GLSA-200503-12 : Hashcash: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200503-12 Hashcash: Format string vulnerability Tavis Ormandy of the Gentoo Linux Security Audit Team identified a flaw in the Hashcash utility that an attacker could expose by specifying a malformed reply address. Impact :...

SHOUTcast 1.9.4 (Windows) - File Request Format String Remote Overflow

/ Object: PoC for Nullsoft SHOUTcast 1.9.4 File Request Format String Vulnerability From the securityfocus bid at https://www.securityfocus.com/bid/12096 : "This issue was reported to exist in version 1.9.4 on Linux. It is likely that versions for other platforms are also affected by the...

SHOUTcast 1.9.4 File Request Format String Remote Exploit (win)

No description provided by source. / Object: PoC for Nullsoft SHOUTcast 1.9.4 File Request Format String Vulnerability From the securityfocus bid at http://www.securityfocus.com/bid/12096 : "This issue was reported to exist in version 1.9.4 on Linux. It is likely that versions for other platforms...

Prozilla 1.3.7.3 - Remote Format String

Prozilla 1.3.7.3 - Remote Format String / ...\ \ /--..... .::.:/ / \ :.::. .::::./ / / |/ .::::. / / | \ \ / / .\\ / . . . ..::.... Electronic Souls ....::.. - Prozilla vs. Gentoo Security round 2 !@ Sometime ago there was a private exploit for Prozilla and due to some kiddo who randomly...

ngIRCd <= 0.8.2 Remote Format String Exploit

No description provided by source. / ngircdfsexp.c ngIRCd = 0.8.2 remote format string exploit Note: To obtain a successful exploitation, we need that ngIRCd has been compiled with IDENT, logging to SYSLOG and DEBUG enabled. Original Reference: http://www.nosystem.com.ar/advisories/advisory-11.tx...

CVE-2004-2714

Unspecified vulnerability in Window Maker 0.80.2 and earlier allows attackers to perform unknown actions via format string specifiers in a font specification in WMGLOBAL, probably a format string vulnerability...

Kreed <= 1.05 Format String and Denial of Service Exploit

No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include time.h / Read/Write bits to buffer 0.1.1 by Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org max 32 bits numbers supported from 0 to 4294967295. Probabl...

GLSA-200411-07 : Proxytunnel: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200411-07 Proxytunnel: Format string vulnerability Florian Schilhabel of the Gentoo Linux Security Audit project found a format string vulnerability in Proxytunnel. When the program is started in daemon mode -a port, it improperly...

Rlpr Advisory

,'| .-''-.....--'; / '. ..-' , ,--...--''' .--''' /' -';' ; ; ; ...--'' ...--..' .;.' fL ,....----''' ,..--'' felinemenace.org Program: rlprd 2.0.4 Impact: remote root Discovered: jaguar Writeup and exploits: Andrew Griffiths 1 Background It is a package that makes it possible or at the very leas...

rlpr <= 2.04 msg() Remote Format String Exploit

Exploit for linux platform in category remote exploits =============================================== rlpr 0,1,2 lnxstagetwo = "\x31\xc0\x89\xc3\x89\xc1\x89\xc2\xb2\x3f\x88\xd0\xb3\x04" lnxstagetwo += "\xcd\x80\x89\xd0\x41\xcd\x80\x89\xd0\x41\xcd\x80" execute /bin/sh lnxstagetwo += "\x90" 100...

CVE-2004-0536

Format string vulnerability in Tripwire commercial 4.0.1 and earlier, including 2.4, and open source 2.3.1 and earlier, allows local users to gain privileges via format string specifiers in a file name, which is used in the generation of an email report...

[EXPL] Pound Format String Exploit

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Neon WebDAV Client Library 0.2x - Format String

Neon WebDAV Client Library 0.2x - Format String source: https://www.securityfocus.com/bid/10136/info It has been reported that the Neon client library is prone to multiple remote format string vulnerabilities. This issue is due to a failure of the application to properly implement format string...

Hylafax 4.1.x - HFaxD Format String

// source: https://www.securityfocus.com/bid/9005/info Hylafax hfaxd daemon has been reported prone to an unspecified format string vulnerability that may be exploited under non-standard configurations to execute arbitrary instructions remotely as the root user. / Hylafax remote root PoC exploit ...

IBM DB2 - db2start Format String Arbitrary Code Execution

IBM DB2 - db2start Format String Arbitrary Code Execution source: https://www.securityfocus.com/bid/8989/info Multiple command-line parameter format string vulnerabilities have been discovered in various IBM DB2 binaries. Specifically, format-based functions are implemented erroneously within the...

eMule/xMule/LMule OP_SERVERMESSAGE Format String Exploit

Exploit for unknown platform in category remote exploits ======================================================== eMule/xMule/LMule OPSERVERMESSAGE Format String Exploit ======================================================== / eMule/xMule/LMule OPSERVERMESSAGE Format String Vulnerability...

eMule/xMule/LMule OP_SERVERMESSAGE Format String Exploit

No description provided by source. / eMule/xMule/LMule OPSERVERMESSAGE Format String Vulnerability SecurityFocus BID 8443 proof of concept code version 1.0 Aug 29 2003 by Rémi Denis-Courmont This vulnerability was found by: Stefan Esser [email protected] whose original advisory may be fetched...

eMulexMuleLMule - OP_SERVERMESSAGE Format String

eMulexMuleLMule - OPSERVERMESSAGE Format String / eMule/xMule/LMule OPSERVERMESSAGE Format String Vulnerability SecurityFocus BID 8443 proof of concept code version 1.0 Aug 29 2003 by Rémi Denis-Courmont This vulnerability was found by: Stefan Esser whose original advisory may be fetched from:...

methane IRCd 0.1.1 - Remote Format String

// source: https://www.securityfocus.com/bid/8038/info Behamut IRCd has been reported prone to remotely exploitable format string vulnerability. The issue presents itself when Behamut is compiled with DEBUGMODE defined. Reportedly a remote attacker may send malicious format specifiers to trigger ...

LBreakout2 2.x - Login Remote Format String

LBreakout2 2.x - Login Remote Format String / source: https://www.securityfocus.com/bid/8021/info It has been reported that lbreakout2 is vulnerable to a format string issue in the login component. This may result in an attacker executing arbitrary code on a vulnerable host. / / lbreakout2-2.5+:...