privileges. Description The Microsoft SQL Server contains a buffer overflow vulnerability in the code used to process "Bulk Insert" queries. Bulk Insert...

CodeBlue 5.1 - SMTP Response Buffer Overflow

CodeBlue 5.1 - SMTP Response Buffer Overflow // source: https://www.securityfocus.com/bid/5300/info CodeBlue is an Apache httpd log scanning utility that attempts to contact the administrators of hosts infected with worms. A buffer overflow vulnerability has been reported in CodeBlue. The conditi...

CodeBlue 5.1 - SMTP Response Buffer Overflow

// source: https://www.securityfocus.com/bid/5300/info CodeBlue is an Apache httpd log scanning utility that attempts to contact the administrators of hosts infected with worms. A buffer overflow vulnerability has been reported in CodeBlue. The condition occurs when processing responses from SMTP...

Buffer overflow in WWW Offline Explorer

Buffer overflow on negative Content-Length...

[SPSadvisory#48]RealONE Player Gold / RealJukebox2 Buffer Overflow

SPS Advisory 48 RealONE Player Gold / RealJukebox2 Buffer Overflow UNYUN [email protected] Shadow Penguin Security http://www.shadowpenguin.org -------------------------------------------------------------- Date July. 12, 2002 vulnerable RealONE Player Gold Ver. 6.0.10.505 RealJukebox2 Ver...

Microsoft Internet Information Server (IIS) vulnerable to buffer overflow via malformed server-side include directive

Overview A buffer overflow in the code that processes server-side include files on IIS 4.0 and IIS 5.0 could allow an intruder to execute code with the privileges of the web server. Description A buffer overflow exists in the code that processes server side include directives on IIS versions 4 an...

Real Networks RealJukebox 1.0.2RealOne 6.0.10 Player Gold - Skinfile Buffer Overflow

Real Networks RealJukebox 1.0.2RealOne 6.0.10 Player Gold - Skinfile Buffer Overflow // source: https://www.securityfocus.com/bid/5217/info Real Software has announced a vulnerability in RealJukebox2 and Real Player Gold. A buffer overflow condition exists due to insufficient bounds checking of...

Sun iPlanet Web Server Buffer Overflow (#NISR09072002)

NGSSoftware Insight Security Research Advisory Name: iPlanet Search Buffer Overflow Systems: iWS 6.0 and iWS 4.1 Severity: High Risk if Search enabled Category: Remote Buffer Overrun Vulnerability Vendor URL: http://www.iplanet.com/ Author: David Litchfield [email protected] Advisory URL:...

CVE-2002-0651

Buffer overflow in the DNS resolver code used in libc, glibc, and libbind, as derived from ISC BIND, allows remote malicious DNS servers to cause a denial of service and possibly execute arbitrary code via the stub resolvers...

HP Tru64/OSF1 DXTerm - Local Buffer Overflow

source: https://www.securityfocus.com/bid/5746/info The HP Tru64/OSF1 dxterm utility is prone to a locally exploitable buffer overflow condition. This issue is due to insufficient checking of command line input supplied via the "-xrm" parameter. This parameter serves the same purpose as the...

Foundstone Advisory - Buffer Overflow in AnalogX Proxy

---------------------------------------------------------------------- FS Advisory ID: FS-070102-23-AXPR Release Date: July 1st, 2002 Product: AnalogX Proxy Vendor: AnalogX http://www.analogx.com Vendor Advisory: See vendor web site Type: Buffer Overflow Severity: High Author: Robin Keir...