6566 matches found
CVE-2002-1347
Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via 1 long inputs during user name canonicalization, 2 characters that need to be escaped during LDAP authentication using saslauthd, or 3 an...
Multiple bugs in Macromedia flash plugin
Buffer overflows, local file reading...
Multiple vendors' SSH transport layer protocol implementations contain vulnerabilities in key exchange and initialization
Overview Secure shell SSH transport layer protocol implementations from different vendors contain multiple vulnerabilities in code that handles key exchange and initialization. Both SSH servers and clients are affected. A remote attacker could execute arbitrary code with the privileges of the SSH...
Buffer overflows in fetchmail
Buffer overflows on addresses parsing...
CVE-2002-1347
CVE-2002-1347 describes multiple buffer overflows in Cyrus SASL library versions 2.1.9 and earlier. The flaws allow remote attackers to cause a denial of service and, potentially, arbitrary code execution. Specifically, exploitation paths include (1) long inputs during user name canonicalization,...
CVE-2002-1347
Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via 1 long inputs during user name canonicalization, 2 characters that need to be escaped during LDAP authentication using saslauthd, or 3 an...
Buffer overflows in OpenLDAP2
Few serious buffer overflows...
Multipel bugs in Webster Web Server
Buffer overflows, crossite scripting, directory traversal...
CVE-2002-1279
Multiple buffer overflows in conf.c for Masqmail 0.1.x before 0.1.17, and 0.2.x before 0.2.15, allow local users to gain privileges via certain entries in the configuration file -C option...
CVE-2002-1321
The CVE-2002-1321 entry concerns RealNetworks products RealOne and RealPlayer, where multiple buffer overflows can allow remote code execution. The root causes are: (1) a SMIL file with an excessively long parameter, (2) a long filename in an rtsp:// request (e.g., from a .m3u file), and (3) cert...
BadBlue XSS/Information Disclosure Vulnerabilities
BadBlue is a P2P/Web server offered for Microsoft Windows operating systems by Working Resources. It has a bad security record -- file disclosure, remote administration, denials of service, buffer overflows, directory traversals, and more cross-site scripting flaws than I care to count. We can ad...
RealPlayer/RealOne buffer overflows
Buffer overflows during URL and files processing...
CVE-2002-0029
CVE-2002-0029 concerns buffer overflows in the DNS stub resolver library used by ISC BIND (versions 4.9.2–4.9.10) and in derived libraries such as BSD libc and GNU glibc. The overflow occurs when processing certain DNS server responses that trigger the getnetbyname or getnetbyaddr code paths, all...
Multiple bugs in bind
Multiple vulnerabilities: DoS, buffer overflows...
Domain Name System (DNS) stub resolver libraries vulnerable to buffer overflows via network name or address lookups
Overview The DNS stub resolver library in ISC BIND 4.9.2 through 4.9.10 contains buffer overflows in code that handles responses for network name and address requests. Other resolver libraries derived from BIND 4 such as BSD libc, GNU glibc, and those used by System V UNIX systems may also be...
[SECURITY] [DSA 194-1] New masqmail packages fix buffer overflows
-------------------------------------------------------------------------- Debian Security Advisory DSA 194-1 [email protected] http://www.debian.org/security/ Martin Schulze November 12th, 2002 http://www.debian.org/security/faq -...
[SECURITY] [DSA 194-1] New masqmail packages fix buffer overflows
-------------------------------------------------------------------------- Debian Security Advisory DSA 194-1 [email protected] http://www.debian.org/security/ Martin Schulze November 12th, 2002 http://www.debian.org/security/faq -...
[SECURITY] [DSA 194-1] New masqmail packages fix buffer overflows
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 194-1 [email protected] http://www.debian.org/security/ Martin Schulze November 12th, 2002 http://www.debian.org/security/faq -...
