GNU Mailutils imap4d SEARCH Format String (CVE-2005-2878)

The Internet Message Access Protocol IMAP specifies a protocol for the access and manipulation of electronic mail. The protocol permits the manipulation of mailboxes on a remote server and allows a remote client, among other operations, to create, delete, or rename mailboxes on the server side. T...

SHOUTcast Filename Format String - ver 2 (CVE-2004-1373)

SHOUTcast is a free distributed streaming audio system developed by Nullsoft. It is widely used by Internet-based radio stations. The SHOUTcast server implements a subset of the HTTP protocol to communicate with clients. A client-server session starts with the client requesting an audio stream fr...

CVE-2009-3663

CVE-2009-3663 affects httpdx Web Server 1.4; a format string vulnerability in h_readrequest() (http.c) can be triggered via the Host header, enabling remote crash or arbitrary code execution. OpenVAS entries corroborate the issue. No remediation details are provided in the supplied documents.

RealNetworks RealPlayer Error Message Format String (CVE-2005-2710)

RealPlayer and Helix Player are media players developed by RealNetworks, Inc. These applications are capable of playing back numerous multimedia file formats. They support a streaming slide show technology called RealPix that allows for the creation of presentations that include image content. Th...

GNU Mailutils imap4d Format String (CVE-2005-1523)

The Internet Message Access Protocol IMAP specifies a protocol for the access and manipulation of electronic mail. The protocol permits the manipulation of mailboxes on a remote server and allows a remote client, among other operations, to create, delete, or rename mailboxes on the server side. T...

Apple Mac OS X Installer Package Filename Format String (CVE-2007-0465)

Apple Computer Mac OS X is the operating system shipped with Apple Macintosh computers. The Installer component is an application included in Mac OS X systems which extracts and installs applications from installation packages. The installer provides features which allow developers to customize...

SILC Client Channel Name Format String Vulnerability

SILC Client is prone to a format string vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SILC Client Nickname Field Format String Vulnerability

This host has SILC Client/Toolkit installed, and is prone to Format String vulnerability. OpenVAS Vulnerability Test $Id: secpodsilcprdtsnicknameformatstringvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ SILC Client Nickname Field Format String Vulnerability Authors: Nikita MR Copyright: Copyright ...

SILC Client < 1.1.8 Nickname Field Format String Vulnerability

SILC Client/Toolkit is prone to a format string vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE9 Security Update : mailman (YOU Patch Number 11243)

This update of mailman fixes the following security issues : - A malicious user could visit a specially crafted URI and inject an apparent log message into Mailman's error log which might induce an unsuspecting administrator to visit a phishing site. This has been blocked. Thanks to Moritz Nauman...

silc format string vulnerability

Multiple format string vulnerabilities on different messages parsing...

[SECURITY] [DSA 1877-1] New mysql-dfsg-5.0 packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1877-1 [email protected] http://www.debian.org/security/ Sebastien Delafond September 02, 2009 http://www.debian.org/security/faq -...

Format string

Format string vulnerability in MemeCode Software i.Scribe 1.88 through 2.00 before Beta9 allows remote SMTP servers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in a server response, which is not properly handled "when displaying the signon...

CVE-2008-7074

Format string vulnerability in MemeCode Software i.Scribe 1.88 through 2.00 before Beta9 allows remote SMTP servers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in a server response, which is not properly handled "when displaying the signon...

CVE-2008-7074

CVE-2008-7074 describes a format string vulnerability in MemeCode Software i.Scribe (versions 1.88 through 2.00 before Beta9) that is triggered by format specifiers in the signon message of server responses. The issue can be exploited by remote SMTP servers to cause a denial of service (crash) an...

CVE-2009-2916

Format string vulnerability in the CNSAddTxt function in logs.dll in 2K Games Vietcong 2 1.10 and earlier might allow remote attackers to execute arbitrary code via format string specifiers in the nickname...

CVE-2009-2916

Format string vulnerability in the CNSAddTxt function in logs.dll in 2K Games Vietcong 2 1.10 and earlier might allow remote attackers to execute arbitrary code via format string specifiers in the nickname...

CVE-2009-2916

The CVE-2009-2916 vulnerability affects 2K Games Vietcong 2 up to version 1.10, in the logs.dll CNS_AddTxt function. The underlying issue is a format string vulnerability in the nickname handling, enabling remote code execution. Exploitation is described as remote and network-based, with no authe...

CVE-2009-2191

CVE-2009-2191 is a format-string vulnerability in Mac OS X Login Window (affecting 10.4.11 and 10.5 up to 10.5.7; fixed in 10.5.8 via Security Update 2009-003). The issue arises from format specifiers in an application name, which can lead to arbitrary code execution or an application crash. Publ...

CVE-2009-2191

Format string vulnerability in Login Window in Apple Mac OS X 10.4.11 and 10.5 before 10.5.8 allows attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in an application name...