Trend Micro Interscan VirusWall 3.2.3/3.3 - 'HELO' Remote Buffer Overflow (2)

source: https://www.securityfocus.com/bid/787/info There is a buffer overflow in the HELO command of the smtp gateway which ships as part of the VirusWall product. This buffer overflow could be used to launch arbitrary code on the vulnerable server. This issue was patched by InterScan, however ev...

BTD Studio Zom-Mail 1.0.9 - Remote Buffer Overflow

BTD Studio Zom-Mail 1.0.9 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/761/info In certain versions of the BTD Zom-Mail server there exists a buffer overflow which may be remotely exploitable by malicious users. The problem in question is in the handling of overly past 25...

Omnicron OmniHTTPd 1.1/2.4 Pro - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/739/info There is a remotely exploitable buffer overflow vulnerability in the CGI program "imagemap", which is distributed with Omnicron's OmniHTTPD. During operations made on arguments passed to the program, a lack of bounds checking on a strcpy call...

OpenLink Web Configurator GET Request Remote Overflow

It is possible to crash the remote web server by sending overly long GET requests. An attacker may exploit this issue to crash the remote web server or execute arbitrary code on the remote system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10169;...

SCO Open Server 5.0.5 - cancel Buffer Overflow

// source: https://www.securityfocus.com/bid/702/info There is a buffer overflow vulnerability in /opt/K/SCO/Unix/5.0.5Eb/.softmgmt/var/usr/bin/cancel. It is important to know that the overflows are not in "/usr/bin/cancel" or "/usr/lpd/remote/cancel". The consequence of this vulnerability being...

Linux_mini-sql_bof.txt

hi, i was looking for an exploitable buffer overflow in w3-msql from Hughes Technology since there was many security flaws inside. There is a static variable named PrivateScript in main function with a 255 chars size length. No luck ! main finish everywhere with an exit call. The http internal...

MediaHouse Software Statistics Server 4.285.1 - Server ID Buffer Overflow

MediaHouse Software Statistics Server 4.285.1 - Server ID Buffer Overflow source: https://www.securityfocus.com/bid/734/info The web interface for Statistics Server contains an unchecked buffer which accepts input from the "Server ID" field of the login webpage. While the login webpage has a 16...

CVE-1999-0034

Buffer overflow in suidperl sperl, Perl 4.x and 5.x...

CVE-1999-0069

Solaris ufsrestore buffer overflow...

Microsoft Internet Explorer 4.15 - Registration Wizard Buffer Overflow

Microsoft Internet Explorer 4.15 - Registration Wizard Buffer Overflow Microsoft Internet Explorer 4.1/5.0 for Windows 95/Windows NT 4,Windows 98 Registration Wizard Buffer Overflow Vulnerability source: https://www.securityfocus.com/bid/671/info There is a buffer overflow in the Internet Explore...

Mandriva Linux Mandrake 6.0 Gnome Libs 1.0.8 - espeaker Local Buffer Overflow

Mandriva Linux Mandrake 6.0 Gnome Libs 1.0.8 - espeaker Local Buffer Overflow source: https://www.securityfocus.com/bid/663/info A buffer overflow vulnerabilityin GNOME's shared libraries handling of the 'espeaker' command line argument may allow local users to attack setuid binaries linked again...

FreeBSD-SA-99:06.amd

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-99:06 Security Advisory FreeBSD, Inc. Topic: remote amd attack Category: core Module: kernel Announced: 1999-09-16 Affects: FreeBSD 3.2 and earlier FreeBSD-current before th...

DIGITAL UNIX 4.0 df AIX 4.3.2 CDE 2.1 IRIX 6.5.14 Solaris 7.0 SunOS 4.1.4 - Local Buffer Overflow

DIGITAL UNIX 4.0 df AIX 4.3.2 CDE 2.1 IRIX 6.5.14 Solaris 7.0 SunOS 4.1.4 - Local Buffer Overflow / source: https://www.securityfocus.com/bid/641/info TRU64/DIGITAL UNIX 4.0 d/f,AIX Somehow the overflow is very sensitive to caching of the stack. To see that it really does work, run it in a debugg...

Solaris 7.0 /usr/bin/mail - '-m' Local Buffer Overflow

// source: https://www.securityfocus.com/bid/672/info A buffer overflow vulnerability in the '/usr/bin/mail' program's handling of the '-m' command line argument allows local users to obtain access to the 'mail' group. / Generic Solaris x86 exploit program by Brock Tellier For use against any x86...

Martin Stover Mars NWE 0.99 - Local Buffer Overflow

Martin Stover Mars NWE 0.99 - Local Buffer Overflow // source: https://www.securityfocus.com/bid/617/info There are several buffer overflows in the setuid root components of the Mars Netware Emulator package. They allow for a local root compromise through the overflowing of buffers without bounds...

Martin Stover Mars NWE 0.99 - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/617/info There are several buffer overflows in the setuid root components of the Mars Netware Emulator package. They allow for a local root compromise through the overflowing of buffers without bounds checking. It is to be assumed that all versions pri...

ProFTPD 1.2.0pre4 mkdir Command Directory Name Handling Remote Overflow

It was possible to crash the remote FTP server by creating a large number of nested directories and then trying to upload a file. This issue is known to affect ProFTPD, although other FTP servers may be affected as well. It is likely that a remote attacker can leverage this issue to execute...

libtermcap buffer overflow

...

[SECURITY] New versions of termcap-compat fixes buffer overflow

We have received a report that former versions of libtermcap contained an exploitable buffer overflow. Debian itself is not exploitable by this bug since termcap was abandoned in favour of terminfo long ago. However, if you have compiled your own programs using termcap or have installed third par...

rainbow.six.bof.txt

Date: Thu, 11 Feb 1999 17:37:43 -0500 From: Brian Gemberling To: [email protected] Subject: Rainbow Six Buffer Overflow..... Rainbow Six Multiplayer can be crashed with a buffer overflow just like quake2... If someone makes the Nick something like...