CVE-2006-3908

Format string vulnerability in the flushoutput function in ConsoleStreambuf.cpp in Game Network Engine GNE 0.70 and earlier allows remote attackers to cause a denial of service crash and possibly execute code via format string specifiers in unspecified vectors involving output to the gout console...

CVE-2006-3908

CVE-2006-3908 affects Game Network Engine (GNE) versions up to 0.70, via a format-string vulnerability in the flush_output function of ConsoleStreambuf.cpp. The flaw allows remote attackers to crash the process and potentially execute code through format specifiers when output is sent to the gout...

[SECURITY] [DSA 1122-1] New Net::Server packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1122-1 [email protected] http://www.debian.org/security/ Martin Schulze July 24th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1121-1] New postgrey packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1121-1 [email protected] http://www.debian.org/security/ Martin Schulze July 24th, 2006 http://www.debian.org/security/faq -...

DSA-1122 libnet-server-perl - format string

Bulletin has no description...

DSA-1121 postgrey - format string

Bulletin has no description...

USN-321-1: mysql-dfsg-4.1 vulnerability

Jean-David Maillefer discovered a format string bug in the dateformat function's error reporting. By calling the function with invalid arguments, an authenticated user could exploit this to crash the server...

CVE-2006-3628

Multiple format string vulnerabilities in Wireshark aka Ethereal 0.10.x to 0.99.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the 1 ANSI MAP, 2 Checkpoint FW-1, 3 MQ, 4 XML, and 5 NTP dissectors...

CVE-2006-3628

Multiple format string vulnerabilities in Wireshark aka Ethereal 0.10.x to 0.99.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the 1 ANSI MAP, 2 Checkpoint FW-1, 3 MQ, 4 XML, and 5 NTP dissectors...

CVE-2006-3628

Multiple format string vulnerabilities in Wireshark aka Ethereal 0.10.x to 0.99.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the 1 ANSI MAP, 2 Checkpoint FW-1, 3 MQ, 4 XML, and 5 NTP dissectors...

DEBIAN-CVE-2006-3628

Multiple format string vulnerabilities in Wireshark aka Ethereal 0.10.x to 0.99.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the 1 ANSI MAP, 2 Checkpoint FW-1, 3 MQ, 4 XML, and 5 NTP dissectors...

CVE-2006-3469

Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of service crash via a format string instead of a date as the first parameter to the dateformat function, which is later used in a formatted pri...

Cyrus IMAPD 2.3.2 - 'pop3d' Remote Buffer Overflow (2)

!/usr/bin/ruby cyrus-imapd pop3d exploit by bannedit 05/23/2006 This exploit takes advantage of a stack based overflow. Once the stack corruption has occured it is possible to overwrite a pointer which is later used for a memcpy this gives us a write anything anywhere condition similar to a forma...

Cyrus IMAPD 2.3.2 (pop3d) Remote Buffer Overflow Exploit (2)

No description provided by source. !/usr/bin/ruby cyrus-imapd pop3d exploit by bannedit 05/23/2006 This exploit takes advantage of a stack based overflow. Once the stack corruption has occured it is possible to overwrite a pointer which is later used for a memcpy this gives us a write anything...

CVE-2006-3469

Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of service crash via a format string instead of a date as the first parameter to the dateformat function, which is later used in a formatted pri...

CVE-2006-3469

CVE-2006-3469 is a format-string vulnerability in MySQL Server's DATE_FORMAT usage (time.cc). A remote authenticated user could crash the server by passing a format string as the first parameter to date_format, which then propagates to a faulty formatted error message. Affected versions are MySQL...

CVE-2006-3628

Multiple format string vulnerabilities in Wireshark aka Ethereal 0.10.x to 0.99.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the 1 ANSI MAP, 2 Checkpoint FW-1, 3 MQ, 4 XML, and 5 NTP dissectors...

CVE-2006-3628

Wireshark/Ethereal suffers format-string vulnerabilities in several dissectors (Checkpoint FW-1, MQ, XML, NTP) across versions 0.10.x–0.99.0. The issues allow remote attackers to trigger denial of service and, in some cases, execute arbitrary code. Public advisories in Debian, Gentoo, SuSE/openSU...

CVE-2006-3628

Multiple format string vulnerabilities in Wireshark aka Ethereal 0.10.x to 0.99.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the 1 ANSI MAP, 2 Checkpoint FW-1, 3 MQ, 4 XML, and 5 NTP dissectors...

Trend Micro OfficeScan 7.3 Multiple Vulnerabilities

The remote host appears to be running Trend Micro OfficeScan Server. This version of OfficeScan is vulnerable to multiple stack overflows in CGI programs that could allow a remote attacker to execute code in the context of the remote server. Note that OfficeScan server under Windows runs with...