CVE-2006-0539: Undefined Security Weakness

The convert-fcrontab program in fcron 3.0.0 might allow local users to gain privileges via a long command-line argument, which causes Linux glibc to report heap memory corruption, possibly because a strcpy in the strdup2 function can "overwrite some data."...

fcron convert-fcrontab buffer overflow

Heap based buffer overflow on oversized command line...

[Full-disclosure] Fcrontab - memory corruption on heap.

Name: Fcron - convert-fcrontab Vendor URL: http://fcron.free.fr Author: Adam Zabrocki [email protected] Date: November 25, 2005 Issue: Fcron convert-fcrontab allow users to corruption on heap section. Description: Fcron is a periodical command scheduler which aims at replacing Vixie Cron, and...

Design/Logic Flaw

Unspecified vulnerability in Oracle Database Server 10.1.0.4.2, Application Server 10.1.2.0.2, and Collaboration Suite Release 2, version 9.0.4.2 Oracle9i has unspecified impact and attack vectors, as identified by Oracle Vuln DBC02 in the Reorganize Objects & Convert Tablespace component...

CVE-2006-0283: Undefined Security Weakness

Unspecified vulnerability in Oracle Database Server 10.1.0.4.2, Application Server 10.1.2.0.2, and Collaboration Suite Release 2, version 9.0.4.2 Oracle9i has unspecified impact and attack vectors, as identified by Oracle Vuln DBC02 in the Reorganize Objects & Convert Tablespace component...

CVE-2006-0082

Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a numeric format string specifier such as %d in the file name...

CVE-2006-0082

Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a numeric format string specifier such as %d in the file name...

CVE-2006-0082

Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a numeric format string specifier such as %d in the file name...

DEBIAN-CVE-2005-1349

Buffer overflow in Convert-UUlib Convert::UUlib before 1.051 allows remote attackers to execute arbitrary code via a malformed parameter to a read operation...

CVE-2005-0397

Format string vulnerability in the SetImageInfo function in image.c for ImageMagick before 6.0.2.5 may allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via format string specifiers in a filename argument to convert, which may be called by...

CVE-2005-1349

Buffer overflow in Convert-UUlib Convert::UUlib before 1.051 allows remote attackers to execute arbitrary code via a malformed parameter to a read operation...

CVE-2005-1349

Buffer overflow in Convert-UUlib Convert::UUlib before 1.051 allows remote attackers to execute arbitrary code via a malformed parameter to a read operation...

CVE-2005-1349

Buffer overflow in Convert-UUlib Convert::UUlib before 1.051 allows remote attackers to execute arbitrary code via a malformed parameter to a read operation...

CVE-2005-1349

CVE-2005-1349 affects the Perl Convert::UUlib (Convert-UUlib) library. A buffer overflow in the library’s handling of read parameters allows remote attackers to execute arbitrary code. Affected version range is prior to 1.051; upgrading to 1.051 fixes the issue (as cited by multiple advisories an...

CVE-2005-1349

Buffer overflow in Convert-UUlib Convert::UUlib before 1.051 allows remote attackers to execute arbitrary code via a malformed parameter to a read operation...

CVE-2005-1349

Buffer overflow in Convert-UUlib Convert::UUlib before 1.051 allows remote attackers to execute arbitrary code via a malformed parameter to a read operation...

CVE-2005-1349

Buffer overflow in Convert-UUlib Convert::UUlib before 1.051 allows remote attackers to execute arbitrary code via a malformed parameter to a read operation...

[ GLSA 200504-26 ] Convert-UUlib: Buffer overflow

Gentoo Linux Security Advisory GLSA 200504-26 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

CVE-2005-1349: Undefined Security Weakness

Buffer overflow in Convert-UUlib Convert::UUlib before 1.051 allows remote attackers to execute arbitrary code via a malformed parameter to a read operation...

GLSA-200504-26 : Convert-UUlib: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200504-26 Convert-UUlib: Buffer overflow A vulnerability has been reported in Convert-UUlib where a malformed parameter can be provided by an attacker allowing a read operation to overflow a buffer. The vendor credits Mark Martine...