CVE-2007-1681

Format string vulnerability in libwebconsoleservices.so in Sun Java Web Console 2.2.2 through 2.2.5 allows remote attackers to cause a denial of service application crash, obtain sensitive information, and possibly execute arbitrary code via unspecified vectors during a failed login attempt,...

CVE-2007-1681

CVE-2007-1681 relates to a format-string vulnerability in Sun Java Web Console (Lockhart) specifically in libwebconsole_services.so, affecting Sun Java Web Console versions 2.2.2–2.2.5. The issue allows remote attackers to crash the application, potentially disclose sensitive information, and pos...

GLSA-200704-10 : Inkscape: Two format string vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200704-10 Inkscape: Two format string vulnerabilities Kees Cook has discovered two vulnerabilities in Inkscape. The application does not properly handle format string specifiers in some dialog boxes. Inkscape is also vulnerable to...

Sun Java web console format string vulnerability

Format string vulnerability in libwebconsoleservices.so on syslog call...

n.runs-SA-2007.007 - Sun Solaris 10 - Format string vulnerability

n.runs AG http://www.nruns.com/ security at nruns.com n.runs-SA-2007.007 18-Apr-2007 Vendor: Sun Microsystems, Inc., http://www.sun.com Affected Products: Solaris 10, Java Web Console 2.2.2 - 2.2.5 Vulnerability: Format string vulnerability Risk: HIGH CVE ID: CVE-2007-1681 Sun Alert ID: 102854 SU...

OllyDbg 1.10 Local Format String Exploit

No description provided by source. / ..:: jamikazu presents ::.. OllyDbg v110 Local Format String Exploit 0day Author: jamikazu Mail: [email protected] web: http://jamikazu.110mb.com/ Bug discovered by Ned from http://felinemenace.org/ Credit: ap0x,milw0rm...

OllyDbg 1.10 Local Format String Exploit

Exploit for unknown platform in category local exploits ======================================== OllyDbg 1.10 Local Format String Exploit ======================================== / ..:: jamikazu presents ::.. OllyDbg v110 Local Format String Exploit 0day Author: jamikazu Mail: email protected web...

OllyDbg 1.10 - Local Format String

OllyDbg 1.10 - Local Format String / ..:: jamikazu presents ::.. OllyDbg v110 Local Format String Exploit 0day Author: jamikazu Mail: [email protected] web: http://jamikazu.110mb.com/ Bug discovered by Ned from http://felinemenace.org/ Credit: ap0x,milw0rm Greets: All turkish security researcher...

OllyDbg 1.10 - Local Format String

/ ..:: jamikazu presents ::.. OllyDbg v110 Local Format String Exploit 0day Author: jamikazu Mail: [email protected] web: http://jamikazu.110mb.com/ Bug discovered by Ned from http://felinemenace.org/ Credit: ap0x,milw0rm Greets: All turkish security researchers ... invokes calc.exe if successfu...

Inkscape: Two format string vulnerabilities

Background Inkscape is a vector graphics editor, using Scalable Vector Graphics SVG Format. Description Kees Cook has discovered two vulnerabilities in Inkscape. The application does not properly handle format string specifiers in some dialog boxes. Inkscape is also vulnerable to another format...

elinks format string vulnerability

Relative path is used to search text strings .po file. It makes it possible to spoof the file and to conduct format string attack...

Security Best Practice: Protect Yourself against FTP Format Strings Attacks

The File Transfer Protocol FTP is used to connect computers over the Internet enabling file transferring between their users. FTP format string attacks are a common threat on vulnerable systems. Format string attacks can be used to crash a program or to execute malicious code. Successful format...

CVE-2007-2027

Untrusted search path vulnerability in the addfilenametostring function in intl/gettext/loadmsgcat.c for Elinks 0.11.1 allows local users to cause Elinks to use an untrusted gettext message catalog .po file in a "../po" directory, which can be leveraged to conduct format string attacks...

CVE-2007-2027

Untrusted search path vulnerability in the addfilenametostring function in intl/gettext/loadmsgcat.c for Elinks 0.11.1 allows local users to cause Elinks to use an untrusted gettext message catalog .po file in a "../po" directory, which can be leveraged to conduct format string attacks...

CVE-2007-2027

Untrusted search path vulnerability in the addfilenametostring function in intl/gettext/loadmsgcat.c for Elinks 0.11.1 allows local users to cause Elinks to use an untrusted gettext message catalog .po file in a "../po" directory, which can be leveraged to conduct format string attacks...

CVE-2007-2027

Untrusted search path vulnerability in the addfilenametostring function in intl/gettext/loadmsgcat.c for Elinks 0.11.1 allows local users to cause Elinks to use an untrusted gettext message catalog .po file in a "../po" directory, which can be leveraged to conduct format string attacks...

CVE-2007-2027

CVE-2007-2027 affects Elinks 0.11.1 (ELinks) via the function add_filename_to_string in intl/gettext/loadmsgcat.c, allowing a local attacker to cause Elinks to load an untrusted gettext catalog (.po) from a ../po directory and potentially perform format-string attacks. Multiple connected sources ...

CVE-2007-0957

Stack-based buffer overflow in the krb5klogsyslog function in the kadm5 library, as used by the Kerberos administration daemon kadmind and Key Distribution Center KDC, in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via...

CVE-2007-0957

Stack-based buffer overflow in the krb5klogsyslog function in the kadm5 library, as used by the Kerberos administration daemon kadmind and Key Distribution Center KDC, in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via...

GLSA-200703-25 : Ekiga: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200703-25 Ekiga: Format string vulnerability Mu Security has discovered that Ekiga fails to implement formatted printing correctly. Impact : An attacker could exploit this vulnerability to crash Ekiga and potentially execute...