FreeBSD : imlib -- xpm heap buffer overflows and integer overflows (2001103a-6bbd-11d9-851d-000a95bc6fae)

Pavel Kankovsky reports : Imlib affected by a variant of CAN-2004-0782 too. I've discovered more vulnerabilities in Imlib 1.9.13. In particular, it appears to be affected by a variant of Chris Evans' libXpm flaw 1 CAN-2004-0782, see http://scary.beasts.org/security/CESA-2004-003.txt. Look at the...

Slackware 8.1 / 9.0 / 9.1 / current : metamail security update (SSA:2004-049-02)

Metamail is a set of utilities for processing MIME mail. New metamail packages are available for Slackware 8.1, 9.0, 9.1, and -current. These fix two format string bugs and two buffer overflows which could lead to unauthorized code execution. Thanks to Ulf Hrnhammar for discovering these problems...

FreeBSD : gaim -- multiple buffer overflows (4260eacb-26b8-11d9-9289-000c41e2cdad)

Sean infamous42md reports several situations in gaim that may result in exploitable buffer overflows : - Rich Text Format RTF messages in Novell GroupWise protocol - Unsafe use of gethostbyname in zephyr protocol - URLs which are over 2048 bytes long once decoded %NASLMINLEVEL 70300 C Tenable...

CVE-2004-2159

Technical details about CVE-2004-2159 are not publicly provided in the supplied documents; monitor for updates.

CVE-2004-2167

Multiple buffer overflows in LaTeX2rtf 1.9.15, and possibly other versions, allow remote attackers to execute arbitrary code via 1 the expandmacro function, and possibly 2 Environments and 3 TranslateCommand...

CVE-2004-2167

Multiple buffer overflows in LaTeX2rtf 1.9.15, and possibly other versions, allow remote attackers to execute arbitrary code via 1 the expandmacro function, and possibly 2 Environments and 3 TranslateCommand...

CVE-2004-2159

Multiple buffer overflows in XMLStarlet Command Line XML Toolkit 0.9.3 have unknown impact and attack vectors via 1 xmlelem.c and 2 xmlselect.c...

[SECURITY] [DSA 743-1] New ht packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 743-1 [email protected] http://www.debian.org/security/ Martin Schulze July 8th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 743-1] New ht packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 743-1 [email protected] http://www.debian.org/security/ Martin Schulze July 8th, 2005 http://www.debian.org/security/faq -...

Debian DSA-743-1 : ht - buffer overflows, integer overflows

Several problems have been discovered in ht, a viewer, editor and analyser for various executables, that may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-1545 Tavis Ormandy of the Gentoo Linux Security Tea...

Fedora Core 3 : binutils-2.15.92.0.2-5.1 (2005-497)

Wed Jun 29 2005 Jakub Jelinek 2.15.92.0.2-5.1 - bfd and readelf robustification CVE-2005-1704, 158680 - fix buffer overflows in readelf 149506 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

CVE-2002-1948

Multiple buffer overflows in Gringotts 0.5.9 allows local users to execute arbitrary commands via unknown attack vectors...

[Full-disclosure] Multiple buffer overflows exist in Infradig Systems Inframail Advantage Server Edition 6.0

Summary: Multiple buffer overflows exist in Infradig Systems Inframail Advantage Server Edition 6.0 http://www.infradig.com/ Details: Input to the SMTP MAIL FROM: command and the FTP NLST command is not properly checked and/or filtered. Issuing the character 'A' roughly 40960 times as an argument...

CVE-2005-2040

Multiple buffer overflows in the getterminaltype function in telnetd for Heimdal before 0.6.5 may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2005-0468 and CVE-2005-0469...

CVE-2005-2040

Multiple buffer overflows in the getterminaltype function in telnetd for Heimdal before 0.6.5 may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2005-0468 and CVE-2005-0469...

Multiple tcpdump / ethereal sniffers vulnerabilities

Endless loops during handling RSVP, ISIS, BGP, LDP protocols, buffer overflows in ANSI A, GSM MAP, AIM, DISTCC, FCELS, SIP, KINK, LMP, Telnet, TZSP, WSP, BER, SMB, H.245, Bittorrent, Fibre Channel and many others...

CVE-2005-2040

Multiple buffer overflows in the getterminaltype function in telnetd for Heimdal before 0.6.5 may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2005-0468 and CVE-2005-0469...

CVE-2005-2040

Multiple buffer overflows in the getterminaltype function in telnetd for Heimdal before 0.6.5 may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2005-0468 and CVE-2005-0469...

Novell NetMail < 3.52C IMAP Agent Multiple Remote Overflows

The remote host is running Novell NetMail, a messaging and calendaring system for Windows, Linux, Unix, and NetWare. The version of NetMail installed on the remote host is prone to multiple buffer overflows in its IMAP agent, one when handling long command tags, the other involving IMAP command...

Debian DSA-731-1 : krb4 - buffer overflows

Several problems have been discovered in telnet clients that could be exploited by malicious daemons the client connects to. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-0468 Gael Delalleau discovered a buffer overflow in the envoptadd function...