Bidwatcher eBay watching and bidding tool format string bug

Format string bug on server reply processing...

[SECURITY] [DSA 687-1] New bidwatcher packages fix format string vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 687-1 [email protected] http://www.debian.org/security/ Martin Schulze February 18th, 2005 http://www.debian.org/security/faq -...

CVE-2005-0158

Bidwatcher is affected by a format-string vulnerability (CVE-2005-0158) in versions before 1.3.17. A remote attacker—via a malicious or spoofed eBay web server—can cause a denial of service and potentially execute arbitrary code by sending certain responses. Multiple connected advisories referenc...

CVE-2005-0158: Undefined Security Weakness

Format string vulnerability in bidwatcher before 1.3.17 allows remote malicious web servers from eBay, or a spoofed eBay server, to cause a denial of service and possibly execute arbitrary code via certain responses...

eBay web site allows intruders to login to gain unauthorized access to user's information

Overview Ebay www.ebay.comis a popular online auction site. A vulnerability in the ebay web site prior to April 24, 2002, could have allowed an intruder to gain access to a victim's personal data. Description Prior to April 24, 2002, an intruder may have been able to gain access to certain person...

ebayla.txt

http://www.because-we-can.com/ebayla/ THE EBAYLA BUG AND HOW TO PROTECT YOURSELF This page describes a security problem that Blue Adept discovered with eBay's on-line auctions on March 31, 1999 realaudio interview. The security hole allows eBay users to easily steal the passwords of other eBay...