CVE-2006-4181: Undefined Security Weakness

Format string vulnerability in the sqllog function in the SQL accounting code for radiusd in GNU Radius 1.2 and 1.3 allows remote attackers to execute arbitrary code via unknown vectors...

Songbird Media Player <= 0.2 Format String Denial of Service PoC

Exploit for unknown platform in category dos / poc ================================================================ Songbird Media Player = 0.2 Format String Denial of Service PoC ================================================================ /...

Songbird Media Player 0.2 - Format String Denial of Service (PoC)

/ ======================================================================== 0-day Songbird Media Player November 2006 - Month Of Greg's Media Player Exploits : i'll probably continue it into December Discovered and...

Debian DSA-1213-1 : imagemagick - several vulnerabilities

Several remote vulnerabilities have been discovered in Imagemagick, a collection of image manipulation programs, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-0082 Daniel Kobras discovered that...

[SECURITY] [DSA 1213-1] New imagemagick packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1213-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 19th, 2006 http://www.debian.org/security/faq -...

DSA-1213 imagemagick

Bulletin has no description...

CVE-2006-5790

Multiple format string vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 an entry with an attachment whose name contains format string specifiers elsubmit function, and possibly other vectors in...

CVE-2006-5790

Multiple format string vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 an entry with an attachment whose name contains format string specifiers elsubmit function, and possibly other vectors in...

CVE-2006-5789

WarFTPd 1.82.00-RC11 is affected by multiple remote format-string vulnerabilities. The OpenVAS notes indicate the server is prone to format-string issues caused by unsanitized input being passed to formatted-output functions, enabling a denial of service (and potentially arbitrary code execution)...

CVE-2006-5790

The CVE-2006-5790 issue affects elog (web-based electronic logbook) up to version 2.6.2 and earlier, with multiple format-string vulnerabilities in elogd.c (and related vectors in functions such as el_submit, receive_config, show_rss_feed, show_elog_list, show_logbook_node, server_loop) that coul...

CVE-2006-5790

Multiple format string vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 an entry with an attachment whose name contains format string specifiers elsubmit function, and possibly other vectors in...

CVE-2006-5790

Multiple format string vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 an entry with an attachment whose name contains format string specifiers elsubmit function, and possibly other vectors in...

WarFTP Daemon < 1.82.00-RC13 Multiple Command Remote Format Strings

Binary data 3808.prm...

WarFTPd FTP Server format string vulnerability

CWD command format string vulnerability...

Apache mod_tcl module contains a format string error

Overview A format string vulnerability exists in the modtcl Apache module. This vulnerability may allow a remote attacker to execute arbitrary code. Description The Apache HTTP Server, also known as httpd, is an open-source HTTP server that runs on Microsoft Windows, Linux, Unix, and Apple OS X...

CVE-2006-5789: Undefined Security Weakness

War FTP Daemon WarFTPd 1.82.00-RC11 allows remote authenticated users to cause a denial of service via a large number of "%s" format strings in 1 CWD, 2 CDUP, 3 DELE, 4 NLST, 5 LIST, 6 SIZE, and possibly other commands. NOTE: it is possible that vector 1 is an off-by-one variant or incomplete fix...

CVE-2006-5790: Undefined Security Weakness

Multiple format string vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 an entry with an attachment whose name contains format string specifiers elsubmit function, and possibly other vectors in...

ZABBIX格式串处理及缓冲区溢出漏洞

ZABBIX是用于监控网络参数及服务器状态的软件。 ZABBIX实现上存在多个格式串及缓冲区溢出漏洞，远程攻击者可能利用这些漏洞诱骗用户连接到恶意的ZABBIX代理导致拒绝服务或执行任意指令。 ZABBIX SIA zabbix 1.1.2-2 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.zabbix.org/ !/usr/bin/perl -- zabbix-exploiter by Ulf Harnhammar in 2006 I hereby place this program in the public domain. use...

FreeBSD TOP Format String Vulnerability

No description provided by source. / freebsd x86 top exploit affected under top-3.5beta9 including this version 1. get the address of .dtors from /usr/bin/top using objdump , 'objdump -s -j .dtors /usr/bin/top' 2. divide it into four parts, and set it up into an environment variable like "XSEO=" ...

Solaris/SPARC 2.7 / 7 locale Format String Exploit

No description provided by source. / Exploit for the locale format string vulnerability in Solaris/SPARC 2.7 / 7 Based on the exploit by Warning3 [email protected] For additional information see http://www.phreedom.org/solar/localesol.txt By Solar Eclipse [email protected] Assistant...