[ GLSA 200505-08 ] HT Editor: Multiple buffer overflows

Gentoo Linux Security Advisory GLSA 200505-08 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Mandrake Linux Security Advisory : ethereal (MDKSA-2005:083)

A number of vulnerabilities were discovered in previous version of Ethereal that have been fixed in the 0.10.11 release, including : - The ANSI A and DHCP dissectors are vulnerable to format string vulnerabilities. - The DISTCC, FCELS, SIP, ISIS, CMIP, CMP, CMS, CRMF, ESS, OCSP, PKIX1Explitit, PK...

GLSA-200505-03 : Ethereal: Numerous vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200505-03 Ethereal: Numerous vulnerabilities There are numerous vulnerabilities in versions of Ethereal prior to 0.10.11, including: The ANSI A and DHCP dissectors are vulnerable to format string vulnerabilities. The DISTCC, FCELS...

CVE-2004-1812

Multiple stack-based buffer overflows in Agent Common Services 1 cam.exe and 2 awservices.exe in Unicenter TNG 2.4 allow remote attackers to execute arbitrary code...

CVE-2004-1883

Multiple buffer overflows in Ipswitch WSFTP Server 4.0.2 1 allow remote authenticated users to execute arbitrary code by causing a large error string to be generated by the ALLO handler, or 2 may allow remote FTP administrators to execute arbitrary code by causing a long hostname or username to b...

CVE-2003-1158

CVE-2003-1158 reports multiple buffer overflows in the FTP service of Plug and Play Web Server 1.0002c, allowing remote users to crash the server via long FTP commands (dir, ls, delete, mkdir, DELE, RMD, MKD). The provided documents do not specify exact vulnerable components, versions beyond the ...

CVE-2004-1916

Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows remote attackers to execute arbitrary code via 1 a long invalid command to parseallclientmessages function, or 2 long argv command to testfuncfunc function...

USN-123-1: Xine library vulnerabilities

Two buffer overflows have been discovered in the MMS and Real RTSP stream handlers of the Xine library. By tricking a user to connect to a malicious MMS or RTSP video/audio stream source with an application that uses this library, an attacker could crash the client and possibly even execute...

CVE-2005-1461

Multiple buffer overflows in the 1 SIP, 2 CMIP, 3 CMP, 4 CMS, 5 CRMF, 6 ESS, 7 OCSP, 8 X.509, 9 ISIS, 10 DISTCC, 11 FCELS, 12 Q.931, 13 NCP, 14 TCAP, 15 ISUP, 16 MEGACO, 17 PKIX1Explitit, 18 PKIXQualified, 19 Presentation dissectors in Ethereal before 0.10.11 allow remote attackers to cause a...

CVE-2005-1461

Multiple buffer overflows in the 1 SIP, 2 CMIP, 3 CMP, 4 CMS, 5 CRMF, 6 ESS, 7 OCSP, 8 X.509, 9 ISIS, 10 DISTCC, 11 FCELS, 12 Q.931, 13 NCP, 14 TCAP, 15 ISUP, 16 MEGACO, 17 PKIX1Explitit, 18 PKIXQualified, 19 Presentation dissectors in Ethereal before 0.10.11 allow remote attackers to cause a...

PT-2005-2457 · Ethereal +1 · Ethereal +1

Name of the Vulnerable Software and Affected Versions: Ethereal versions prior to 0.10.11 Description: The issue is related to multiple buffer overflows in various protocol dissectors in Ethereal, including SIP, CMIP, CMP, CMS, CRMF, ESS, OCSP, X.509, ISIS, DISTCC, FCELS, Q.931, NCP, TCAP, ISUP,...

CVE-2005-1393

Multiple buffer overflows in ArcGIS for ESRI ArcInfo Workstation 9.0 allow local users to execute arbitrary code via long command line arguments to 1 asmaster, 2 asuser, 3 asutility, 4 se, or 5 asrecovery...

CVE-2005-1825

Multiple stack-based buffer overflows in the nvdexec function in HP Radia Notify Daemon 3.1.2.0 formerly by Novadigm, and other versions including 2.x, 3.x, and 4.x, allows remote attackers to execute arbitrary code via a command with crafted parameters to a RADEXECD process...

Multiple ESRI ArcGIS GIS software vulnerabilities

Buffer overflows in different suid utilities...

CVE-2005-1393

Multiple buffer overflows in ArcGIS for ESRI ArcInfo Workstation 9.0 allow local users to execute arbitrary code via long command line arguments to 1 asmaster, 2 asuser, 3 asutility, 4 se, or 5 asrecovery...

CVE-2005-0011

Multiple vulnerabilities in fliccd, when installed setuid root as part of the kdeedu Kstars support for Instrument Neutral Distributed Interface INDI in KDE 3.3 to 3.3.2, allow local users and remote attackers to execute arbitrary code via stack-based buffer overflows...

CVE-2005-0021

Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via 1 an IPv6 address with more than 8 components, as demonstrated using the -be command line option, which triggers an overflow in the hostaton function, or 2 the -bh command line option or dnsdb PTR...

CVE-2005-0121

Multiple buffer overflows in golddig 2.0 and earlier allow local users to execute arbitrary code via 1 a long map name command line argument or 2 a long username as recorded in the USER environment variable...

CVE-2005-0247

Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via 1 a large number of variables in a SQL statement being handled by the readsqlconstruct function, 2 a large number of INTO variables in a SELECT statement being handled by the...

CVE-2005-0490

Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded replies that exceed the intended buffer lengths when decoded, which is not properly handled by 1 the Curlinputntlm functio...