CVE-2006-5790

The CVE-2006-5790 issue affects elog (web-based electronic logbook) up to version 2.6.2 and earlier, with multiple format-string vulnerabilities in elogd.c (and related vectors in functions such as el_submit, receive_config, show_rss_feed, show_elog_list, show_logbook_node, server_loop) that coul...

CVE-2006-5790

Multiple format string vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 an entry with an attachment whose name contains format string specifiers elsubmit function, and possibly other vectors in...

WarFTPd FTP Server format string vulnerability

CWD command format string vulnerability...

Apache mod_tcl module contains a format string error

Overview A format string vulnerability exists in the modtcl Apache module. This vulnerability may allow a remote attacker to execute arbitrary code. Description The Apache HTTP Server, also known as httpd, is an open-source HTTP server that runs on Microsoft Windows, Linux, Unix, and Apple OS X...

WarFTP Daemon < 1.82.00-RC13 Multiple Command Remote Format Strings

Binary data 3808.prm...

ZABBIX格式串处理及缓冲区溢出漏洞

ZABBIX是用于监控网络参数及服务器状态的软件。 ZABBIX实现上存在多个格式串及缓冲区溢出漏洞，远程攻击者可能利用这些漏洞诱骗用户连接到恶意的ZABBIX代理导致拒绝服务或执行任意指令。 ZABBIX SIA zabbix 1.1.2-2 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.zabbix.org/ !/usr/bin/perl -- zabbix-exploiter by Ulf Harnhammar in 2006 I hereby place this program in the public domain. use...

Solaris/SPARC 2.7 / 7 locale Format String Exploit

No description provided by source. / Exploit for the locale format string vulnerability in Solaris/SPARC 2.7 / 7 Based on the exploit by Warning3 [email protected] For additional information see http://www.phreedom.org/solar/localesol.txt By Solar Eclipse [email protected] Assistant...

HP-UX B11.11 /usr/bin/ct Local Format String Root Exploit

No description provided by source. / File : xhp-ux11inlsct.c Usage : cc xhp-ux11inlsct.c -o xct ; ./xct Purpose : Get a local rootshell from /usr/bin/ct,using HP-UX location language format string bug. Author : watercloud xfocus org Tested : On HP-UX B11.11 . / includestdio.h define PATH...

FreeBSD TOP Format String Vulnerability

No description provided by source. / freebsd x86 top exploit affected under top-3.5beta9 including this version 1. get the address of .dtors from /usr/bin/top using objdump , 'objdump -s -j .dtors /usr/bin/top' 2. divide it into four parts, and set it up into an environment variable like "XSEO=" ...

CVE-2006-5558

Format string vulnerability in the swask command in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via format string specifiers in the -s argument. NOTE: this might be a duplicate of CVE-2006-2574, but the details relating to CVE-2006-2574 are too vague to ...

CVE-2006-5558

Format string vulnerability in the swask command in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via format string specifiers in the -s argument. NOTE: this might be a duplicate of CVE-2006-2574, but the details relating to CVE-2006-2574 are too vague to ...

CVE-2006-5558

CVE-2006-5558: HP-UX B.11.11 (and possibly other versions) is affected by a format string vulnerability in the swask command, allowing a local user to execute arbitrary code via format string specifiers in the -s argument. The vulnerability description notes it may be a duplicate of CVE-2006-2574...

Trend Micro OfficeScan ATXCONSOLE.OCX ActiveX控件格式串处理漏洞

Trend Micro OfficeScan是一种针对整个网段的分布式杀毒软件。 Trend Micro OfficeScan企业版的管理控制台ActiveX控件ATXCONSOLE.OCX没有正确地处理格式串，返回给管理控制台的远程客户端安装名称搜索的特制格式串可能允许访问进程栈。如果成功利用的话，这可能允许用户在运行ActiveX管理控制台的系统上执行任意代码。 Trend Micro OfficeScan Corporate Edition 7.3 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

QK SMTP远程栈溢出漏洞

QK SMTP Server是一款SMTP（简单邮件传输协议）服务器软件。 QK SMTP Server在处理用户命令参数时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 QK SMTP Server在处理传送给“RCPT TO:”命令的参数时存在栈溢出漏洞，远程攻击者可以通过向服务器发送超长参数导致执行任意指令。 QKSoft QK SMTP 3.1.0 Beta QKSoft QK SMTP 3.0.1 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.qksoft.com/ /...

Debian DSA-1199-1 : webmin - multiple vulnerabilities

Several vulnerabilities have been identified in webmin, a web-based administration toolkit. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CVE-2005-3912 A format string vulnerability in miniserv.pl could allow an attacker to cause a denial of service...

HP-UX 11i (swask) Format String Local Root Exploit

No description provided by source. / HP-UX swask format string local root exploit ============================================ HP-UX 'swask' contains an exploitable format string vulnerability. The 'swask' utility is installed setuid root by default. Specifically the vulnerability is in the...

GLSA-200610-12 : Apache mod_tcl: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200610-12 Apache modtcl: Format string vulnerability Sparfell discovered format string errors in calls to the setvar function in tclcmds.c and tclcore.c. Impact : A remote attacker could exploit the vulnerability to execute...

HP-UX 11i - 'swask' Format String Privilege Escalation

/ HP-UX swask format string local root exploit ============================================ HP-UX 'swask' contains an exploitable format string vulnerability. The 'swask' utility is installed setuid root by default. Specifically the vulnerability is in the handling of the "-s" optional arguement...

Half Life (rcon) Remote Buffer Overflow Exploit

No description provided by source. / SDI HalfLife rcon remote exploit for linux x86 portuguese exploit remoto para o buffer overflow do rcon no halflife Tamandua Sekure Labs Sao Paulo - Porto Alegre, Brazil by Thiago Zaninotti c0nd0r [email protected] Gustavo Scotti csh [email protected] Proof of...

Winmail Mail Server 2.3 Remote Format String Exploit

No description provided by source. / Magic Winmail Server 2.3Build 0402 Remote Format string exploit. Coded by ThreaT. This one take advantage of a format bug in the SMTP protocol not pop3 for execute a malicious command on a vulnerable system usage : mwmxploit Target IP command to execute remote...