CVE-2005-3393

Format string vulnerability in the foreignoption function in options.c for OpenVPN 2.0.x allows remote clients to execute arbitrary code via format string specifiers in a push of the dhcp-option command option...

OpenVPN[v2.0.x]: foreign_option() formart string vulnerability.

[email protected]: OpenVPNv2.0.x: foreignoption format string vulnerability. 1. BACKGROUND OpenVPN is a robust and highly configurable VPN Virtual Private Network daemon which can be used to securely link two or more private networks using an encrypted tunnel over the Internet. OpenVPN's principal...

OpenVPN VPN client format string vulnerability

Format string bug on parsing DHCP options obtained from server...

openvpn -- arbitrary code execution on client through malicious or compromised server

James Yonan reports: A format string vulnerability in the foreignoption function in options.c could potentially allow a malicious or compromised server to execute arbitrary code on the client. Only non-Windows clients are affected. The vulnerability only exists if a the client's TLS negotiation...

VERITAS-Win32.pl.txt

!C:\Perl\bin\perl.exe -w Vertias Netbackup Win32 format string exploit Code By: johnhatdigitalmunitiondotcom & kfatdigitalmunitiondotcom For win2k/xp pre sp2 we overwrote PEBFastlock - rtlentercritical For win xp sp2 we overwrote SEH http://www.digitalmunition.com/ You may have to run this 2 time...

USN-212-1: libgda2 vulnerability

Steve Kemp discovered two format string vulnerabilities in the logging handler of the Gnome database access library. Depending on the application that uses the library, this could have been exploited to execute arbitrary code with the permission of the user running the application...

Gnome libgda library format string vulnerabilities

No description provided...

[SECURITY] [DSA 871-2] New libgda2 packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 871-2 [email protected] http://www.debian.org/security/ Martin Schulze October 25th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 871-2] New libgda2 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 871-2 [email protected] http://www.debian.org/security/ Martin Schulze October 25th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 871-2] New libgda2 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 871-2 [email protected] http://www.debian.org/security/ Martin Schulze October 25th, 2005 http://www.debian.org/security/faq -...

CVE-2005-2958

Multiple format string vulnerabilities in the GNOME Data Access library for GNOME2 libgda2 1.2.1 and earlier allow attackers to execute arbitrary code...

CVE-2005-2958

Multiple format string vulnerabilities in the GNOME Data Access library for GNOME2 libgda2 1.2.1 and earlier allow attackers to execute arbitrary code...

[SECURITY] [DSA 871-1] New libgda2 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 871-1 [email protected] http://www.debian.org/security/ Martin Schulze October 25th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 871-1] New libgda2 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 871-1 [email protected] http://www.debian.org/security/ Martin Schulze October 25th, 2005 http://www.debian.org/security/faq -...

CVE-2004-2523

OpenFTPD affected: OpenFTPD 0.30.2 and earlier. The vulnerability is a format string flaw in the SITE MSG command’s msg.c (cat_message) that lets remote authenticated users execute arbitrary code via format specifiers in the message argument. This is a remote code execution risk with authenticati...

CVE-2004-2523

Format string vulnerability in the msg command catmessage function in msg.c in OpenFTPD 0.30.2 and earlier allows remote authenticated users to execute arbitrary code via format string specifiers in the message argument...

CVE-2005-2958

Multiple format string vulnerabilities in the GNOME Data Access library for GNOME2 libgda2 1.2.1 and earlier allow attackers to execute arbitrary code...

CVE-2004-2489

Format string vulnerability in IBM Informix Dynamic Server IDS before 9.40.xC3 allows local users to execute arbitrary code via a modified INFORMIXDIR environment variable that points to a file with format string specifiers in the filename...

CVE-2005-2958

CVE-2005-2958 concerns the GNOME Data Access library libgda2 for GNOME2, where two format string vulnerabilities in logging routines could allow an attacker to execute arbitrary code. The issues affect libgda2 1.2.1 and earlier. Multiple OpenVAS and distribution advisories (Debian DSA-871-1, Gent...

CVE-2004-2515

Technical details for CVE-2004-2515 are not publicly available in the provided documents. The description notes a format-string vulnerability in VMware Workstation 4.5.2 but no specifics on affected components, root cause, or fixes are included here. Monitor for updates.