CVE-2009-0647

msnmsgr.exe in Windows Live Messenger WLM 2009 build 14.0.8064.206, and other 14.0.8064.x builds, allows remote attackers to cause a denial of service application crash via a modified header in a packet, as possibly demonstrated by a UTF-8.0 value of the charset field in the Content-Type header...

imap-uw -- University of Washington IMAP c-client Remote Format String Vulnerability

SecurityFocus reports: University of Washington IMAP c-client is prone to a remote format-string vulnerability because the software fails to adequately sanitize user-supplied input before passing it as the format-specifier to a formatted-printing function...

CVE-2009-0601

Format string vulnerability in Wireshark 0.99.8 through 1.0.5 on non-Windows platforms allows local users to cause a denial of service application crash via format string specifiers in the HOME environment variable...

CVE-2009-0601

Format string vulnerability in Wireshark 0.99.8 through 1.0.5 on non-Windows platforms allows local users to cause a denial of service application crash via format string specifiers in the HOME environment variable...

DEBIAN-CVE-2009-0601

Format string vulnerability in Wireshark 0.99.8 through 1.0.5 on non-Windows platforms allows local users to cause a denial of service application crash via format string specifiers in the HOME environment variable...

CVE-2009-0601

Format string vulnerability in Wireshark 0.99.8 through 1.0.5 on non-Windows platforms allows local users to cause a denial of service application crash via format string specifiers in the HOME environment variable...

Format string

Format string vulnerability in Wireshark 0.99.8 through 1.0.5 on non-Windows platforms allows local users to cause a denial of service application crash via format string specifiers in the HOME environment variable...

CVE-2009-0601

Wireshark vulnerability CVE-2009-0601 affects non‑Windows builds of Wireshark 0.99.8–1.0.5, where a format string specifier in HOME can crash the application (local denial of service). Affected products/versions are supported by multiple advisories (e.g., GLSA 200906-05, MDVSA-2009:058). Remediat...

CVE-2009-0601

Format string vulnerability in Wireshark 0.99.8 through 1.0.5 on non-Windows platforms allows local users to cause a denial of service application crash via format string specifiers in the HOME environment variable...

CVE-2009-0601

Format string vulnerability in Wireshark 0.99.8 through 1.0.5 on non-Windows platforms allows local users to cause a denial of service application crash via format string specifiers in the HOME environment variable...

PT-2009-3242 · Wireshark · Wireshark

Name of the Vulnerable Software and Affected Versions: Wireshark versions 0.99.8 through 1.0.5 Description: The issue allows local users to cause a denial of service, resulting in an application crash, by utilizing format string specifiers in the HOME environment variable. This is a format string...

Re: Another SQL injection in ProFTPd with mod_mysql (probably postgres as well)

Maybe this is related to http://bugs.proftpd.org/showbug.cgi?id=3173 ? That bug only applies to 1.3.1, so 1.3.0 is not affected. 1.3.2 is supposed to fix this bug. Sergio Aguayo ----- Original Message ----- From: [email protected] To: [email protected] Sent: Tuesday, February 10, 2009...

Another SQL injection in ProFTPd with mod_mysql (probably postgres as well)

Hello, Just found out a problem with proftpd's sql authentication. The problem is easily reproducible if you login with username like: USER ' and 1=2 union select 1,1,uid,gid,homedir,shell from users; -- and a password of "1" without quotes. which leads to a successful login. Different account...

ProFTP With MySQL Authentication Bypass

Hello, Just found out a problem with proftpd's sql authentication. The problem is easily reproducible if you login with username like: USER %' and 1=2 union select 1,1,uid,gid,homedir,shell from users; -- and a password of "1" without quotes. which leads to a successful login. Different account...

Hex Workshop 6.0 - '.cmap' Invalid Memory Reference (PoC)

!/usr/bin/perl -w Hex Workshop v6 "ColorMap files .cmap" Invalid Memory Reference Crash POC Discovred by : DATASNIPER for more information vist my blog:http://datasniper.arab4services.net/ the Exploit it's very hard to implemented,if we can make the "reference" point to valid memory location...

SuSE Update for qt3 SUSE-SA:2007:048

Check for the Version of qt3 OpenVAS Vulnerability Test $Id: gbsuse2007048.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for qt3 SUSE-SA:2007:048 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you c...

SuSE Update for xine-ui,xine-lib,xine-extra,xine-devel SUSE-SA:2007:013

Check for the Version of xine-ui,xine-lib,xine-extra,xine-devel OpenVAS Vulnerability Test $Id: gbsuse2007013.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for xine-ui,xine-lib,xine-extra,xine-devel SUSE-SA:2007:013 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networ...

SuSE Update for php4,php5 SUSE-SA:2007:020

Check for the Version of php4,php5 OpenVAS Vulnerability Test $Id: gbsuse2007020.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for php4,php5 SUSE-SA:2007:020 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Format string

Format string vulnerability in BMC PATROL Agent before 3.7.30 allows remote attackers to execute arbitrary code via format string specifiers in an invalid version number to TCP port 3181, which are not properly handled when writing a log message...

CVE-2008-5982

Format string vulnerability in BMC PATROL Agent before 3.7.30 allows remote attackers to execute arbitrary code via format string specifiers in an invalid version number to TCP port 3181, which are not properly handled when writing a log message...