SUSE-SA:2005:071: perl

The remote host is missing the patch for the advisory SUSE-SA:2005:071 perl. Integer overflows in the format string functionality in Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap...

RHEL 4 : perl (RHSA-2005:880)

Updated Perl packages that fix security issues and bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Perl is a high-level programming language commonly used for system administration utilitie...

CVE-2005-4568

Multiple format string vulnerabilities in FTGate Technology formerly known as Floosietek FTGate 4.4 aka Build 4.4.000 Oct 26 2005 allow remote attackers to execute arbitrary code via format string specifiers in the 1 USER, 2 PASS, and 3 TOP commands to the POP3 server; and the 4 LIST and 5...

CVE-2005-4565

Format string vulnerability in the Internet Key Exchange version 1 IKEv1 implementation in ADTRAN NetVanta before 10.03.03.E might allow remote attackers to have an unknown impact via format string specifiers in crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1...

CVE-2005-4568

FTGate 4.4 (Build 4.4.000 Oct 26 2005) is affected by multiple format string vulnerabilities in both the POP3 and IMAP services. Specifically, remote attackers can trigger arbitrary code execution via format string specifiers in the POP3 commands (USER, PASS, TOP) and the IMAP commands (LIST, AUT...

CVE-2005-4565

CVE-2005-4565 affects ADTRAN NetVanta devices (before 10.03.03.E) via the Internet Key Exchange v1 (IKEv1) implementation. The issue is a format string vulnerability in IKEv1, exploitable by crafted IKE packets to yield an impact that is not explicitly quantified in the available documents. The v...

CVE-2005-4565

Format string vulnerability in the Internet Key Exchange version 1 IKEv1 implementation in ADTRAN NetVanta before 10.03.03.E might allow remote attackers to have an unknown impact via format string specifiers in crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1...

CVE-2005-4568

Multiple format string vulnerabilities in FTGate Technology formerly known as Floosietek FTGate 4.4 aka Build 4.4.000 Oct 26 2005 allow remote attackers to execute arbitrary code via format string specifiers in the 1 USER, 2 PASS, and 3 TOP commands to the POP3 server; and the 4 LIST and 5...

SHOUTcast DNAS/win32 1.9.4 File Request Format String Overflow

This module exploits a format string vulnerability in the Nullsoft SHOUTcast server for Windows. The vulnerability is triggered by requesting a file path that contains format string specifiers. This vulnerability was discovered by Tomasz Trojanowski and Damian Put. This module requires Metasploit...

Webmin 'miniserv.pl' 'username' Parameter Format String

The version of Webmin installed on the remote host contains a format string flaw when logging failed authentication attempts. Using specially crafted values for the 'username' parameter of the 'sessionlogin.cgi', an attacker could exploit the flaw to crash the affected server or to potentially...

CVE-2005-4511

Format string vulnerability in TN3270 Resource Gateway 1.1.0 allows local users to cause a denial of service and possibly execute arbitrary code via format string specifiers in syslog function calls...

CVE-2005-4511

The CVE-2005-4511 is a format-string vulnerability in TN3270 Resource Gateway 1.1.0. The underlying issue is unvalidated format specifiers in syslog function calls, enabling local users to cause a denial of service and potentially execute arbitrary code. The vulnerability is characterized by a lo...

CVE-2005-4511

Format string vulnerability in TN3270 Resource Gateway 1.1.0 allows local users to cause a denial of service and possibly execute arbitrary code via format string specifiers in syslog function calls...

TN3270 Resource Gateway format string vulnerabilities

syslog format string bugs...

[SA18185] TN3270 Resource Gateway Potential syslog Perl Format String Vulnerability

TITLE: TN3270 Resource Gateway Potential syslog Perl Format String Vulnerability SECUNIA ADVISORY ID: SA18185 VERIFY ADVISORY: http://secunia.com/advisories/18185/ CRITICAL: Less critical IMPACT: Privilege escalation, DoS WHERE: Local system SOFTWARE: TN3270 Resource Gateway TN3270RG 1.x...

FTGate <= 4.4.002 Multiple Remote Vulnerabilities (OF, FS, XSS)

The remote host appears to be running a version of FTGate, a commercial groupware mail server for Windows from FTGate Technology Ltd. The web server used to administer FTGate on the remote host fails to sanitize input to the 'href' parameter of the 'index.fts' script before using it to generate...

perl security update

CentOS Errata and Security Advisory CESA-2005:881 Updated Perl packages that fix security issues and bugs are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Perl is a high-level programming languag...

Moderate: Red Hat Security Advisory: perl security update

Updated Perl packages that fix security issues and bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Perl is a high-level programming language commonly used for system administration utilitie...

[Full-disclosure] [ACSSEC-2005-11-25-0x6] FTGate 4.4 [Build 4.4.000 Oct 26 2005] Fo rmat String Overflow

-=+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++=- ACS Security Assessment Advisory - Format String Overflow ID: ACSSEC-2005-11-25 - 0x6 Class: Format String Overflow Package: FTGate 4.4 Build 4.4.000 Oct 26 2005 IMAPd Service Build: Windows NT/2k/XP/2k3 Notified: Dec 01, 2005...

[Full-disclosure] [ACSSEC-2005-11-25-0x5] FTGate 4.4 [Build 4.4.000 Oct 26 2005] Fo rmat String Overflow

-=+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++=- ACS Security Assessment Advisory - Format String Overflow ID: ACSSEC-2005-11-25 - 0x5 Class: Format String Overflow Package: FTGate 4.4 Build 4.4.000 Oct 26 2005 POP3 Service Build: Windows NT/2k/XP/2k3 Notified: Dec 01, 2005 Release...