3142 matches found
CVE-2004-2523
OpenFTPD affected: OpenFTPD 0.30.2 and earlier. The vulnerability is a format string flaw in the SITE MSG command’s msg.c (cat_message) that lets remote authenticated users execute arbitrary code via format specifiers in the message argument. This is a remote code execution risk with authenticati...
CVE-2004-2515
Format string vulnerability in VMware Workstation 4.5.2 build-8848, if running with elevated privileges, might allow local users to execute arbitrary code via format string specifiers in command line arguments. NOTE: it is not clear if there are any default or typical circumstances under which...
CVE-2005-3262
Format string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via format string specifiers in a UUE/XXE file, which are not properly handled when WinRAR displays diagnostic errors related to an invalid filename...
CVE-2005-3262
CVE-2005-3262 relates to a format string vulnerability in WinRAR (RARLAB) versions 2.90 through 3.50. The issue arises when WinRAR displays diagnostic errors for an invalid filename, where format string specifiers in a UUE/XXE file are not properly handled, allowing remote attackers to execute ar...
CVE-2005-2967
Format string vulnerability in inputcdda.c in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0 through 1.0.2, and 1.1.1 allows remote servers to execute arbitrary code via format string specifiers in metadata in CDDB server responses when the victim plays a CD...
CVE-2005-2661
Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows remote IMAP servers to execute arbitrary code via format string specifiers in a banner or capability line...
CVE-2005-2661
Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows remote IMAP servers to execute arbitrary code via format string specifiers in a banner or capability line...
CVE-2005-2661
The CVE-2005-2661 issue affects up-imapproxy (IMAP Proxy) versions 1.2.3 and 1.2.4. It is a format string vulnerability in the ParseBannerAndCapability function in main.c, allowing a remote IMAP server to execute arbitrary code via format specifiers in a banner or capability line. Public sources ...
CVE-2005-2967
Format string vulnerability in inputcdda.c in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0 through 1.0.2, and 1.1.1 allows remote servers to execute arbitrary code via format string specifiers in metadata in CDDB server responses when the victim plays a CD...
DTSA-20-1 mailutils - Format string vulnerability
Bulletin has no description...
CVE-2005-2715
CVE-2005-2715 involves a format-string vulnerability in VERITAS NetBackup Java Authentication Service (bpjava-msvc) daemon. The flaw affects NetBackup components listed in the description (e.g., 4.5FP/4.5MP and 5.0–6.0 families) and allows remote code execution via the COMMAND_LOGON_TO_MSERVER co...
CVE-2005-2715
Format string vulnerability in the Java user interface service bpjava-msvc daemon for VERITAS NetBackup Data and Business Center 4.5FP and 4.5MP, and NetBackup Enterprise/Server/Client 5.0, 5.1, and 6.0, allows remote attackers to execute arbitrary code via the COMMANDLOGONTOMSERVER command...
[SECURITY] [DSA 863-1] New xine-lib packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 863-1 [email protected] http://www.debian.org/security/ Martin Schulze October 12th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 863-1] New xine-lib packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 863-1 [email protected] http://www.debian.org/security/ Martin Schulze October 12th, 2005 http://www.debian.org/security/faq -...
DSA-863-1 xine-lib - format string vulnerability
Bulletin has no description...
Debian DSA-855-1 : weex - format string vulnerability
Ulf Harnhammar from the Debian Security Audit Project discovered a format string vulnerability in weex, a non-interactive FTP client for updating web pages, that could be exploited to execute arbitrary code on the clients machine. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descripti...
GLSA-200510-07 : RealPlayer, Helix Player: Format string vulnerability
The remote host is affected by the vulnerability described in GLSA-200510-07 RealPlayer, Helix Player: Format string vulnerability 'c0ntex' reported that RealPlayer and Helix Player suffer from a heap overflow. Impact : By enticing a user to play a specially crafted realpix .rp or realtext .rt...
GLSA-200510-08 : xine-lib: Format string vulnerability
The remote host is affected by the vulnerability described in GLSA-200510-08 xine-lib: Format string vulnerability Ulf Harnhammar discovered a format string bug in the routines handling CDDB server response contents. Impact : An attacker could submit malicious information about an audio CD to a...
xine-lib <= 1.1 (media player library) Remote Format String Exploit
No description provided by source. !/usr/bin/perl -- When playing an Audio CD, using xine-lib based media application, the library contacts a CDDB server to retrieve metadata like the title and artist's name. During processing of this data, a response from the server, which is located in memory o...