[SECURITY] New version of zgv fixes buffer overflows

We have received reports that the zgv package is vulnerable to buffer overflows. We recommend you upgrade your zgv package immediately. wget url will fetch the file for you dpkg -i file.deb will install the referenced file. Debian GNU/Linux 2.0 alias hamm This version of Debian was released only...

[SECURITY] New versions of bash fixes buffer overflows

We have received reports that the bash shell had a problem with very long pathnames. When a very long path was encountered bash failed to check the result of getcwd in all places, which could be exploited. We recommend you upgrade your bash package immediately. wget url will fetch the file for yo...

CVE-1999-0102

Buffer overflow in SLmail 3.x allows attackers to execute commands using a large FROM line...

Qualcomm qpopper 2.4 - POP Server Buffer Overflow (2)

Qualcomm qpopper 2.4 - POP Server Buffer Overflow 2 // source: https://www.securityfocus.com/bid/133/info A number of buffer-overflow issues reside in versions prior to 2.5 of Qualcomm's 'qpopper' program. Exploiting this issue allows a remote attacker to execute arbitrary commands on hosts that...

Solaris 7.0 - ufsdump Local Buffer Overflow (1)

Solaris 7.0 - ufsdump Local Buffer Overflow 1 // source: https://www.securityfocus.com/bid/680/info A buffer overflow vulnerability in the /usr/lib/fs/ufs/ufsdump setuid program allows local users to obtain root and tty group access. The vulnerability is the result of 'ufsdump' not being able to...

Solaris 7.0 - 'ufsdump' Local Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/680/info A buffer overflow vulnerability in the /usr/lib/fs/ufs/ufsdump setuid program allows local users to obtain root and tty group access. The vulnerability is the result of 'ufsdump' not being able to handle device names of a large length. /...

Microsoft Exchange Server 4.05.0 - SMTP HELO Argument Buffer Overflow

Microsoft Exchange Server 4.05.0 - SMTP HELO Argument Buffer Overflow // source: https://www.securityfocus.com/bid/8555/info It has been reported that Microsoft Exchange server is prone to an SMTP HELO command argument buffer overflow vulnerability. The issue presents itself likely due to...

Ipswitch Imail Server 5.0 - SMTP HELO Argument Buffer Overflow

// source: https://www.securityfocus.com/bid/8621/info It has been reported that Ipswitch IMail server is prone to an SMTP HELO command argument buffer overflow vulnerability. The issue presents itself likely due to insufficient bounds checking performed when handling malicious SMTP HELO command...

CVE-1999-0125

Buffer overflow in SGI IRIX mailx program...

SGI IRIX 6.4 - Permissions Buffer Overflow

SGI IRIX 6.4 - Permissions Buffer Overflow // source: https://www.securityfocus.com/bid/417/info A buffer overrun exists in the permissions program, as shipped by Silicon Graphics with the 5.x and 6.x Irix operating system. By supplying a long, well crafted buffer as the 4th argument to the...

Solaris 2.5.1 - 'chkey' Local Privilege Escalation

/ source: https://www.securityfocus.com/bid/207/info The chkey program is used to change a users secure RPC Diffie-Hellman public key and secret key pair. A buffer overflow condition has been found in the chkey program. Since chkey has setuid root permissions, an unauthorized user may be able to...

CVE-1999-0041

Buffer overflow in NLS Natural Language Service...

BSDOS 2.1 DGUX 4.0 Debian 0.93 Digital UNIX 4.0 B FreeBSD 2.1.5 HP-UX 10.34 IBM AIX 4.1.5 NetBSD 1.01.1 NeXTstep 4.0 SGI IRIX 6.3 SunOS 4.1.4 - rlogin Local Privilege Escalation

BSDOS 2.1 DGUX 4.0 Debian 0.93 Digital UNIX 4.0 B FreeBSD 2.1.5 HP-UX 10.34 IBM AIX 4.1.5 NetBSD 1.01.1 NeXTstep 4.0 SGI IRIX 6.3 SunOS 4.1.4 - rlogin Local Privilege Escalation / source: https://www.securityfocus.com/bid/242/info The SUID rlogin program is used to establish remote sessions. A...

CVE-1999-0050

Buffer overflow in HP-UX newgrp program...

CVE-1999-0085

Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP packet with a long hostname...

Q311967: Security Update

This update resolves the "Unchecked buffer in the Multiple UNC Provider" security vulnerability in Windows XP, and is discussed in Microsoft Security Bulletin MS02-017. Download now to help prevent a malicious user from exploiting a buffer overflow vulnerability to either cause your computer to...