Cafu 9.06 - Multiple Remote Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/38897/info Cafu is prone to a remote NULL pointer dereference vulnerability and a remote client format string vulnerability. Successful exploits may allow an attacker to execute arbitrary code within the context of the...

wu-ftpd SITE EXEC/INDEX Format String Vulnerability

No description provided by source. $Id: wuftpdsiteexecformat.rb 11166 2010-11-30 00:16:53Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and ter...

Xine 0.99.x Filename Handling Remote Format String Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17769/info The xine package is susceptible to a remote format-string vulnerability. This issue arises when the application handles specially crafted filenames. An attacker can exploit this vulnerability by crafting a...

Dia 0.8x/0.9x Filename Remote Format String Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18078/info Dia is prone to a remote format-string vulnerability. This issue arises when the application handles specially crafted filenames. An attacker can exploit this vulnerability by crafting a malicious filename that...

Citadel/UX <= 6.27 Remote Root Format String Exploit

No description provided by source. / citadelfsexp.c Citadel/UX v6.27 remote format string exploit Use: ./citadelfsexp -h host options options: -h arg host or IP -t arg type of target system -l targets list -g arg syslog GOT address -r arg RET address coki@nosystem:/audit$ ./citadelfsexp -h...

NSI Rwhoisd 1.5 - Remote Format String Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3474/info Rwhoisd is a publicly available RWHOIS server daemon for Unix based systems developed and maintained by Network Solutions Inc. Rwhoisd contains a remotely exploitable format string vulnerability. It is possible ...

IBM DB2 db2start Format String Arbitrary Code Execution

No description provided by source. source: http://www.securityfocus.com/bid/8989/info Multiple command-line parameter format string vulnerabilities have been discovered in various IBM DB2 binaries. Specifically, format-based functions are implemented erroneously within the db2govd, db2start, and...

BolinTech Dream FTP Server 1.0 User Name Format String Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/9600/info It has been reported that Dream FTP Server may be prone to a remote format string vulnerability when processing a malicious request from a client for a username during FTP authentication. The issue could crash t...

rlpr <= 2.04 msg() Remote Format String Exploit

No description provided by source. by jaguar !/usr/bin/python import os, sys, socket, struct, time, telnetlib class rlprd: fd = None pad = 2 00000000 31DB xor ebx,ebx 00000002 F7E3 mul ebx 00000004 B003 mov al,0x3 00000006 80C304 add bl,0x4 00000009 89E1 mov ecx,esp 0000000B 4A dec edx 0000000C C...

eStara SoftPhone 3.0.1 - SIP SDP Message Handling Format String DoS

No description provided by source. source: http://www.securityfocus.com/bid/16629/info eStara Smartphone is prone to multiple denial-of-service vulnerabilities when processing malformed VOIP headers. Successful exploitation will cause the device to crash. INVITE sip:[email protected] SIP/2.0 Via:...

eXtremail 1.x/2.1 - Remote Format String Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/2908/info eXtremail is a freeware SMTP server available for Linux and AIX. eXtremail contains a format-string vulnerability in its logging mechanism. Attackers can send SMTP commands argumented with maliciously constructe...

Solaris <= 10 LPD Arbitrary File Delete Exploit (metasploit)

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...

Debian 2.2,S.u.S.E 6.3/6.4/7.0 man -l Format String Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2327/info man is the manual page viewing program, available with the Linux Operating System in this implementation. It is freely distributed and openly maintained. A problem with the man command may allow for the elevatio...

Libc locale exploit (2)

No description provided by source. / source: http://www.securityfocus.com/bid/1634/info ectiva 4.x/5.x,Debian 2.x,IBM AIX 3.x/4.x,Mandrake 7,RedHat 5.x/6.x,IRIX 6.x, Solaris 2.x/7/8,Turbolinux 6.x,Wirex Immunix OS 6.2 Locale Subsystem Format String Many UNIX operating systems provide...

Xine 0.99.4 M3U Remote Format String Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22252/info The 'xine' program is prone to a remote format-string vulnerability because the application fails to properly sanitize user-supplied input before including it in the format-specifier argument of a...

APSIS Pound 1.5 - Remote Format String Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10267/info APSIS Pound has been found to be prone to a remote format string vulnerability. The problem presents itself when Pound handles certain requests containing embedded format string specifiers. Ultimately this...

NAI Net Tools PKI Server 1.0 Format String Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1538/info Certain versions of Network Associates Inc.'s Net Tools PKI Public Key Infrastructure server ship with a vulnerability which allows remote attackers to execute arbitrary commands on the system which the PKI serv...

Typespeed 0.4.1 - Local Format String Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12569/info typespeed is prone to a local format string vulnerability. Successful could allow privilege escalation. / Proof of Concept local exploit for typespeed tool enva content: include stdio.h include string.h int...

XM Easy Personal FTP Server <= 5.30 - Remote Format String Write4 Exploit

No description provided by source. !/usr/bin/python XM Easy Personal FTP Server v = 5.30 Remote Format String write4 Exploit exploit by: mrme @netninja/mrmeatcorelan.be Thanks to the Corelan Security Team Note: this is a poc only, and requires the following target environment: Windows Server 23k:...

Ollydbg <= 1.10 Format String Bug

No description provided by source. // Exploit opens a new cmd.exe.Tested on win2ken+sp4en+ollydbg v1.09d // Open exploit with ollydebug and run the exploit from ollydebugF9 key. // Coded by Ahmet Cihana.k.a. hurby // Thanx to r3db4r0n, Murat Erdo??ana.k.a. Stormwr, Onur Cihana.k.a.eurnie and...