CVE-2005-2931

Ipswitch Collaboration Suite / IMail Server 8.20 (ICS) is affected by a format-string vulnerability in the SMTP server that allows remote attackers to execute arbitrary code via crafted input to the EXPN, MAIL, MAIL FROM, or RCPT TO commands. The issue stems from improper handling of format speci...

Perl: Format string errors can lead to code execution

Background Perl is a stable, cross-platform programming language created by Larry Wall. It contains printf functions that allows construction of strings from format specifiers and parameters, like the C printf functions. A well-known class of vulnerabilities, called format string errors, result o...

Ipswitch IMail Format String and 'LIST' Command DoS

Binary data 3317.prm...

Webmin, Usermin: Format string vulnerability

Background Webmin is a web-based interface for Unix-like systems. Usermin is a simplified version of Webmin designed for use by normal users rather than system administrators. Description Jack Louis discovered that the Webmin and Usermin "miniserv.pl" web server component is vulnerable to a Perl...

Perl contains an integer sign error in format string processing

Overview The Perl interpreter contains a flaw that may increase the impact of format string vulnerabilities in programs written in Perl. Description Perl is a programming language used in many applications and commonly used for web applications. The Perl interpreter, which interprets and executes...

CVE-2005-3995

Format string vulnerability in the dosyslog function in the OBEX server obexsrv.c for Sobexsrv before 1.0.0-pre4, when the syslog -S function is enabled, allows remote attackers to execute arbitrary code via format string specifiers in file name arguments to OBEX commands...

CVE-2005-3995

Format string vulnerability in the dosyslog function in the OBEX server obexsrv.c for Sobexsrv before 1.0.0-pre4, when the syslog -S function is enabled, allows remote attackers to execute arbitrary code via format string specifiers in file name arguments to OBEX commands...

CVE-2005-3995

The CVE applies to the Sobexsrv OBEX server, specifically the dosyslog function in obexsrv.c. When the syslog -S option is enabled, a format string vulnerability in OBEX file-name arguments can allow remote attackers to execute arbitrary code. Affected software/version: Sobexsrv prior to 1.0.0-pr...

sobexsrv bluetooth OBEX server format string bug

syslog format string bug...

DMA[2005-1202a] - 'sobexsrv - Scripting/Secure OBEX Server format string vulnerability'

DMA2005-1202a - 'sobexsrv - Scripting/Secure OBEX Server format string vulnerability' Author: Kevin Finisterre Vendor: http://www.mulliner.org/bluetooth/sobexsrv.php Product: 'sobexsrv' References: http://www.digitalmunition.com/DMA2005-1202a.txt...

sobexsrv 1.0.0_pre3 Bluetooth syslog() Remote Format String Exploit

No description provided by source. !/usr/bin/perl trifinite.group Bluetooth sobexsrv remote syslog exploit code by kflistsatdigitalmunitiondotcom http://www.digitalmunition.com Shouts to my nigga Chung and the Donut Shop... keep fighting that SARS dude! Big ups to d4yj4y beeeeeeeeeeeeeotch! $retl...

sobexsrv 1.0.0_pre3 Bluetooth - syslog() Remote Format String

sobexsrv 1.0.0pre3 Bluetooth - syslog Remote Format String !/usr/bin/perl trifinite.group Bluetooth sobexsrv remote syslog exploit code by kflistsatdigitalmunitiondotcom http://www.digitalmunition.com Shouts to my nigga Chung and the Donut Shop... keep fighting that SARS dude! Big ups to d4yj4y...

sobexsrv 1.0.0_pre3 Bluetooth syslog() Remote Format String Exploit

Exploit for linux platform in category remote exploits =================================================================== sobexsrv 1.0.0pre3 Bluetooth syslog Remote Format String Exploit =================================================================== !/usr/bin/perl trifinite.group Bluetooth...

sobexsrv 1.0.0_pre3 Bluetooth - 'syslog()' Remote Format String

!/usr/bin/perl trifinite.group Bluetooth sobexsrv remote syslog exploit code by kflistsatdigitalmunitiondotcom http://www.digitalmunition.com Shouts to my nigga Chung and the Donut Shop... keep fighting that SARS dude! Big ups to d4yj4y beeeeeeeeeeeeeotch! $retloc = 0x8053418; Due to unicode the...

DEBIAN-CVE-2005-3962

Integer overflow in the format string functionality Perlsvvcatpvfn in Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap and leads to a buffer overflow, as...

CVE-2005-3962

Integer overflow in the format string functionality Perlsvvcatpvfn in Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap and leads to a buffer overflow, as...

CVE-2005-3962

Integer overflow in the format string functionality Perlsvvcatpvfn in Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap and leads to a buffer overflow, as...

CVE-2005-3962

Integer overflow in the format string functionality Perlsvvcatpvfn in Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap and leads to a buffer overflow, as...

CVE-2005-3962

Integer overflow in the format string functionality Perlsvvcatpvfn in Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap and leads to a buffer overflow, as...

CVE-2005-3962

The CVE-2005-3962 issue is a real vulnerability in Perl where an integer overflow in the format-string processor (Perl_sv_vcatpvfn) can cause memory corruption and potentially arbitrary code execution. It affects Perl 5.9.2 and 5.8.6; multiple connected advisories (Debian DSA-943/DSA-943-1, CentO...