FreeBSD 3.5.1/4.2 ports package xklock local root exploit

No description provided by source. / xklock - FreeBSD 3.5.1 & 4.2 ports package local root exploit The X key lock program contain several exploitable buffer overflows in command line arguments aswell as the 'JNAME' environment variable. xklock is installed setuid root by default. This POC exploit...

Heap overflow

Multiple heap-based buffer overflows in the client in Core FTP LE 2.2 build 1798 allow remote FTP servers to cause a denial of service application crash and possibly execute arbitrary code via a long string in a reply to a 1 USER, 2 PASS, 3 PASV, 4 SYST, 5 PWD, or 6 CDUP command...

CVE-2014-4643

CVE-2014-4643 affects Core FTP LE 2.2 build 1798 (client). Multiple heap-based buffer overflows triggered by overly long server replies to the FTP commands (USER, PASS, PASV, SYST, PWD, CDUP) can cause a denial of service and potentially allow arbitrary code execution. Public PoC/exploits exist (...

CVE-2014-4643

Multiple heap-based buffer overflows in the client in Core FTP LE 2.2 build 1798 allow remote FTP servers to cause a denial of service application crash and possibly execute arbitrary code via a long string in a reply to a 1 USER, 2 PASS, 3 PASV, 4 SYST, 5 PWD, or 6 CDUP command...

KLA10128 DoS vulnerability in Core FTP

Buffer overflows were found in the Core FTP client. By exploiting this vulnerability malicious users can cause denial of service and possibly execute arbitrary code. This vulnerability can be exploited from the network via a specially designed server reply. Original advisories - Exploitation Publ...

CVE-2012-0273

Multiple stack-based buffer overflows in MinaliC 2.0.0 allow remote attackers to execute arbitrary code via a 1 sessionid cookie in a request to the getcookievalue function in response.c, 2 directory name in a request to the adddefaultfile function in response.c, or 3 file name in a request to th...

CVE-2012-0273

CVE-2012-0273 describes multiple stack-based buffer overflows in MinaliC 2.0.0, allowing remote code execution via (1) a session_id cookie in the get_cookie_value function of response.c, (2) a directory name in add_default_file in response.c, or (3) a file name in retrieve_physical_file_name_or_b...

SuSE 11.3 Security Update : KVM (SAT Patch Number 9302)

Several security issues in KVM have been fixed. Some issues could have resulted in arbitrary code execution or crash of the kvm host. - virtio-net: buffer overflow in virtionethandlemac function. CVE-2014-0150 - Fixed out of bounds buffer accesses, guest triggerable via IDE SMART. CVE-2014-2894 -...

CVE-2014-4190

CVE-2014-4190 is a heap-based buffer overflow DoS affecting Huawei Campus Series switches (models S3700HI, S5700, S6700, S3300HI, S5300, S6300, S9300, S7700, and LSW S9700) with firmware lines including V200R001 before V200R001SPH013; V200R002 before V200R002SPH005; V200R003 before V200R003SPH005...

Google Chrome / Chromium multiple security vulnerabilities

Memory corruptions, buffer overflows...

Debian DSA-2960-1 : icedove - security update

Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail and news client: multiple memory safety errors and buffer overflows may lead to the execution of arbitrary code or denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

CVE-2010-5111

Multiple buffer overflows in readline.c in Echoping 6.0.2 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted reply in the 1 TLSreadline or 2 SSLreadline function, related to the EchoPingHttps Smokeping probe...

CVE-2010-5111

Multiple buffer overflows in readline.c in Echoping 6.0.2 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted reply in the 1 TLSreadline or 2 SSLreadline function, related to the EchoPingHttps Smokeping probe...

CVE-2010-5111

Removed by vendor...

CVE-2010-5111

Multiple buffer overflows in readline.c in Echoping 6.0.2 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted reply in the 1 TLSreadline or 2 SSLreadline function, related to the EchoPingHttps Smokeping probe...

[SECURITY] [DSA 2960-1] icedove security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2960-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 16, 2014 http://www.debian.org/security/faq -...

DSA-2960-1 icedove - security update

Bulletin has no description...

Debian Security Advisory DSA 2960-1 (icedove - security update)

Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail and news client: multiple memory safety errors and buffer overflows may lead to the execution of arbitrary code or denial of service. OpenVAS Vulnerability Test $Id: deb2960.nasl 6724 2017-07-14...

GLSA-201406-13 : memcached: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201406-13 memcached: Multiple vulnerabilities memcached authentication could be bypassed when using SASL due to a flaw related to SASL authentication state. Also several heap-based buffer overflows due to integer conversions when...

memcached: Multiple vulnerabilities

Background memcached is a high-performance, distributed memory object caching system Description memcached authentication could be bypassed when using SASL due to a flaw related to SASL authentication state. Also several heap-based buffer overflows due to integer conversions when parsing certain...