Kreed 1.05 - Format String Denial of Service

Kreed 1.05 - Format String Denial of Service / by Luigi Auriemma / include include include include / Read/Write bits to buffer 0.1.1 by Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org max 32 bits numbers supported from 0 to 4294967295. Probably not the fastest bit...

Kreed 1.05 - Format String / Denial of Service

/ by Luigi Auriemma / include include include include / Read/Write bits to buffer 0.1.1 by Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org max 32 bits numbers supported from 0 to 4294967295. Probably not the fastest bit packing functions existent, but I like them. /...

CVE-2004-1097

The CVE-2004-1097 entry concerns Cherokee Web Server (versions = 0.4.17.1). No in-wild exploit details or CVE-derived attack vectors beyond the format-string misuse are provided in the supplied documents. If upgrading is possible, applying the patch or upgrading to a newer version is the recommen...

CVE-2004-1097

Format string vulnerability in the cherokeeloggerncsawritestring function in Cherokee 0.4.17 and earlier, when authenticating via authpam, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via format string specifiers in the URL...

mc -- multiple vulnerabilities

Andrew V. Samoilov reported several vulnerabilities that were corrected in MidnightCommand 4.6.0: Format string issues CVE-2004-1004 Buffer overflows CVE-2004-1005 Denial-of-service, infinite loop CVE-2004-1009 Denial-of-service, corrupted section header CVE-2004-1090 Denial-of-service, null...

CVE-2004-0277

Format string vulnerability in Dream FTP 1.02 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in the username...

FreeBSD : proxytunnel -- format string vulnerability (157)

The following package needs to be updated: proxytunnel %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg50744596368f11d9a9e70001020eed82.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

FreeBSD : gnats -- format string vulnerability (59)

The following package needs to be updated: gnats %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgfc99c736349911d998a70090962cff2a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-20...

FreeBSD : ez-ipupdate -- format string vulnerability (44)

The following package needs to be updated: ez-ipupdate %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkge69ba632326f11d9b5b7000854d03344.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

FreeBSD : socat -- format string vulnerability (180)

The following package needs to be updated: socat %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgf3017ce132a411d9a9e70001020eed82.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-20...

nsg-advisory-08.txt

------------------------------------------------- No System Group - Advisory 03 - 15/11/04 ------------------------------------------------- Program: Tom's IPX Tunneling Daemon - TipxD Homepage: http://tipxd.sourceforge.net Vulnerable Versions: TipxD 1.1.1 and prior Risk: Low Impact: Local Format...

CVE-2004-0992

The CVE-2004-0992 issue affects Proxytunnel prior to 1.2.3. In daemon mode (-a), it formats log messages for invalid proxy answers, creating a format string vulnerability that could allow remote code execution on the tunneling host. Affected product: Proxytunnel; root cause: unsafe format string ...

CVE-2004-0980

Format string vulnerability in ez-ipupdate.c for ez-ipupdate 3.0.10 through 3.0.11b8, when running in daemon mode with certain service types in use, allows remote servers to execute arbitrary code...

CVE-2004-0980

Format string vulnerability in ez-ipupdate.c for ez-ipupdate 3.0.10 through 3.0.11b8, when running in daemon mode with certain service types in use, allows remote servers to execute arbitrary code...

CVE-2004-1006

Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via certain DNS messages, a different vulnerability than CVE-2002-0702...

CVE-2004-1006

CVE-2004-1006 affects ISC DHCP’s dhcpd (dhcp 2.x). A format-string vulnerability in the logging code (errwarn/calls in log paths) could allow a remote DNS server to trigger arbitrary code execution with the dhcpd’s privileges. Public references (RHSA-2005:212, Debian DSA-584-1, CERT/US-CERT entri...

CVE-2004-0992

Format string vulnerability in the -a option daemon mode in Proxytunnel before 1.2.3 allows remote attackers to execute arbitrary code via format string specifiers in an invalid proxy answer...

CVE-2004-0980

The CVE-2004-0980 entry concerns a format string vulnerability in ez-ipupdate.c affecting ez-ipupdate 3.0.10 through 3.0.11b8. When running in daemon mode with certain service types, a remote attacker could cause arbitrary code execution. The provided documents consistently reference vulnerable v...

Debian DSA-592-1 : ez-ipupdate - format string

Ulf Harnhammar from the Debian Security Audit Project discovered a format string vulnerability in ez-ipupdate, a client for many dynamic DNS services. This problem can only be exploited if ez-ipupdate is running in daemon mode most likely with many but not all service types. %NASLMINLEVEL 70300 C...

Multiple vulnerabilities in Hired Team: Trial (Shine engine)

Luigi Auriemma Application: Hired Team: Trial http://eng.nmg.ru/rubrs.asp?rubrid=165 and probably also the Shine engine on which it is based http://www.3dengine.ru/index.asp?id=4 Versions: Hired Team = 2.0 / 2.200 since this is the only game based on the Shine engine and I have received no reply...