8585 matches found
CVE-2004-1522
CVE-2004-1522 corresponds to a format-string vulnerability in Army Men RTS 1.0. The flaw allows remote attackers to trigger a denial of service (application crash) by sending a nickname containing format strings. The NVD entry indicates an untreated impact: availability is partially affected; oth...
CVE-2005-0484
The CVE-2005-0484 issue is a format-string vulnerability in the gprostats component of GProFTPD, where a crafted filename during an FTP transfer can insert format specifiers into the ProFTPD transfer log and potentially allow remote code execution. Affected systems are GProFTPD with gprostats pri...
CVE-2005-0484
Format string vulnerability in gprostats for GProFTPD before 8.1.9 may allow remote attackers to execute arbitrary code via an FTP transfer with a crafted filename that causes format string specifiers to be inserted into the ProFTPD transfer log...
CVE-2004-1500
Format string vulnerability in the Lithtech engine, as used in multiple games, allows remote authenticated users to cause a denial of service application crash via format string specifiers in 1 a nickname or 2 a message...
CVE-2004-1500
CVE-2004-1500 : A format string vulnerability in the Lithtech engine (used in multiple games) allows remote authenticated users to cause a denial of service (application crash) by supplying format string specifiers in either a nickname or a message. Affected impact is limited to availability (par...
CVE-2004-1523
CVE-2004-1523 describes a format-string vulnerability in the game console of Hired Team: Trial 2.0 and earlier and 2.200. The flaw allows remote attackers to trigger a denial of service (application crash) by supplying format string specifiers in a message. Affected software is the Hired Team gam...
CVE-2004-1523
Format string vulnerability in the game console in Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service application crash via format string specifiers in a message...
CVE-2004-1522
Format string vulnerability in Army Men RTS 1.0 allows remote attackers to cause a denial of service application crash via a nickname that contains format strings...
SHOUTcast 1.9.4 File Request Format String Remote Exploit (win)
No description provided by source. / Object: PoC for Nullsoft SHOUTcast 1.9.4 File Request Format String Vulnerability From the securityfocus bid at http://www.securityfocus.com/bid/12096 : "This issue was reported to exist in version 1.9.4 on Linux. It is likely that versions for other platforms...
SHOUTcast 1.9.4 (Windows) - File Request Format String Remote Overflow
/ Object: PoC for Nullsoft SHOUTcast 1.9.4 File Request Format String Vulnerability From the securityfocus bid at https://www.securityfocus.com/bid/12096 : "This issue was reported to exist in version 1.9.4 on Linux. It is likely that versions for other platforms are also affected by the...
SHOUTcast 1.9.4 File Request Format String Remote Exploit (win)
Exploit for unknown platform in category remote exploits =============================================================== SHOUTcast 1.9.4 File Request Format String Remote Exploit win =============================================================== / Object: PoC for Nullsoft SHOUTcast 1.9.4 File...
[SECURITY] [DSA 687-1] New bidwatcher packages fix format string vulnerability
-------------------------------------------------------------------------- Debian Security Advisory DSA 687-1 [email protected] http://www.debian.org/security/ Martin Schulze February 18th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 687-1] New bidwatcher packages fix format string vulnerability
-------------------------------------------------------------------------- Debian Security Advisory DSA 687-1 [email protected] http://www.debian.org/security/ Martin Schulze February 18th, 2005 http://www.debian.org/security/faq -...
CVE-2005-0158
Bidwatcher is affected by a format-string vulnerability (CVE-2005-0158) in versions before 1.3.17. A remote attacker—via a malicious or spoofed eBay web server—can cause a denial of service and potentially execute arbitrary code by sending certain responses. Multiple connected advisories referenc...
DSA-687-1 bidwatcher - format string
Bulletin has no description...
GLSA-200502-24 : Midnight Commander: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200502-24 Midnight Commander: Multiple vulnerabilities Midnight Commander contains several format string vulnerabilities CAN-2004-1004, buffer overflows CAN-2004-1005, a memory deallocation error CAN-2004-1092 and a buffer underfl...
GProFTPD: gprostats format string vulnerability
Background GProFTPD is a GTK+ administration tool for the ProFTPD server. GProFTPD is distributed with gprostats, a utility to parse ProFTPD transfer logs. Description Tavis Ormandy of the Gentoo Linux Security Audit Team has identified a format string vulnerability in the gprostats utility. Impa...
Debian DSA-687-1 : bidwatcher - format string
Ulf Harnhammar from the Debian Security Audit Project discovered a format string vulnerability in bidwatcher, a tool for watching and bidding on eBay auctions. This problem can be triggered remotely by a web server of eBay, or someone pretending to be eBay, sending certain data back. As of versio...
GLSA-200502-26 : GProFTPD: gprostats format string vulnerability
The remote host is affected by the vulnerability described in GLSA-200502-26 GProFTPD: gprostats format string vulnerability Tavis Ormandy of the Gentoo Linux Security Audit Team has identified a format string vulnerability in the gprostats utility. Impact : An attacker could exploit the...
bidwatcher -- format string vulnerability
A Debian Security Advisory reports: Ulf Härnhammer from the Debian Security Audit Project discovered a format string vulnerability in bidwatcher, a tool for watching and bidding on eBay auctions. This problem can be triggered remotely by a web server of eBay, or someone pretending to be eBay,...