9892 matches found
Debian Security Advisory DSA 826-1 (helix-player)
The remote host is missing an update to helix-player announced via advisory DSA 826-1. Multiple security vulnerabilities have been identified in the helix-player media player that could allow an attacker to execute code on the victim's machine via specially crafted network resources. CVE-2005-176...
Debian Security Advisory DSA 487-1 (neon)
The remote host is missing an update to neon announced via advisory DSA 487-1. OpenVAS Vulnerability Test $Id: deb4871.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 487-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
CVE-2008-0097
Format string vulnerability in the log function in Georgia SoftWorks SSH2 Server GSWSSHD 7.01.0003 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username field, as demonstrated by a certain LoginPassword message...
Format string
Format string vulnerability in the swDebugf function in DuneApp.cpp in WhiteDune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file...
CVE-2008-0101
Format string vulnerability in the swDebugf function in DuneApp.cpp in WhiteDune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file...
DEBIAN-CVE-2008-0101
Format string vulnerability in the swDebugf function in DuneApp.cpp in WhiteDune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file...
CVE-2008-0101
Format string vulnerability in the swDebugf function in DuneApp.cpp in WhiteDune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file...
CVE-2008-0097
Format string vulnerability in the log function in Georgia SoftWorks SSH2 Server GSWSSHD 7.01.0003 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username field, as demonstrated by a certain LoginPassword message...
CVE-2008-0097
CVE-2008-0097 stems from a format string vulnerability in the log function of Georgia SoftWorks SSH2 Server (GSW_SSHD) versions up to and including 7.01.0003. The flaw allows remote attackers to execute arbitrary code by providing format string specifiers in the username field, as illustrated by ...
CVE-2008-0101
Format string vulnerability in the swDebugf function in DuneApp.cpp in WhiteDune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file...
CVE-2008-0101
The CVE-2008-0101 entry describes a format string vulnerability in White_Dune, specifically in the swDebugf function of DuneApp.cpp, affecting White_Dune 0.29 beta791 and earlier. The flaw allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file. The connected...
CVE-2008-0101
Format string vulnerability in the swDebugf function in DuneApp.cpp in WhiteDune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file...
CVE-2008-0097: Improper Input Validation
Format string vulnerability in the log function in Georgia SoftWorks SSH2 Server GSWSSHD 7.01.0003 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username field, as demonstrated by a certain LoginPassword message...
CVE-2008-0101: Improper Input Validation
Format string vulnerability in the swDebugf function in DuneApp.cpp in WhiteDune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file...
Debian DSA-1444-2 : php5 - several vulnerabilities
It was discovered that the patch for CVE-2007-4659 could lead to regressions in some scenarios. The fix has been reverted for now, a revised update will be provided in a future PHP DSA. For reference the original advisory below : Several remote vulnerabilities have been discovered in PHP, a...
White_Dune本地缓冲区溢出及格式串处理漏洞
BUGTRAQ ID: 27102 WhiteDune是VRML97文件的开源编辑器和查看器。 WhiteDune的实现上存在多个安全漏洞，远程攻击者可能利用此漏洞控制用户系统。 ----------------------------------- A Scene::errorf缓冲区溢出 ----------------------------------- 用于创建解析WRL文件中所出现问题的错误消息的函数中存在缓冲区溢出漏洞。以下是Scene.cpp文件中的漏洞代码： void Scene::errorfconst char fmt, ... valist ap; char...
CVE-2007-6625: Use of Externally-Controlled Format String
The Platform Service Process asampsp in Fan-Out Driver Platform Services for Novell Identity Manager IDM 3.5.1 allows remote attackers to cause a denial of service daemon crash via unspecified network traffic that triggers a syslog message containing invalid format string specifiers, as...
Georgia SoftWorks SSH2 Server多个远程代码执行漏洞
BUGTRAQ ID: 27103 GSW SSH2 Server是使用在Windows平台下的SSH2/Telnet服务程序。 GSW SSH2 Server在处理畸形用户数据时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制客户端。 ------------------------------------ A 日志函数格式串和缓冲区溢出 ------------------------------------ GSW...
CVE-2007-6625
The Platform Service Process asampsp in Fan-Out Driver Platform Services for Novell Identity Manager IDM 3.5.1 allows remote attackers to cause a denial of service daemon crash via unspecified network traffic that triggers a syslog message containing invalid format string specifiers, as...
