6590 matches found
enscript: Multiple vulnerabilities
Background enscript is a powerful ASCII to PostScript file converter. Description Erik Sjolund discovered several issues in enscript: it suffers from several buffer overflows CAN-2004-1186, quotes and shell escape characters are insufficiently sanitized in filenames CAN-2004-1185, and it supporte...
Debian DSA-663-1 : prozilla - buffer overflows
Several buffer overflows have been discovered in prozilla, a multi-threaded download accelerator which could be exploited by a remote attacker to execute arbitrary code on the victim's machine. An exploit for prozilla is already in the wild. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...
DSA-663-1 prozilla - buffer overflows
Bulletin has no description...
[SECURITY] [DSA 663-1] New prozilla packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 663-1 [email protected] http://www.debian.org/security/ Martin Schulze February 1st, 2005 http://www.debian.org/security/faq -...
CVE-2004-1186
Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service application crash...
Fedora Core 3 : enscript-1.6.1-28.0.2 (2005-016)
Erik Sjolund has discovered several security relevant problems in enscript, a program to converts ASCII text to Postscript and other formats. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CVE-2004-1184 Unsanitised input can causes the execution of...
goldenSploit.pl
For the millions that use this ftp server: http://www.goldenftpserver.com/ It has numerous cool features, like no authentication whatsoever, typos in error messages, buffer overflows etc... I just opened it up when my dog jumped on the keyboard and accidentally send a specially crafted packet to...
Multiple enscript ASCII to Postscript convertor vulnerabilities
Shell characters filtering problems, multiple buffer overflows...
[SECURITY] [DSA 654-1] New enscript packages fix several vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 654-1 [email protected] http://www.debian.org/security/ Martin Schulze January 21st, 2005 http://www.debian.org/security/faq -...
CVE-2004-1005
CVE-2004-1005 refers to multiple buffer overflows in Midnight Commander (mc) 4.5.55 and earlier. The initial description notes remote attackers could trigger these issues with unknown impact, and connected advisories (e.g., Debian DSA 639-1, Gentoo GLSA 200502-24, SuSE OpenVAS entries) indicate t...
CVE-2004-1005
Multiple buffer overflows in Midnight Commander mc 4.5.55 and earlier allow remote attackers to have an unknown impact...
CVE-2004-1005
Multiple buffer overflows in Midnight Commander mc 4.5.55 and earlier allow remote attackers to have an unknown impact...
Multiple Oracle Database Server security problems
SQL injection, privilege escalation, buffer overflows...
[SECURITY] [DSA 654-1] New enscript packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 654-1 [email protected] http://www.debian.org/security/ Martin Schulze January 21st, 2005 http://www.debian.org/security/faq -...
DSA-654-1 enscript - several
Bulletin has no description...
Multiple AtHoc toolbar bugs
Buffer overflows, format string bugs in ActiveX components...
CVE-2004-1350
Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) 3.6–3.6 SP4 contains multiple buffer overflows that allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNECT requests. The issue affects the proxy server’s handling of input in its network-facing compon...
CVE-2004-1359
CVE-2004-1359 affects Sun Solaris with uucp on versions 2.6, 7, 8, and 9. The vulnerability arises from multiple buffer overflows in uucp, allowing local users to execute arbitrary code as the uucp user. The connected documents confirm the affected component and the local-privilege impact; explic...
CVE-2004-1374
CVE-2004-1374 affects the NetBSD kernel with multiple buffer overflows that may allow local users to execute arbitrary code and gain privileges. The available records describe the vulnerability class and impact but do not specify affected NetBSD versions, exact vulnerable components within the ke...