Format string

Format string vulnerability in the debug-logging feature in Application Firewall in Apple Mac OS X before 10.7.2 allows local users to gain privileges via a crafted name of an executable file...

CVE-2011-0185

Format string vulnerability in the debug-logging feature in Application Firewall in Apple Mac OS X before 10.7.2 allows local users to gain privileges via a crafted name of an executable file...

CVE-2011-0185

The CVE-2011-0185 entry concerns a format-string vulnerability in the Application Firewall’s debug-logging feature on Apple Mac OS X prior to 10.7.2, allowing local privilege escalation via a crafted executable name. Affected product: Mac OS X (Application Firewall). Root cause: format string iss...

FreeBSD : pecl-phar -- format string vulnerability (da3d381b-0ee6-11e0-becc-0022156e8794)

Entry for CVE-2010-2094 says : Multiple format string vulnerabilities in the phar extension in PHP 5.3 before 5.3.2 allow context-dependent attackers to obtain sensitive information memory contents and possibly execute arbitrary code via a crafted phar:// URI that is not properly handled by the 1...

CVE-2011-1764

Format string vulnerability in the dkimeximverifyfinish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of service daemon crash via format string specifiers in data used in DKIM logging, as demonstrated by an identity field...

CVE-2011-1764

Format string vulnerability in the dkimeximverifyfinish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of service daemon crash via format string specifiers in data used in DKIM logging, as demonstrated by an identity field...

DEBIAN-CVE-2011-1764

Format string vulnerability in the dkimeximverifyfinish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of service daemon crash via format string specifiers in data used in DKIM logging, as demonstrated by an identity field...

Format string

Format string vulnerability in the dkimeximverifyfinish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of service daemon crash via format string specifiers in data used in DKIM logging, as demonstrated by an identity field...

CVE-2011-1764

Summary: CVE-2011-1764 is a format string vulnerability in Exim’s DKIM handling. The flaw affects Exim before 4.76, in the dkim_exim_verify_finish function (src/dkim.c). By injecting format specifiers (e.g., a % character) into data used for DKIM logging (identity field), an unauthenticated remot...

CVE-2011-1764

Format string vulnerability in the dkimeximverifyfinish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of service daemon crash via format string specifiers in data used in DKIM logging, as demonstrated by an identity field...

CVE-2011-1764

Format string vulnerability in the dkimeximverifyfinish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of service daemon crash via format string specifiers in data used in DKIM logging, as demonstrated by an identity field...

Quick easy ftp server 4.0.0 plurality of command format string vulnerability-vulnerability warning-the black bar safety net

Version: Quick easy ftp server 4.0.0 other version not test Test: W2K SP4 Quick easy ftp server 4.0.0 is not safe to use wsprintfA function for string operations, resulting in format string vulnerabilities. The affected commands include LS, CD, USER, etc. Wherein the USER command does not need to...

Nfs-utils rpc.statd Multiple Remote Format String Vulnerabilities

The remote statd service is prone to multiple remote format string vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Fortinet FortiClient Crafted VPN Connection Name Handling Local Format String

FortiClient, a client-based software solution intended to provide security features for enterprise computers and mobile devices, is installed on the remote Windows host. The installed version does not properly handle format string specifiers within a VPN connection name. A local user may be able ...

TOWeb 3.0 - Local Format String Denial of Service 'TOWeb.MO' File Corruption

Exploit Title: TOWeb V3 Local Format String DOS Exploit TOWeb.MO file corruption Date: 05/09/2011 Author: BSOD Digital Fabien DROMAS Mail: [email protected] Test: OS: Windows 7 Versions: V3.17 Path: Lauyan\TOWeb V3\locale\fr\LCMESSAGES\TOWeb.MO Link:...

TOWeb 3.0 - Local Format String Denial of Service TOWeb.MO File Corruption

TOWeb 3.0 - Local Format String Denial of Service TOWeb.MO File Corruption Exploit Title: TOWeb V3 Local Format String DOS Exploit TOWeb.MO file corruption Date: 05/09/2011 Author: BSOD Digital Fabien DROMAS Mail: [email protected] Test: OS: Windows 7 Versions: V3.17 Path: Lauyan\TOWeb...

BroadWin WebAccess Client ActiveX security vulnerabilities

Format string vulnerability, memory corruption...

Vulnerabilities in BroadWin WebAccess Client 1.0.0.10

Luigi Auriemma Application: BroadWin WebAccess Client http://broadwin.com/Client.htm Versions: bwocxrun.ocx = 1.0.0.10 aka version 7.0 Platforms: Windows Bugs: A format string B arbitrary memory corruption Exploitation: remote Date: 02 Sep 2011 Author: Luigi Auriemma e-mail: [email protected]...

TOWeb Format String Denial Of Service

Exploit Title: TOWeb V3 Local Format String DOS Exploit TOWeb.MO file corruption Date: 05/09/2011 Author: BSOD Digital Fabien DROMAS Mail: [email protected] Test: OS: Windows 7 Versions: V3.17 Path: Lauyan\TOWeb V3\locale\fr\LCMESSAGES\TOWeb.MO Link:...

TOWeb V3 Local Format String DOS Exploit (TOWeb.MO file corruption)

Exploit for windows platform in category dos / poc Exploit Title: TOWeb V3 Local Format String DOS Exploit TOWeb.MO file corruption Date: 05/09/2011 Author: BSOD Digital Fabien DROMAS Mail: email protected Test: OS: Windows 7 Versions: V3.17 Path: Lauyan\TOWeb V3\locale\fr\LCMESSAGES\TOWeb.MO Lin...