Lucene search
+L

8585 matches found

OSV
OSV
added 2005/10/13 12:0 a.m.8 views

DTSA-20-1 mailutils - Format string vulnerability

Bulletin has no description...

7.5CVSS6.3AI score0.14567EPSS
SaveExploits4
canvas
canvas
added 2005/10/12 10:2 p.m.55 views

Immunity Canvas: NETBACKUP_JAVAUI

Name| netbackupjavaui ---|--- CVE| CVE-2005-2715 Exploit Pack| CANVAS Description| VERITAS NetBackup Java User Interface Format String Notes| CVE Name: CVE-2005-2715 VENDOR: Symantec VersionsAffected: Repeatability: References: http://www.zerodayinitiative.com/advisories/ZDI-05-001.html CVE Url:...

10CVSS1.6AI score0.60356EPSS
SaveExploits9
NVD
NVD
added 2005/10/12 10:2 p.m.24 views

CVE-2005-2715

Format string vulnerability in the Java user interface service bpjava-msvc daemon for VERITAS NetBackup Data and Business Center 4.5FP and 4.5MP, and NetBackup Enterprise/Server/Client 5.0, 5.1, and 6.0, allows remote attackers to execute arbitrary code via the COMMANDLOGONTOMSERVER command...

10CVSS7.4AI score0.60356EPSS
SaveExploits9References8
Cvelist
Cvelist
added 2005/10/12 4:0 a.m.34 views

CVE-2005-2715

Format string vulnerability in the Java user interface service bpjava-msvc daemon for VERITAS NetBackup Data and Business Center 4.5FP and 4.5MP, and NetBackup Enterprise/Server/Client 5.0, 5.1, and 6.0, allows remote attackers to execute arbitrary code via the COMMANDLOGONTOMSERVER command...

7.4AI score0.60356EPSS
SaveExploits9References8
CVE
CVE
added 2005/10/12 4:0 a.m.62 views

CVE-2005-2715

CVE-2005-2715 involves a format-string vulnerability in VERITAS NetBackup Java Authentication Service (bpjava-msvc) daemon. The flaw affects NetBackup components listed in the description (e.g., 4.5FP/4.5MP and 5.0–6.0 families) and allows remote code execution via the COMMAND_LOGON_TO_MSERVER co...

10CVSS7.4AI score0.60356EPSS
SaveExploits9References8Affected Software2
Debian
Debian
added 2005/10/12 3:48 a.m.78 views

[SECURITY] [DSA 863-1] New xine-lib packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 863-1 [email protected] http://www.debian.org/security/ Martin Schulze October 12th, 2005 http://www.debian.org/security/faq -...

7.5CVSS0.4AI score0.09676EPSS
SaveExploits3
Debian
Debian
added 2005/10/12 3:48 a.m.50 views

[SECURITY] [DSA 863-1] New xine-lib packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 863-1 [email protected] http://www.debian.org/security/ Martin Schulze October 12th, 2005 http://www.debian.org/security/faq -...

7.5CVSS6.4AI score0.09676EPSS
SaveExploits3
Zero Day Initiative
Zero Day Initiative
added 2005/10/12 12:0 a.m.74 views

VERITAS NetBackup Remote Code Execution

This vulnerability allows remote attackers to execute arbitrary code on vulnerable NetBackup installations. Authentication is not required to exploit this vulnerability. This specific flaw exists within the bpjava-msvc daemon due to incorrect handling of format string data passed through the...

10CVSS7.3AI score0.60356EPSS
SaveExploits9References1
CERT
CERT
added 2005/10/12 12:0 a.m.43 views

VERITAS NetBackup Java Administration Console contains a format string vulnerability in "bpjava-msvc"

Overview The VERITAS NetBackup Java Administration Console contains a format string vulnerability, which may allow an unauthenticated, remote attacker to execute arbitrary code with root or SYSTEM privileges. Description The Java Administration Console is an alternative administrative interface f...

8.3AI score
SaveExploits0References2
OSV
OSV
added 2005/10/12 12:0 a.m.22 views

DSA-863-1 xine-lib - format string vulnerability

Bulletin has no description...

7.5CVSS6.3AI score0.09676EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
added 2005/10/11 12:0 a.m.19 views

GLSA-200510-09 : Weex: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200510-09 Weex: Format string vulnerability Ulf Harnhammar discovered a format string bug in Weex that can be triggered when it is first run or when its cache files are rebuilt, using the -r option. Impact : An attacker could setu...

7.5CVSS5.9AI score0.02635EPSS
SaveExploits0References2
securityvulns
securityvulns
added 2005/10/11 12:0 a.m.36 views

Multiple WinRAR archiver vulnerabilities

UUEncoded files format string bug, ACE archives buffer overflow...

3.2AI score
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2005/10/11 12:0 a.m.29 views

Debian DSA-855-1 : weex - format string vulnerability

Ulf Harnhammar from the Debian Security Audit Project discovered a format string vulnerability in weex, a non-interactive FTP client for updating web pages, that could be exploited to execute arbitrary code on the clients machine. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descripti...

7.5CVSS5.8AI score0.02635EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2005/10/11 12:0 a.m.26 views

Slackware 10.0 / 10.1 / 10.2 / 9.1 / current : xine-lib (SSA:2005-283-01)

New xine-lib packages are available for Slackware 9.1, 10.0, 10.1, 10.2, and -current to fix a security issue. A format string bug may allow the execution of arbitrary code as the user running a xine-lib linked application. The attacker must provide by uploading or running a server specially...

7.5CVSS5.9AI score0.09676EPSS
SaveExploits3References3
exploitpack
exploitpack
added 2005/10/11 12:0 a.m.18 views

RARLAB WinRar 2.903.x - UUEXXE Invalid Filename Error Message Format String

RARLAB WinRar 2.903.x - UUEXXE Invalid Filename Error Message Format String source: https://www.securityfocus.com/bid/15062/info WinRAR is prone to multiple remote vulnerabilities. These issues include a format string and a buffer overflow vulnerability. Successful exploitation may allow an...

0.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2005/10/11 12:0 a.m.31 views

SUSE-SA:2005:059: RealPlayer

The remote host is missing the patch for the advisory SUSE-SA:2005:059 RealPlayer. The following security issue in RealPlayer was fixed: - A format string bug in the RealPix .rp file format parser CVE-2005-2710. This bug allowed remote attackers to execute arbitrary code by supplying a specially...

5.1CVSS6.2AI score0.13181EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2005/10/11 12:0 a.m.29 views

GLSA-200510-07 : RealPlayer, Helix Player: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200510-07 RealPlayer, Helix Player: Format string vulnerability 'c0ntex' reported that RealPlayer and Helix Player suffer from a heap overflow. Impact : By enticing a user to play a specially crafted realpix .rp or realtext .rt...

5.1CVSS6.1AI score0.13181EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2005/10/11 12:0 a.m.23 views

Debian DSA-852-1 : up-imapproxy - format string vulnerabilities

Steve Kemp discovered two format string vulnerabilities in up-imapproxy, an IMAP protocol proxy, which may lead remote attackers to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debi...

7.5CVSS5.8AI score0.12112EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2005/10/11 12:0 a.m.19 views

GLSA-200510-08 : xine-lib: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200510-08 xine-lib: Format string vulnerability Ulf Harnhammar discovered a format string bug in the routines handling CDDB server response contents. Impact : An attacker could submit malicious information about an audio CD to a...

7.5CVSS5.8AI score0.09676EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
added 2005/10/11 12:0 a.m.38 views

Debian DSA-853-1 : ethereal - several vulnerabilities

Several security problems have been discovered in ethereal, a commonly used network traffic analyser. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-2360 Memory allocation errors in the LDAP dissector can cause a denial of service. - CAN-2005-2361...

7.5CVSS6AI score0.06143EPSS
SaveExploits1References8
Rows per page
Query Builder