402 matches found
CA BrightStor ARCserve Backup for Windows Multiple Remote Buffer Overflows (QO81201)
This host is running BrightStor ARCServe for Windows. The remote version of this software has multiple buffer overflow vulnerabilities. An attacker, by sending a specially crafted packet, may be able to execute code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if...
Computer Associates Products Message Engine RPC Server - Multiple Buffer Overflow Vulnerabilities (1)
Computer Associates Products Message Engine RPC Server - Multiple Buffer Overflow Vulnerabilities 1 // source: https://www.securityfocus.com/bid/20365/info Multiple Computer Associates products are prone to multiple buffer-overflow vulnerabilities because the applications using an affected librar...
CVE-2006-3838
Multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer ESA before 2.5.0, as used in products including a Sidewinder, b iPolicy Security Manager, c Astaro Report Manager, d Fortinet FortiReporter, e Top Layer Network Security Analyzer, and possibly other products, allow...
RHEL 2.1 : postgresql (RHSA-2005:150)
Updated PostgreSQL packages to fix various security flaws are now available for Red Hat Enterprise Linux 2.1AS. This update has been rated as having important security impact by the Red Hat Security Response Team. PostgreSQL is an advanced Object-Relational database management system DBMS. A flaw...
CVE-2005-0441
Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise ASE 12.x before 12.5.3 ESD1 allow remote authenticated users to execute arbitrary code via the 1 attribvalid function, 2 covert function, 3 declare statement, or 4 a crafted query plan, or remote authenticated users with...
unace -- multiple vulnerabilities
Ulf Härnhammar reports: There are buffer overflows when extracting, testing or listing specially prepared ACE archives. There are directory traversal bugs when extracting ACE archives. There are also buffer overflows when dealing with long 17000 characters command line arguments. Secunia reports:...
SUSE-SA:2005:006: squid
The remote host is missing the patch for the advisory SUSE-SA:2005:006 squid. Squid is a feature-rich web-proxy with support for various web-related protocols. The last two squid updates from February the 1st and 10th fix several vulnerabilities. The impact of them range from remote...
RHEL 3 : cups (RHSA-2005:013)
Updated CUPS packages that fix several security issues are now available. The Common UNIX Printing System provides a portable printing layer for UNIXR operating systems. A buffer overflow was found in the CUPS pdftops filter, which uses code from the Xpdf package. An attacker who has the ability ...
CVE-2004-2707
Multiple unspecified vulnerabilities in Gyach Enhanced Gyach-E before 1.0.5 have unknown impact and attack vectors related to "several security flaws," probably related to buffer overflows in HTTP server responses...
Fedora Core 2 : libtiff-3.5.7-21.fc2 (2004-576)
Fix several buffer overflow problems that could be used as an exploit. Fixes the following security advisory: CVE-2004-1308 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...
Moderate: Red Hat Security Advisory: libxml security update
An updated libxml package that fixes multiple buffer overflows is now available. Updated 24 May 2005 Multilib packages have been added to this advisory The libxml package contains a library for manipulating XML files. Multiple buffer overflow bugs have been found in libxml versions prior to 2.6.1...
pcal -- buffer overflow vulnerabilities
Danny Lungstrom has found two buffer overflow vulnerabilities in pcal which can lead to execution of arbitrary code by making a user run pcal on a specially crafted calendar file...
DSA-597-1 cyrus-imapd - buffer overflow
Bulletin has no description...
Jabber Server 2.0 - Multiple Remote Buffer Overflow Vulnerabilities
Jabber Server 2.0 - Multiple Remote Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/11741/info Multiple remote buffer overflow vulnerabilities affect the Jabber Server. These issues are due to a failure of the application to properly validate the length of user-supplied...
Moderate: Red Hat Security Advisory: libxml2 security update
An updated libxml2 package that fixes multiple buffer overflows is now available. libxml2 is a library for manipulating XML files. Multiple buffer overflow bugs have been found in libxml2 versions prior to 2.6.14. If an attacker can trick a user into passing a specially crafted FTP URL or FTP pro...
cscope -- buffer overflow vulnerabilities
Jason Duell reports: Cscope contains an alarming number of buffer overflow vulnerabilities. By a rough count, there are at least 48 places where we blindly sprintf a file name into a fixed-length buffer of size PATHLEN without checking to see if the file's name is = PATHLEN. We do similar things...
mpg123: Buffer overflow vulnerabilities
Background mpg123 is a MPEG Audio Player. Description Buffer overflow vulnerabilities in the getauthfromURL and httpopen functions have been reported by Carlos Barros. Additionally, the Gentoo Linux Sound Team fixed additional boundary checks which were found to be lacking. Impact By enticing a...
Debian DSA-520-1 : krb5 - buffer overflows
In their advisory MITKRB5-SA-2004-001, the MIT Kerberos announced the existence of buffer overflow vulnerabilities in the krb5anametolocalname function. This function is only used if anametolocalname is enabled in the configuration this is not enabled by default. %NASLMINLEVEL 70300 C Tenable...
Alt-N MDaemon Multiple Buffer Overflows (IMAP)
Binary data 2310.prm...
Multiple buffer overflows in Mozilla POP3 protocol handler
Overview There are multiple buffer overflow vulnerabilities in the Mozilla POP3 protocol handler that could allow a remote attacker to execute arbitrary code. Description Post Office Protocol Version 3 POP3 is a mail protocol that provides a means for retrieving email from a remote server. The...