6566 matches found
Multiple vendors' Internet Key Exchange (IKE) implementations do not properly handle IKE response packets
Overview Internet Key Exchange IKE implementations from several vendors contain buffer overflows and denial-of-service conditions. The buffer overflow vulnerabilities could permit an attacker to execute arbitrary code on a vulnerable system. Description The CERT/CC has received a report describin...
Buffer overflows in Content Managment Server
Multipel buffer overflows...
Important: Red Hat Security Advisory: openssl security update
Updated OpenSSL packages are available for Red Hat Linux Advanced Server. These updates fix multiple protocol parsing bugs, which may cause a denial of service DoS attack or cause SSL-enabled applications to crash. Updated 06 Jan 2003 Added fixed packages for the ia64 architecture. Updated 06 Feb...
FreeBSD-SA-02:33.openssl
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:33.openssl Security Advisory The FreeBSD Project Topic: openssl contains multiple vulnerabilities Category: core Module: crypto/openssl Announced: 2002-08-05 Credits: A.L...
CVE-2002-0656
Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via 1 a large client master key in SSL2 or 2 a large session ID in SSL3...
Advisory CA-2002-23 Multiple Vulnerabilities In OpenSSL
-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2002-23 Multiple Vulnerabilities In OpenSSL Original release date: July 30, 2002 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected OpenSSL prior to 0.9.6e, up to and including...
Multiple bugs in JanaServer
Multiple vulnerabilities including buffer overflows...
SQL Server 2000 Buffer Overflows and SQL Inyection vulnerabilities.
Security Advisory Name: SQL Server 2000 Buffer Overflows and SQL Inyection vulnerabilities. System Affected : Sql Server 2000 all Service Packs. Severity : High. Author: Cesar Cerrudo. Date: 07/25/2002 Advisory Number: CC070205 Overview: Database Consistency Checkers DBCCs are command console...
Microsoft SQL Server contains buffer overflows in several Database Consistency Checkers
Overview Microsoft SQL Server ships with several administrative tools that allow database users to elevate their administrative privileges from a single database to all databases on the server. Description Microsoft SQL Server ships with several utilities known as Database Consistency Checkers...
Important: Red Hat Security Advisory: squid security update
New Squid packages are available which fix various issues. Squid is a high-performance proxy caching server. The following summary describes the various issues found and fixed: Several buffer overflows have been found in the MSTN auth helper msntauth when configured to use denyusers or allowusers...
Multiple bugs in popcorn
Buffer overflows, DoS, etc...
Buffer overflows and multiple bugs in squid
Buffer overflow on ftp:// URLs, memory leaks, etc...
Multiple buffer overflows in Microsoft Commerce Server
Buffer overflows in Profile Service...
FreeBSD-SN-02:04
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SN-02:04 Security Notice The FreeBSD Project Topic: security issues in ports Announced: 2002-06-19 I. Introduction Several ports in the FreeBSD Ports Collection are affected by...
Multiple bugs in SeaNox Devwex
Buffer overflows, directory traversal...
CVE-2002-0031
Affected software: Yahoo! Messenger for Windows, version 5.0.0.1064 and earlier. Vulnerability: a remote buffer overflow in the Yahoo! Messenger URI handler (ymsgr:), sharing a single vulnerable buffer for multiple functions (e.g., getimv, sendim, message, addview, adduser, call, chat). Impact: m...
CVE-2002-0552
Multiple buffer overflows in Melange Chat server 2.02 allow remote or local attackers to cause a denial of service crash and possibly execute arbitrary code via 1 a long argument in the /yell command, 2 long lines in the /etc/melange.conf configuration file, 3 long file names, or possibly other...
CVE-2002-0468
CVE-2002-0468 affects Ecartis (formerly Listar) 1.0.0 and earlier snapshots. The vulnerability arises from buffer overflows in core code paths handling command line arguments and string formatting, including potential bad uses of sprintf() in files such as core.c, moderate.c, lcgi.c, fileapi.c, c...
CVE-2002-0552
The CVE-2002-0552 entry concerns Melange Chat Server 2.02 with multiple buffer overflows that can be triggered remotely or locally. The documented vectors include: (1) a long argument in the /yell command, (2) long lines in the /etc/melange.conf configuration file, and (3) long file names, among ...