8623 matches found
Larson Network Print Server 9.4.2 build 105 (LstNPS) - 'NPSpcSVR.exe' License Command Remote Overflow
source: https://www.securityfocus.com/bid/27732/info Larson Software Technology Network Print Server is prone to a format-string vulnerability and a buffer-overflow vulnerability. An attacker can exploit these issues to execute arbitrary code within the context of the affected application or cras...
GLSA-200802-02 : Doomsday: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200802-02 Doomsday: Multiple vulnerabilities Luigi Auriemma discovered multiple buffer overflows in the DNetPlayerEvent function, the MsgWrite function and the NetSvReadCommands function. He also discovered errors when handling ch...
larson-poc.txt
Luigi Auriemma Application: Larson Software Technology Network Print Server http://www.cgmlarson.com/products/NetworkPrintServer.php Versions: = 9.4.2 build 105 Platforms: Windows Bugs: A format string in logging B license buffer-overflow Exploitation: remote Date: 11 Feb 2008 Author: Luigi...
Larson Network Print Server 9.4.2 build 105 - 'LstNPS' Logging Function USEP Command Remote Format String
source: https://www.securityfocus.com/bid/27732/info Larson Software Technology Network Print Server is prone to a format-string vulnerability and a buffer-overflow vulnerability. An attacker can exploit these issues to execute arbitrary code within the context of the affected application or cras...
Multiple vulnerabilities in Ipswitch Instant Messaging 2.0.8.1
Luigi Auriemma Application: Ipswitch Instant Messaging http://www.ipswitch.com/products/instantmessaging Versions: = 2.0.8.1 Platforms: Windows Bugs: A pre-auth NULL pointer crash in decryption function B format string in logging C arbitrary empty files creation Exploitation: remote A versus both...
Ipswitch Instant Messaging multiple security vulnerabilities
Format string vulnerability, multiple DoS conditions...
Format string
Format string vulnerability in Apple iPhoto before 7.1.2 allows remote attackers to execute arbitrary code via photocast subscriptions...
CVE-2008-0043
Format string vulnerability in Apple iPhoto before 7.1.2 allows remote attackers to execute arbitrary code via photocast subscriptions...
CVE-2008-0043
CVE-2008-0043 concerns Apple iPhoto prior to 7.1.2. The issue is a format string vulnerability in photocast subscriptions that could allow a remote attacker to execute arbitrary code on the affected host. The vulnerability affects iPhoto’s handling of photocast subscriptions, with the NVD listing...
CVE-2008-0043
Format string vulnerability in Apple iPhoto before 7.1.2 allows remote attackers to execute arbitrary code via photocast subscriptions...
Ipswitch Instant Messaging 2.0.8.1 - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/27677/info Ipswitch Instant Messaging is prone to multiple security vulnerabilities, including a denial-of-service vulnerability, a format-string vulnerability, and a vulnerability that allows attackers to overwrite arbitrary files. Attackers can exploit...
Ipswitch Instant Messaging 2.0.8.1 - Multiple Vulnerabilities
Ipswitch Instant Messaging 2.0.8.1 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/27677/info Ipswitch Instant Messaging is prone to multiple security vulnerabilities, including a denial-of-service vulnerability, a format-string vulnerability, and a vulnerability that allows...
iPhoto < 7.1.2 Format String Vulnerability
The remote host is running a version of iPhoto 7.1 older than version 7.1.2. Such versions are reportedly affected by a format string vulnerability. If an attacker can trick a user on the affected host into subscribing to a specially crafted photocast, these issues could be leveraged to execute...
Doomsday: Multiple vulnerabilities
Background The Doomsday Engine deng is a modern gaming engine for popular ID games like Doom, Heretic and Hexen. Description Luigi Auriemma discovered multiple buffer overflows in the DNetPlayerEvent function, the MsgWrite function and the NetSvReadCommands function. He also discovered errors whe...
AXIGEN Mail Server AXIMilter CNHO Command Remote Format String
The version of AXIMilter installed on the remote host fails to sanitize input of format string identifiers. Using a specially- crafted packet, an unauthenticated, remote attacker can crash the service or possibly execute arbitrary code on the remote host subject to the privileges under which the...
Format string
Format string vulnerability in the AXIMilter module in AXIGEN Mail Server 5.0.2 allows remote attackers to execute arbitrary code via format string specifiers in the CNHO command...
CVE-2008-0434
Format string vulnerability in the AXIMilter module in AXIGEN Mail Server 5.0.2 allows remote attackers to execute arbitrary code via format string specifiers in the CNHO command...
CVE-2008-0434
AXIGEN Mail Server 5.0.2 contains a format string vulnerability in the AXIMilter CNHO command that allows remote attackers to execute arbitrary code (or crash the service) by sending specially crafted input. The issue is in the AXIMilter component and relates to unsanitized format string identifi...
CVE-2008-0434
Format string vulnerability in the AXIMilter module in AXIGEN Mail Server 5.0.2 allows remote attackers to execute arbitrary code via format string specifiers in the CNHO command...
Axigen AXIMilter过滤模块远程格式串处理漏洞
BUGTRAQ ID: 27363 Axigen Mail Server是一款小型的邮件服务器。 AXIGEN邮件服务器的AXIMilter模块在解析邮件数据时存在格式串漏洞，如果远程攻击者向AXIMilter所监听的TCP端口发送了包含有格式串标识符的特制数据的话，就可能导致拒绝服务或执行任意指令。 Axigen Mail Server 5.0.2 Axigen ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.axigen.com/ http://www.sebug.net/exploit/2999...