CVE-1999-0069

Solaris ufsrestore buffer overflow...

Microsoft Internet Explorer 4.15 - Registration Wizard Buffer Overflow

Microsoft Internet Explorer 4.15 - Registration Wizard Buffer Overflow Microsoft Internet Explorer 4.1/5.0 for Windows 95/Windows NT 4,Windows 98 Registration Wizard Buffer Overflow Vulnerability source: https://www.securityfocus.com/bid/671/info There is a buffer overflow in the Internet Explore...

Mandriva Linux Mandrake 6.0 Gnome Libs 1.0.8 - espeaker Local Buffer Overflow

Mandriva Linux Mandrake 6.0 Gnome Libs 1.0.8 - espeaker Local Buffer Overflow source: https://www.securityfocus.com/bid/663/info A buffer overflow vulnerabilityin GNOME's shared libraries handling of the 'espeaker' command line argument may allow local users to attack setuid binaries linked again...

FreeBSD-SA-99:06.amd

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-99:06 Security Advisory FreeBSD, Inc. Topic: remote amd attack Category: core Module: kernel Announced: 1999-09-16 Affects: FreeBSD 3.2 and earlier FreeBSD-current before th...

DIGITAL UNIX 4.0 df AIX 4.3.2 CDE 2.1 IRIX 6.5.14 Solaris 7.0 SunOS 4.1.4 - Local Buffer Overflow

DIGITAL UNIX 4.0 df AIX 4.3.2 CDE 2.1 IRIX 6.5.14 Solaris 7.0 SunOS 4.1.4 - Local Buffer Overflow / source: https://www.securityfocus.com/bid/641/info TRU64/DIGITAL UNIX 4.0 d/f,AIX Somehow the overflow is very sensitive to caching of the stack. To see that it really does work, run it in a debugg...

Solaris 7.0 /usr/bin/mail - '-m' Local Buffer Overflow

// source: https://www.securityfocus.com/bid/672/info A buffer overflow vulnerability in the '/usr/bin/mail' program's handling of the '-m' command line argument allows local users to obtain access to the 'mail' group. / Generic Solaris x86 exploit program by Brock Tellier For use against any x86...

Martin Stover Mars NWE 0.99 - Local Buffer Overflow

Martin Stover Mars NWE 0.99 - Local Buffer Overflow // source: https://www.securityfocus.com/bid/617/info There are several buffer overflows in the setuid root components of the Mars Netware Emulator package. They allow for a local root compromise through the overflowing of buffers without bounds...

Martin Stover Mars NWE 0.99 - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/617/info There are several buffer overflows in the setuid root components of the Mars Netware Emulator package. They allow for a local root compromise through the overflowing of buffers without bounds checking. It is to be assumed that all versions pri...

ProFTPD 1.2.0pre4 mkdir Command Directory Name Handling Remote Overflow

It was possible to crash the remote FTP server by creating a large number of nested directories and then trying to upload a file. This issue is known to affect ProFTPD, although other FTP servers may be affected as well. It is likely that a remote attacker can leverage this issue to execute...

libtermcap buffer overflow

...

[SECURITY] New versions of termcap-compat fixes buffer overflow

We have received a report that former versions of libtermcap contained an exploitable buffer overflow. Debian itself is not exploitable by this bug since termcap was abandoned in favour of terminfo long ago. However, if you have compiled your own programs using termcap or have installed third par...

tetrix.1.13.16.bof.txt

Date: Wed, 17 Feb 1999 13:03:45 -0800 From: Steven Hodges To: [email protected] Subject: Tetrix 1.13.16 is Vulnerable I have recently found a buffer overflow in a TetriNet daemon for Linux called "Tetrix". To exploit this bug, you will need a hostname longer than 122 characters, and any method...

rainbow.six.bof.txt

Date: Thu, 11 Feb 1999 17:37:43 -0500 From: Brian Gemberling To: [email protected] Subject: Rainbow Six Buffer Overflow..... Rainbow Six Multiplayer can be crashed with a buffer overflow just like quake2... If someone makes the Nick something like...

wwwcount Count.cgi Remote Overflow

According to its version number, the 'Count.cgi' CGI installed on the remote web server has a buffer overflow vulnerability. A remote attacker could use this to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

MDaemon SMTP HELO Command Remote Overflow DoS

It was possible to crash the remote SMTP server by sending a too long argument to the HELO command. This allows an unauthenticated, remote attacker to deny service to legitimate users of the server. It may also indicate the service is affected by a buffer overflow vulnerability which, if true,...

FakeBO NetBus Handling Code Remote Overflow

The remote host appears to be running FakeBO, a service that mimics backdoors such as Back Orifice and NetBus, monitoring any login attempts. The version of FakeBO running on the remote host has a remote stack- based buffer overflow vulnerability. A remote attacker could exploit this to crash the...

Serv-U CWD Command Overflow

The remote FTP server is affected by a buffer overflow vulnerability. A remote, authenticated user can cause a denial of service via a long 'CWD' or 'LS' command. An attacker could exploit this to crash the affected host. C Tenable Network Security, Inc. include"compat.inc"; if description...

IMail IMAP Server Login Functions Remote Overflow

The remote host is running IMail IMAP server. The installed version is affected by a buffer overflow when handling a long user name, or a long password. An attacker, exploiting this flaw, could cause a denial of service, or possibly execute arbitrary code subject to the permissions of the IMAP...

SCO Open Server 5.0.5 - X Library Buffer Overflow (2)

SCO Open Server 5.0.5 - X Library Buffer Overflow 2 // source: https://www.securityfocus.com/bid/638/info A buffer overflow vulnerability in the shared X library may allows local users to obtain higher privileges. Any setuid applications linked against the library are possibly vulnerable. The...

University of Washington pop2d 4.4 - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/283/info A buffer overflow vulnerability in pop2d version 4.4 or earlier allow malicious remote users to obtain access to the "nobody" user account. The pop2 and pop3 servers support the concept of an "anonymous proxy", whereby a remote user connecting...