SonicWALL SSL-VPN Appliance Format String Vulnerability

aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 29-May-2009 Software: SonicWALL - SSL-VPN Remote Access http://www.sonicwall.com/ Description: "SonicWALL SSL VPN appliances provide small and mid-size organizations an easy-to-use, secure and...

SonicWALL Format String Vulnerability

aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 29-May-2009 Software: SonicWALL - SSL-VPN Remote Access http://www.sonicwall.com/ Description: "SonicWALL SSL VPN appliances provide small and mid-size organizations an easy-to-use, secure and...

SonicWALL SSL-VPN - 'cgi-bin/welcome/VirtualOffice' Remote Format String

source: https://www.securityfocus.com/bid/35145/info Multiple SonicWALL SSL-VPN devices are prone to a remote format-string vulnerability because they fail to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. Attackers may exploit th...

SonicWALL SSL-VPN - cgi-binwelcomeVirtualOffice Remote Format String

SonicWALL SSL-VPN - cgi-binwelcomeVirtualOffice Remote Format String source: https://www.securityfocus.com/bid/35145/info Multiple SonicWALL SSL-VPN devices are prone to a remote format-string vulnerability because they fail to properly sanitize user-supplied input before passing it as the format...

SonicWALL Global VPN Client < 4.0.0.830 Format String Vulnerabilities

The version of the SonicWALL Global VPN Client software installed on the remote Windows host fails to sanitize the 'name' attribute of the 'Connection' tag and the content of the 'Hostname' tag in the configuration file of format strings. If an attacker can trick a user on the affected host into...

SEC Consult SA-20090525-4 :: SonicOS Format String Vulnerability

SEC Consult Security Advisory 20090525-4 ========================================================================== title: SonicOS Format String Vulnerability program: SonicWALL Global VPN Client vulnerable version: PRO 4100 SonicOS 4.0.0.2-51e Standard and Enhanced possibly other versions...

SonicOS Format String

SEC Consult Security Advisory ========================================================================== title: SonicOS Format String Vulnerability program: SonicWALL Global VPN Client vulnerable version: PRO 4100 SonicOS 4.0.0.2-51e Standard and Enhanced possibly other versions homepage:...

FreeBSD : imap-uw -- University of Washington IMAP c-client Remote Format String Vulnerability (5ed2f96b-33b7-4863-8c6b-540d22344424)

SecurityFocus reports : University of Washington IMAP c-client is prone to a remote format-string vulnerability because the software fails to adequately sanitize user-supplied input before passing it as the format-specifier to a formatted-printing function. %NASLMINLEVEL 70300 C Tenable Network...

SonicWALL Global VPN Client 4.0 - Log File Remote Format String

SonicWALL Global VPN Client 4.0 - Log File Remote Format String source: https://www.securityfocus.com/bid/35093/info SonicWALL Global VPN Client is prone to a remote format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to ...

SonicWALL Global VPN Client 4.0 - Log File Remote Format String

source: https://www.securityfocus.com/bid/35093/info SonicWALL Global VPN Client is prone to a remote format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. Successfully exploiting this issu...

Xitami Multiple Format String Vulnerabilities

This host has Xitami web server installed and is prone to Multiple Format String Vulnerabilities. OpenVAS Vulnerability Test $Id: secpodxitamimultformatstringvuln.nasl 5148 2017-01-31 13:16:55Z teissa $ Xitami Multiple Format String Vulnerabilities Authors: Nikita MR Copyright c 2009 SecPod,...

Xitami Multiple Format String Vulnerabilities

Xitami web server is prone to multiple format string vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

DSA-1785-1 wireshark - several vulnerabilities

Bulletin has no description...

FreeBSD : ezbounce remote format string vulnerability (c480eb5e-7f00-11d8-868e-000347dd607f)

A security hole exists that can be used to crash the proxy and execute arbitrary code. An exploit is circulating that takes advantage of this, and in some cases succeeds in obtaining a login shell on the machine. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...

Mandriva Linux Security Advisory : wireshark (MDVSA-2009:088)

Multiple vulnerabilities has been identified and corrected in wireshark : o The PROFINET dissector was vulnerable to a format string overflow CVE-2009-1210. o The Check Point High-Availability Protocol CPHAP dissecto could crash CVE-2009-1268. o Wireshark could crash while loading a Tektronix .rf...

FreeBSD : qpopper format string vulnerability (ebdf65c7-2ca6-11d8-9355-0020ed76ef5a)

An authenticated user may trigger a format string vulnerability present in qpopper's UIDL code, resulting in arbitrary code execution with group ID mail' privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the...

FreeBSD : proxytunnel -- format string vulnerability (50744596-368f-11d9-a9e7-0001020eed82)

A Gentoo Linux Security Advisory reports : Florian Schilhabel of the Gentoo Linux Security Audit project found a format string vulnerability in Proxytunnel. When the program is started in daemon mode -a port, it improperly logs invalid proxy answers to syslog. A malicious remote server could send...

CentOS 3 / 4 : vim (CESA-2008:0617)

Updated vim packages that fix various security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Vim Visual editor IMproved is an updated and improved version of the vi editor. Severa...

FreeBSD : Buffer overflows and format string bugs in Emil (ce46b93a-80f2-11d8-9645-0020ed76ef5a)

Ulf Harnhammar reports multiple buffer overflows in Emil, some of which are triggered during the parsing of attachment filenames. In addition, some format string bugs are present in the error reporting code. Depending upon local configuration, these vulnerabilities may be exploited using speciall...

FreeBSD : hsftp format string vulnerabilities (316e1c9b-671c-11d8-9aad-000a95bc6fae)

Ulf Harnhammar discovered a format string bug in hsftp's file listing code may allow a malicious server to cause arbitrary code execution by the client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXM...