Format string and buffer overflow bugs in Posadis DNS Server

Format string bug on logging without syslog facility...

WebTrends Reporting Center for Windows 4.0 d - GET Buffer Overflow

WebTrends Reporting Center for Windows 4.0 d - GET Buffer Overflow source: https://www.securityfocus.com/bid/4531/info WebTrends Reporting Center is used to organize and present usage information for multiple server web environments. Reporting Center is available for Windows NT and 2000, Linux an...

[SECURITY] [DSA-127-1] buffer overflow in xpilot-server

Package : xpilot Problem type : remote buffer overflow Debian-specific: no An internal audit by the xpilot a multi-player tactical manoeuvring game for X maintainers revealed a buffer overflow in xpilot server. This overflow can be abused by remote attackers to gain access to the server under whi...

3CDaemon 2.0 - Buffer Overflow (1)

3CDaemon 2.0 - Buffer Overflow 1 // source: https://www.securityfocus.com/bid/4638/info 3CDaemon is an FTP server developed by Dan Gill of 3Com. Reportedly, it is possible to initiate a buffer overflow on a host running 3CDaemon. Submitting an unusually large amount of data to the ftp server, cou...

Microsoft Internet Information Server (IIS) vulnerable to buffer overflow via inaccurate checking of delimiters in HTTP header fields

Overview A buffer overflow in IIS could allow an intruder to execute arbitrary code the the privileges of the ASP ISAPI extension. Description Like all web servers, IIS parses HTTP headers and decomposes them into the constituent parts. As part of this processing, IIS checks for delimiters that a...

ISS BlackICE / RealSecure Large ICMP Ping Packet Overflow DoS

The remote host appears to be running either BlackICE or RealSecure Server Sensor. This application has a remote buffer overflow vulnerability. It was possible to crash the application by flooding it with 10 KB ping packets. A remote attacker could exploit this to cause a denial of service, or...

FreeBSD-SA-02:17.mod_frontpage

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:17 Security Advisory FreeBSD, Inc. Topic: modfrontpage port contains exploitable buffer overflow Category: ports Module: modfrontpage Announced: 2002-03-12 Credits: Marti...

CVE-1999-1321

Buffer overflow in ssh 1.2.26 client with Kerberos V enabled could allow remote attackers to cause a denial of service or execute arbitrary commands via a long DNS hostname that is not properly handled during TGT ticket passing...

[SECURITY] [DSA 116-1] New CFS packages fix security problems

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 116-1 [email protected] http://www.debian.org/security/ Martin Schulze March 2nd, 2002 -...

security/cfs -- buffer overflow

Debian reports: Zorgon found several buffer overflows in cfsd, a daemon that pushes encryption services into the Unixtm file system. We are not yet sure if these overflows can successfully be exploited to gain root access to the machine running the CFS daemon. However, since cfsd can easily be...

Tower Toppler 0.99.1 - 'Display' Local Buffer Overflow

source: https://www.securityfocus.com/bid/7028/info It has been reported that a buffer overflow exists in Tower Toppler. A local user may be able to exploit this issue to execute code with the privileges of the toppler program. !/usr/bin/perl [email protected] playing a game hi bob $len = 1024;...

Oracle9i Application Server Apache PL/SQL module vulnerable to buffer overflow via cache directory name

Overview A buffer overflow vulnerability exists in the Apache Procedural Language/Structured Query Language PL/SQL module used by Oracle9i Application Server iAS. This vulnerability could allow an unauthenticated remote attacker to cause a denial-of-service or execute arbitrary code on the system...

Buffer Overflow in Microsoft Internet Explorer

Internet Security Systems Alert February 25, 2002 Buffer Overflow in Microsoft Internet Explorer Synopsis: ISS X-Force has learned of a buffer overflow vulnerability in Microsoft Internet Explorer versions 5.5 and 6.0. This vulnerability may be exploited by delivering specially-crafted HTML code ...

Century Software Term For Linux 6.27.869 - Command Line Buffer Overflow

Century Software Term For Linux 6.27.869 - Command Line Buffer Overflow // source: https://www.securityfocus.com/bid/4174/info Term is a commercially available software package for Unix and Linux operating systems. It is distributed and maintained by Century Software. Under some circumstances, it...

Squid 2.0-4 - Cache FTP Proxy URL Buffer Overflow

Squid 2.0-4 - Cache FTP Proxy URL Buffer Overflow // source: https://www.securityfocus.com/bid/4148/info A buffer overflow exists in the Squid proxy server's FTP URL handling. If a user has the ability to use the Squid process to proxy FTP requests, it may be possible for the user make a maliciou...

Squid 2.0-4 - Cache FTP Proxy URL Buffer Overflow

// source: https://www.securityfocus.com/bid/4148/info A buffer overflow exists in the Squid proxy server's FTP URL handling. If a user has the ability to use the Squid process to proxy FTP requests, it may be possible for the user make a malicious request. By sending a custom-crafted ftp:// URL...

[SECURITY] [DSA 112-1] New hanterm packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 112-1 [email protected] http://www.debian.org/security/ Martin Schulze February 16th, 2002 - -------------------------------------------------------------------------- Package : hanterm...

Avirt Gateway 4.2 remote buffer overflow: proof of concept

Avirt Gateway 4.2 remote buffer overflow: proof of concept Release Date: February 12, 2002 Systems tested: Avirt Gateway v4.2 build 4807 on Windows 2000, SP2 These products can be found at vendor Avirt's web site: http://www.avirt.com Description: The telnet proxy of the Avirt Gateway v4.2 is...

NetWin CWMail.exe Buffer Overflow

NGSSoftware Insight Security Research Advisory Name: NetWin CWMail.exe Buffer Overflow Systems Affected: IIS4 & IIS5 Severity: High Vendor URL: http://www.netwinsite.com Author: Mark Litchfield [email protected] Date: 13th February 2002 Advisory number: NISR12022002 Description CWMail is a ful...

Переполнение буфера в Apple Quick Time (buffer overflow)

Переполнение буфера при обработке Content-Type:...