Tripwire Format String (CVE-2004-0536)

Tripwire is a software tool that checks file system changes on a target system. Tripwire scans file systems for changes and can be configured to send an email report with the scan details. There is a format string vulnerability in the implementation of the C++ class cPipedMailMessage in Tripwire...

CVE-2010-1550

Format string vulnerability in ovetdemandpoll.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via format string specifiers in the sel parameter...

CVE-2010-1550

CVE-2010-1550 concerns HP OpenView Network Node Manager (NNM) prior to patching, affecting ovet_demandpoll.exe on OV NNM 7.01, 7.51 and 7.53. The vulnerability is a format-string error triggered by the POST variable sel in the ovet_demandpoll.exe process, allowing remote code execution without au...

Ipswitch WS_FTP Professional < 12.2 'HTTP' Response Format String Vulnerability

Ipswitch WSFTP Professional is prone to a format string vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Format string

Format string vulnerability in Ipswitch WSFTP Professional 12 before 12.2 allows remote attackers to cause a denial of service crash via format string specifiers in the status code portion of an HTTP response...

CVE-2009-4775

Format string vulnerability in Ipswitch WSFTP Professional 12 before 12.2 allows remote attackers to cause a denial of service crash via format string specifiers in the status code portion of an HTTP response...

CVE-2009-4775

Format string vulnerability in Ipswitch WSFTP Professional 12 before 12.2 allows remote attackers to cause a denial of service crash via format string specifiers in the status code portion of an HTTP response...

scsi-target-utils: format string vulnerability

Multiple format string vulnerabilities in isns.c in 1 Linux SCSI target framework aka tgt or scsi-target-utils 1.0.3, 0.9.5, and earlier and 2 iSCSI Enterprise Target aka iscsitarget 0.4.16 allow remote attackers to cause a denial of service tgtd daemon crash or possibly have unspecified other...

CVE-2009-4769

CVE-2009-4769 has concrete details across multiple sources: it affects httpdx (HTTP server component) and ftp server functionality, specifically the tolog() format string vulnerability in httpdx versions 1.4 to 1.5 (including 1.4.5, 1.4.6, 1.4.6b, 1.5). The root cause is improper handling of form...

[DSecRG-09-053] VMware Remoute Console - format string

Digital Security Research Group DSecRG Advisory DSECRG-09-053 Application: VMware Remoute Console Version: e.x.p build-158248 Vendor URL: http://vmware.com Bugs: Format String Vulnerabilitys Exploits: YES PoC Reported: 07.08.2009 Vendor response: 13.08.2009 Date of Public Advisory: 09.04.2010 CVE...

CVE-2009-3732

Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console aka VMrc allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2010-1139

Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Linux, and VMware Fusion 2.x before 2.0.7 build 246742, allows local users to gain privileges via format string...

CVE-2010-1139

Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Linux, and VMware Fusion 2.x before 2.0.7 build 246742, allows local users to gain privileges via format string...

CVE-2009-3732

CVE-2009-3732 is a VMware Remote Console (VMrc) format-string vulnerability in vmware-vmrc.exe build 158248 that allows remote code execution via a malicious page or URL. Exploitation requires luring the VMrc user to open a crafted page; code executes with the privileges of the logged-on user. Th...

VMware Remote Console e.x.p build-158248 - format string vulnerability

Exploit for multiple platform in category dos / poc ====================================================================== VMware Remote Console e.x.p build-158248 - format string vulnerability ====================================================================== Digital Security Research Group...

Sun Java System Web Server Multiple Vulnerabilities

This host has Sun Java Web Server running which is prone to Multiple Vulnerabilities. OpenVAS Vulnerability Test $Id: gbsunjavasyswebservmultvuln.nasl 6637 2017-07-10 09:58:13Z teissa $ Sun Java System Web Server Multiple Vulnerabilities Authors: Michael Meyer Copyright: Copyright c 2010 Greenbon...

Remote Help HTTP server format string vulnerability

No description provided...

CVE-2010-0393

CVE-2010-0393 affects CUPS: the cupsGetlang function in lppasswd historically uses an environment variable to select the localization file, allowing local privilege escalation via crafted localization data with format string specifiers in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4.1. The vulnerability’s r...

Debian DSA-2007-1 : cups - format string vulnerability

Ronald Volgers discovered that the lppasswd component of the cups suite, the Common UNIX Printing System, is vulnerable to format string attacks due to insecure use of the LOCALEDIR environment variable. An attacker can abuse this behaviour to execute arbitrary code via crafted localization files...

Ubuntu Update for cups, cupsys vulnerabilities USN-906-1

Ubuntu Update for Linux kernel vulnerabilities USN-906-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9061.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for cups, cupsys vulnerabilities USN-906-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...