6330 matches found
Ipswitch WhatsUp Gold 7.0/8.0 - Notification Instance Name Remote Buffer Overflow
source: https://www.securityfocus.com/bid/11109/info The Ipswitch WhatsUp Gold web interface is prone to a remotely exploitable buffer overflow vulnerability. This may be exploited by authenticated users of the interface to execute arbitrary code in the context of the program. !/usr/bin/perl...
CVE-2004-0754
Integer overflow in Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the size variable in Groupware server messages...
CVE-2002-1468
Buffer overflow in errpt in AIX 4.3.3 allows local users to execute arbitrary code as root...
CVE-2002-1424
CVE-2002-1424 describes a buffer overflow in the munpack component of the mpack package (version 1.5 and earlier). The underlying issue allows remote attackers to cause a denial of service and potentially execute arbitrary code. Public advisories indicate fixes have been released in subsequent De...
CVE-2004-0347
Cross-site scripting XSS vulnerability in delhomepage.cgi in NetScreen-SA 5000 Series running firmware 3.3 Patch 1 build 4797 allows remote authenticated users to execute arbitrary script as other users via the row parameter...
CVE-2002-1391
The CVE-2002-1391 issue affects mgetty prior to 1.1.29, where a buffer overflow in the internal handling of Caller ID CallerName could allow a remote attacker to cause a Denial of Service and potentially execute arbitrary code via a long Caller Name. The vulnerability is documented in multiple ad...
CVE-2002-1244
Pablo FTP Server (versions 1.3 and 1.5, and possibly others) is affected by a format string vulnerability in the USER command due to incorrect handling of format string markers in user input. This can allow a remote attacker to cause a denial of service and, potentially, execute arbitrary code. T...
CVE-2001-0485
Unknown vulnerability in netprint in IRIX 6.2, and possibly other versions, allows local users with lp privileges attacker to execute arbitrary commands via the -n option...
CVE-2002-0969
Buffer overflow in MySQL daemon mysqld before 3.23.50, and 4.0 beta before 4.02, on the Win32 platform, allows local users to execute arbitrary code via a long "datadir" parameter in the my.ini initialization file, whose permissions on Windows allow Full Control to the Everyone group...
CVE-2002-1158
Buffer overflow in the irwthrough function for Canna 3.5b2 and earlier allows local users to execute arbitrary code as the bin user...
DSA-543-1 krb5 -- several vulnerabilities
Bulletin has no description...
GLSA-200404-14 : Multiple format string vulnerabilities in cadaver
The remote host is affected by the vulnerability described in GLSA-200404-14 Multiple format string vulnerabilities in cadaver Cadaver code includes the neon library, which in versions 0.24.4 and previous is vulnerable to multiple format string attacks. The latest version of cadaver uses version...
GLSA-200407-06 : libpng: Buffer overflow on row buffers
The remote host is affected by the vulnerability described in GLSA-200407-06 libpng: Buffer overflow on row buffers Due to a wrong calculation of loop offset values, libpng contains a buffer overflow vulnerability on the row buffers. This vulnerability was initially patched in January 2003 but...
CVE-2004-0798
Buffer overflow in the maincfgret.cgi script for Ipswitch WhatsUp Gold before 8.03 Hotfix 1 allows remote attackers to execute arbitrary code via a long instancename parameter...
Sun Solaris dtmail contains a format string vulnerability
Overview A vulnerability in the way dtmail handles command-line arguments could allow an attacker to execute arbitrary code. Description The dtmail program is a mail user agent MUA for the Common Desktop Environment CDE. It provides a graphical user interface for reading, sending, and managing...
gv: Exploitable Buffer Overflow
Background gv is a PostScript and PDF viewer for X which provides a user interface for the ghostscript interpreter. Description gv contains a buffer overflow vulnerability where an unsafe sscanf call is used to interpret PDF and PostScript files. Impact By enticing a user to view a malformed PDF ...
GNU Mailutils 0.6 - Mail Email Header Buffer Overflow
source: https://www.securityfocus.com/bid/13766/info GNU Mailutils mail is affected by an email header buffer overflow vulnerability. The problem exists in the 'headergetfieldname' function of the 'mailbox/header.c' source file and manifests while the software is processing superfluous email head...
CVE-2004-0649
Buffer overflow in writepacket in control.c for l2tpd may allow remote attackers to execute arbitrary code...