5246 matches found
Microsoft Windows XP2000 - RunDLL32.exe Local Buffer Overflow
Microsoft Windows XP2000 - RunDLL32.exe Local Buffer Overflow source: https://www.securityfocus.com/bid/8114/info rundll32.exe has been reported prone to a buffer overflow vulnerability. The condition has been reported to be triggered when an excessive string is passed to the vulnerable applicati...
Microsoft Windows HTML conversion library vulnerable to buffer overflow
Overview A buffer overflow vulnerability exists in a shared HTML conversion library used by Internet Explorer IE and other Windows applications. By enticing a victim to view an HTML document using IE, an attacker could execute arbitrary code with the victim's privileges or cause IE to crash...
Microsoft Internet Explorer - Object Tag (MS03-020)
!/usr/bin/perl Proof of concept exploit on IE 5.x - 6.x by Alumni IE-Object longtype dynamic call oferflow url:// the flaw actually exists in URLMON.DLL when converting backslashes to wide char, this can be seen on stack dump near '&CLSID=AAA...2F2F...'. To exploit: i start server perl script; ii...
HP-UX FTPD REST Command Remote Arbitrary Memory Disclosure
The remote FTP server seems to be vulnerable to an integer conversion bug when it receives a malformed argument to the 'REST' command. An attacker may exploit this flaw to force the remote FTP daemon to disclose portions of the memory of the remote host. %NASLMINLEVEL 70300 C Tenable Network...
Microsoft IIS WebDav buffer overflow
Buffer overflow in path conversion routine...
Bug found in: Polymorph 0.4.0
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 01100011 - code 'security research team' - ---------------------------------------- - - http://www.c-code.net - - Advisory and PoC exploit by: demz // [email protected] - - Vulnerable source: Polymorph v0.4.0 - - Bug type: Stackoverflow - - Priority: 3 ...
[SECURITY] [DSA 290-1] New sendmail-wide packages fix DoS and arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 290-1 [email protected] http://www.debian.org/security/ Martin Schulze April 17th, 2003 http://www.debian.org/security/faq -...
DSA-290 sendmail-wide - char-to-int conversion
Bulletin has no description...
Two Invision Power Board 1.1.x vulns
Hola, Invision Power Services have continued to show their amazing support and understanding for the security community by release two patches for their 'Invision Power Board' product now one of the most widely used 'Board' programs around. Without sending out any security mailing list...
[SECURITY] [DSA 278-2] New sendmail packages fix DoS and arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 278-2 [email protected] http://www.debian.org/security/ Martin Schulze April 4th, 2003 http://www.debian.org/security/faq -...
DSA-278 sendmail - char-to-int conversion
Bulletin has no description...
CVE-2002-0094
configconverters.py in BSCW Basic Support for Cooperative Work 3.x and versions before 4.06 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name during filename conversion...
CVE-2002-0802
The CVE-2002-0802 entry documents a vulnerability in PostgreSQL 6.5.x when using the SQL_ASCII encoding: multibyte support can consume an extra character while processing a character that cannot be converted, potentially removing an escape character from the query and making the application susce...
Sendmail: -1 gone wild
CVE: CAN-2003-0161 CERT: VU897604 FORCED RELEASE -- VENDOR NOTIFIED AS OF 03/18/03 There is a vulnerability in Sendmail versions 8.12.8 and prior. The address parser performs insufficient bounds checking in certain conditions due to a char to int conversion, making it possible for an attacker to...
Sendmail address parsing buffer overflow
Overview Sendmail contains a buffer overflow in code that parses email addresses. A remote attacker could execute arbitrary code or cause a denial of service on a vulnerable system. Description Sendmail is a widely used mail transfer agent MTA. There is a stack overflow vulnerability in code that...
MDKSA-2003:036 - Updated netpbm packages fix math overflow errors
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrake Linux Security Update Advisory Package name: netpbm Advisory ID: MDKSA-2003:036 Date: March 25th, 2003 Affected versions: 8.2, 9.0, 9.1, Corporate Server 2.1, Multi Network Firewall 8.2 Problem Description: Several math overflow errors were...
DEBIAN-CVE-2002-1318
Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password that causes the overflow during decryption in which a DOS codepage string is converted to a little-endian UCS2 unicode string...
Signed/unsigned conversion bug in wwwoffled
Content-Length integer type bug...
Sendmail < 8.8.5 MIME Conversion Malformed Header Overflow
The remote Sendmail server, according to its version number, may be vulnerable to a MIME conversion overflow attack which allows anyone to execute arbitrary commands as root. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10055; scriptversion"1.22";...