CVE-2008-4829

CVE-2008-4829 affects the Streamripper project, with public sources describing multiple buffer overflows in lib/http.c (functions http_parse_sc_header, http_get_pls, http_get_m3u) triggered by overly long HTTP headers and playlists. Public reports (e.g., GLSA 200901-05, Debian DSA-1683-1, OpenVAS...

CVE-2008-4829

Multiple buffer overflows in lib/http.c in Streamripper 1.63.5 allow remote attackers to execute arbitrary code via 1 a long "Zwitterion v" HTTP header, related to the httpparsescheader function; 2 a crafted pls playlist with a long entry, related to the httpgetpls function; or 3 a crafted m3u...

Debian DSA-1670-1 : enscript - buffer overflows

Several vulnerabilities have been discovered in Enscript, a converter from ASCII text to Postscript, HTML or RTF. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-3863 Ulf Harnhammer discovered that a buffer overflow may lead to the execution of...

Debian Security Advisory DSA 1667-1 (python2.4)

The remote host is missing an update to python2.4 announced via advisory DSA 1667-1. OpenVAS Vulnerability Test $Id: deb16671.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1667-1 python2.4 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD : streamripper -- multiple buffer overflows (4d4caee0-b939-11dd-a578-0030843d3802)

Secunia reports : A boundary error exists within httpparsescheader in lib/http.c when parsing an overly long HTTP header starting with 'Zwitterion v'. A boundary error exists within httpgetpls in lib/http.c when parsing a specially crafted pls playlist containing an overly long entry. A boundary...

Debian DSA-1669-1 : xulrunner - several vulnerabilities

Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-0016 Justin Schuh, Tom Cross and Peter Williams discovered a buffer overflow in the parser...

Debian: Security Advisory (DSA-1667-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1667-1 : python2.4 - several vulnerabilities

Several vulnerabilities have been discovered in the interpreter for the Python language. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-2315 David Remahl discovered several integer overflows in the stringobject, unicodeobject, bufferobject,...

Streamripper multiple buffer overflows

Buffer overflows on HTTP response headers parsing, .m3u and .pls playlists parsing...

Secunia Research: Streamripper Multiple Buffer Overflows

====================================================================== Secunia Research 19/11/2008 - Streamripper Multiple Buffer Overflows - ====================================================================== Table of Contents Affected...

CVE-2008-5176

Multiple buffer overflows in Client Software WinCom LPD Total 3.0.2.623 and earlier allow remote attackers to execute arbitrary code via 1 a long 0x02 command to the remote administration service on TCP port 13500 or 2 a long invalid control filename to LPDService.exe on TCP port 515...

[SECURITY] [DSA 1667-1] New python2.4 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1667-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 19, 2008 http://www.debian.org/security/faq -...

DSA-1667-1 python2.4 - several vulnerabilities

Bulletin has no description...

Gentoo Security Advisory GLSA 200811-05 (php)

The remote host is missing updates announced in advisory GLSA 200811-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200811-05 (php)

The remote host is missing updates announced in advisory GLSA 200811-05. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KLA10371 ACE vulnerability in Trend Micro ServerProtect

Buffer overflows were found in Trend Micro ServerProtect. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via unknown vectors. Original advisories - Exploitation Related products Trend-Micro-ServerProtect-for-Windows-NetWar...

CVE-2008-5092

Heap-based buffer overflows in Novell eDirectory HTTP protocol stack HTTPSTK before 8.8 SP3 have unknown impact and attack vectors related to the 1 HTTP language header and 2 HTTP content-length header...

CVE-2008-5001

Multiple stack-based buffer overflows in multiple functions in vncviewer/FileTransfer.cpp in vncviewer for UltraVNC 1.0.2 and 1.0.4 before 01252008, when in LISTENING mode or when using the DSM plugin, allow remote attackers to cause a denial of service crash and possibly execute arbitrary code v...

CVE-2008-5005

Multiple stack-based buffer overflows in 1 University of Washington IMAP Toolkit 2002 through 2007c, 2 University of Washington Alpine 2.00 and earlier, and 3 Panda IMAP allow a local users to gain privileges by specifying a long folder extension argument on the command line to the tmail or dmail...

CVE-2008-5005

Multiple stack-based buffer overflows in 1 University of Washington IMAP Toolkit 2002 through 2007c, 2 University of Washington Alpine 2.00 and earlier, and 3 Panda IMAP allow a local users to gain privileges by specifying a long folder extension argument on the command line to the tmail or dmail...