8589 matches found
CVE-2004-0104
CVE-2004-0104 concerns multiple format string vulnerabilities in Metamail 2.7 and earlier. The connected advisories and OpenVAS entries confirm the flaws reside in the Metamail/MIME handling code and headers, enabling remote attackers to execute arbitrary code with the privileges of the user runn...
metamail format string bugs and buffer overflows
metamail format string bugs and buffer overflows PROGRAM: metamail VENDOR: Bell Communications Research, Inc. Bellcore DOWNLOAD URLs: ftp://thumper.bellcore.com/pub/nsb/ http://ftp.funet.fi/pub/unix/mail/metamail/ VULNERABLE VERSIONS: 2.2, 2.4, 2.5, 2.6, 2.7, possibly others IMMUNE VERSIONS: 2.7...
metamail format string bugs
Few format string bugs...
Important: Red Hat Security Advisory: metamail security update
Updated metamail packages that fix a number of vulnerabilities are now available. Updated 18 February 2004 Updated description text to associate each CVE name with the appropriate bugs. Metamail is a system for handling multimedia mail. Ulf Harnhammar discovered two format string bugs and two...
metamail security update
Metamail is a set of utilities for processing MIME mail. New metamail packages are available for Slackware 8.1, 9.0, 9.1, and -current. These fix two format string bugs and two buffer overflows which could lead to unauthorized code execution. Thanks to Ulf Hrnhammar for discovering these problems...
Metamail 2.7 - Multiple Buffer Overflow Format String Handling Vulnerabilities
Metamail 2.7 - Multiple Buffer Overflow Format String Handling Vulnerabilities source: https://www.securityfocus.com/bid/9692/info Metamail has been reported prone to multiple vulnerabilities that may provide for arbitrary code execution. Two buffer overflow vulnerabilities have been reported to...
[slackware-security] metamail security update (SSA:2004-049-02)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 slackware-security metamail security update SSA:2004-049-02 Metamail is a set of utilities for processing MIME mail. New metamail packages are available for Slackware 8.1, 9.0, 9.1, and -current. These fix two format string bugs and two buffer overflo...
metamail format string bugs and buffer overflows
Ulf Härnhammar reported four bugs in metamail: two are format string bugs and two are buffer overflows. The bugs are in SaveSquirrelFile, PrintHeader, and ShareThisHeader. These vulnerabilities could be triggered by a maliciously formatted email message if metamail' or splitmail' is used to proce...
Metamail 2.7 - Multiple Buffer Overflow / Format String Handling Vulnerabilities
source: https://www.securityfocus.com/bid/9692/info Metamail has been reported prone to multiple vulnerabilities that may provide for arbitrary code execution. Two buffer overflow vulnerabilities have been reported to affect Metamail. Additionally, two format string-handling vulnerabilities have...
CVE-2004-0069
Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username, which is processed by the wscanf function...
CVE-2004-0039
CVE-2004-0039 involves multiple format-string vulnerabilities in Check Point Firewall-1’s HTTP components: HTTP Application Intelligence (AI) in NG-AI R55/R54 and the HTTP Security Server included with NG FP1/FP2/FP3. The root cause is format specifiers used in error messages generated from craft...
BolinTech DreamFTP Server 1.2 (1.02TryFTP 1.0.0.1) - Remote User Name Format String
BolinTech DreamFTP Server 1.2 1.02TryFTP 1.0.0.1 - Remote User Name Format String include include include include // WIN NT/2K/XP cmd.exe shellcode // kernel32.dll baseaddress calculation: OS/SP-independent // string-save: 00, 0a and 0d free. // portbinding: port 28876 // looping: reconnect after...
BolinTech DreamFTP Server 1.2 (1.02/TryFTP 1.0.0.1) - Remote User Name Format String
include include include include // WIN NT/2K/XP cmd.exe shellcode // kernel32.dll baseaddress calculation: OS/SP-independent // string-save: 00, 0a and 0d free. // portbinding: port 28876 // looping: reconnect after disconnect char shellcode =...
Dream FTP 1.2 Remote Format String Exploit
Exploit for unknown platform in category remote exploits ========================================== Dream FTP 1.2 Remote Format String Exploit ========================================== include include include include // WIN NT/2K/XP cmd.exe shellcode // kernel32.dll baseaddress calculation:...
DreamFTP formatstring bug
Format string bug in username...
BolinTech DreamFTP Server 1.0 - User Name Format String
BolinTech DreamFTP Server 1.0 - User Name Format String // source: https://www.securityfocus.com/bid/9600/info It has been reported that Dream FTP Server may be prone to a remote format string vulnerability when processing a malicious request from a client for a username during FTP authentication...
BolinTech Dream FTP Server 1.0 User Name Format String Vulnerability 2
BolinTech Dream FTP Server 1.0 User Name Format String Vulnerability 2. CVE-2004-0277. Remote exploit for windows platform source: http://www.securityfocus.com/bid/9600/info It has been reported that Dream FTP Server may be prone to a remote format string vulnerability when processing a malicious...
BolinTech DreamFTP Server 1.0 - User Name Format String
// source: https://www.securityfocus.com/bid/9600/info It has been reported that Dream FTP Server may be prone to a remote format string vulnerability when processing a malicious request from a client for a username during FTP authentication. The issue could crash the server. Dream FTP Server...