CVE-2005-1523

CVE-2005-1523 : GNU Mailutils imap4d has a format-string vulnerability in IMAP command tags that allows remote code execution. Affected: imap4d before 0.6.90 (and 0.5/0.6). Impact: arbitrary code execution with IMAP service privileges. Mitigation: upgrade to a version where the issue is fixed (pe...

CVE-2005-1523

Format string vulnerability in imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via format string specifiers in the command tag for IMAP commands...

CVE-2005-1523

Format string vulnerability in imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via format string specifiers in the command tag for IMAP commands...

CVE-2005-1686

CVE-2005-1686 affects gedit/gedit-based GNOME environments. The vulnerability is a format string flaw in the handling of filenames (format specifiers in filenames) that could lead to a crash and, per multiple advisories, may allow arbitrary code execution. Public discussions in various advisories...

CVE-2005-1686

Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service application crash via a bin file with format string specifiers in the filename. NOTE: while this issue is triggered on the command line by the gedit user, it has been reported that web browsers and email...

CVE-2005-1702

CVE-2005-1702 affects Warrior Kings: Battles 1.23 and earlier and Warrior Kings 1.3 and earlier. It is a format string vulnerability in the nickname field that could allow remote attackers to execute arbitrary code. Root cause: improper handling of format string specifiers in a nickname. Impact: ...

CVE-2005-1738

The provided CVE-2005-1738 data describes a format-string vulnerability in the logPrintBadfile function of delbadfiles.c in Iron Bars SHell (ibsh) prior to version 0.3d. The flaw, triggered by certain inputs not properly handled in a syslog call, allows access to files outside the home directory ...

CVE-2005-1702

Format string vulnerability in Warrior Kings: Battles 1.23 and earlier and Warrior Kings 1.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a nickname...

CVE-2005-1692

Format string vulnerability in gxine 0.4.1 through 0.4.4, and other versions down to 0.3, allows remote attackers to execute arbitrary code via a ram file with a URL whose hostname contains format string specifiers...

Warrior Kings 1.3 And Warrior Kings: Battles 1.23 - Remote Format String

source: https://www.securityfocus.com/bid/13711/info Warrior Kings, and Warrior Kings: Battles are vulnerable to a remote format string vulnerability. This issue is due to a failure of the application to securely implement a formatting printing function. This vulnerability allows remote attackers...

[SECURITY] [DSA 726-1] New oops packages fix format string vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 726-1 [email protected] http://www.debian.org/security/ Martin Schulze May 20th, 2005 http://www.debian.org/security/faq -...

CVE-2005-1686

Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service application crash via a bin file with format string specifiers in the filename. NOTE: while this issue is triggered on the command line by the gedit user, it has been reported that web browsers and email...

DSA-726-1 oops - format string vulnerability

Bulletin has no description...

CVE-2004-2074

CVE-2004-2074 affects BolinTech Dream FTP Server 1.02. A format string vulnerability in handling PASS and RETR commands allows a local user to crash the service (DoS). Public references document a Metasploit/Exploit-DB presence validating the flaw and citing public proofs of concept. The CVSS bas...

CVE-2003-1206

Format string vulnerability in Crob FTP Server 2.60.1 allows remote attackers to cause a denial of service crash via "%s" or "%n" sequences in 1 the username during login, or other FTP commands such as 2 dir...

CVE-2004-2074

Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service crash via format string specifiers in the 1 PASS or 2 RETR commands...

CVE-2003-1206

The CVE-2003-1206 entry concerns Crob FTP Server 2.60.1. A format string vulnerability permits remote users to crash the server (denial of service) by sending format specifiers such as "%s" or "%n" in login username or in commands like DIR. The root cause is untrusted user input being treated as ...

CVE-2003-1206: Undefined Security Weakness

Format string vulnerability in Crob FTP Server 2.60.1 allows remote attackers to cause a denial of service crash via "%s" or "%n" sequences in 1 the username during login, or other FTP commands such as 2 dir...

CVE-2004-2074: Undefined Security Weakness

Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service crash via format string specifiers in the 1 PASS or 2 RETR commands...

CVE-2005-1478

CVE-2005-1478 affects NetWin DMail 3.1a DSmtp (dsmtp.exe) where a format-string vulnerability in the xtellmail command allows remote code execution. The root cause is improper handling of format specifiers in DSmtp; impact is arbitrary code execution on the server. Public exploit details are not ...