GLSA-200512-01 : Perl: Format string errors can lead to code execution

The remote host is affected by the vulnerability described in GLSA-200512-01 Perl: Format string errors can lead to code execution Jack Louis discovered a new way to exploit format string errors in Perl that could lead to the execution of arbitrary code. This is perfomed by causing an integer wra...

CVE-2005-2931

Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite ICS before 2.02 allows remote attackers to execute arbitrary code via format string specifiers to the 1 EXPN, 2 MAIL, 3 MAIL FROM, and 4 RCPT TO commands...

CVE-2005-2931

Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite ICS before 2.02 allows remote attackers to execute arbitrary code via format string specifiers to the 1 EXPN, 2 MAIL, 3 MAIL FROM, and 4 RCPT TO commands...

CVE-2005-2931

Ipswitch Collaboration Suite / IMail Server 8.20 (ICS) is affected by a format-string vulnerability in the SMTP server that allows remote attackers to execute arbitrary code via crafted input to the EXPN, MAIL, MAIL FROM, or RCPT TO commands. The issue stems from improper handling of format speci...

EUVD-2005-2931

Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite ICS before 2.02 allows remote attackers to execute arbitrary code via format string specifiers to the 1 EXPN, 2 MAIL, 3 MAIL FROM, and 4 RCPT TO commands...

Ipswitch IMail Format String and 'LIST' Command DoS

Binary data 3317.prm...

CVE-2005-2931: Undefined Security Weakness

Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite ICS before 2.02 allows remote attackers to execute arbitrary code via format string specifiers to the 1 EXPN, 2 MAIL, 3 MAIL FROM, and 4 RCPT TO commands...

Perl: Format string errors can lead to code execution

Background Perl is a stable, cross-platform programming language created by Larry Wall. It contains printf functions that allows construction of strings from format specifiers and parameters, like the C printf functions. A well-known class of vulnerabilities, called format string errors, result o...

Webmin, Usermin: Format string vulnerability

Background Webmin is a web-based interface for Unix-like systems. Usermin is a simplified version of Webmin designed for use by normal users rather than system administrators. Description Jack Louis discovered that the Webmin and Usermin "miniserv.pl" web server component is vulnerable to a Perl...

Perl contains an integer sign error in format string processing

Overview The Perl interpreter contains a flaw that may increase the impact of format string vulnerabilities in programs written in Perl. Description Perl is a programming language used in many applications and commonly used for web applications. The Perl interpreter, which interprets and executes...

CVE-2005-3995

Format string vulnerability in the dosyslog function in the OBEX server obexsrv.c for Sobexsrv before 1.0.0-pre4, when the syslog -S function is enabled, allows remote attackers to execute arbitrary code via format string specifiers in file name arguments to OBEX commands...

CVE-2005-3995

The CVE applies to the Sobexsrv OBEX server, specifically the dosyslog function in obexsrv.c. When the syslog -S option is enabled, a format string vulnerability in OBEX file-name arguments can allow remote attackers to execute arbitrary code. Affected software/version: Sobexsrv prior to 1.0.0-pr...

CVE-2005-3995: Undefined Security Weakness

Format string vulnerability in the dosyslog function in the OBEX server obexsrv.c for Sobexsrv before 1.0.0-pre4, when the syslog -S function is enabled, allows remote attackers to execute arbitrary code via format string specifiers in file name arguments to OBEX commands...

CVE-2005-3995

Format string vulnerability in the dosyslog function in the OBEX server obexsrv.c for Sobexsrv before 1.0.0-pre4, when the syslog -S function is enabled, allows remote attackers to execute arbitrary code via format string specifiers in file name arguments to OBEX commands...

DMA[2005-1202a] - 'sobexsrv - Scripting/Secure OBEX Server format string vulnerability'

DMA2005-1202a - 'sobexsrv - Scripting/Secure OBEX Server format string vulnerability' Author: Kevin Finisterre Vendor: http://www.mulliner.org/bluetooth/sobexsrv.php Product: 'sobexsrv' References: http://www.digitalmunition.com/DMA2005-1202a.txt...

sobexsrv bluetooth OBEX server format string bug

syslog format string bug...

sobexsrv 1.0.0_pre3 Bluetooth syslog() Remote Format String Exploit

No description provided by source. !/usr/bin/perl trifinite.group Bluetooth sobexsrv remote syslog exploit code by kflistsatdigitalmunitiondotcom http://www.digitalmunition.com Shouts to my nigga Chung and the Donut Shop... keep fighting that SARS dude! Big ups to d4yj4y beeeeeeeeeeeeeotch! $retl...

sobexsrv 1.0.0_pre3 Bluetooth syslog() Remote Format String Exploit

Exploit for linux platform in category remote exploits =================================================================== sobexsrv 1.0.0pre3 Bluetooth syslog Remote Format String Exploit =================================================================== !/usr/bin/perl trifinite.group Bluetooth...

sobexsrv 1.0.0_pre3 Bluetooth - syslog() Remote Format String

sobexsrv 1.0.0pre3 Bluetooth - syslog Remote Format String !/usr/bin/perl trifinite.group Bluetooth sobexsrv remote syslog exploit code by kflistsatdigitalmunitiondotcom http://www.digitalmunition.com Shouts to my nigga Chung and the Donut Shop... keep fighting that SARS dude! Big ups to d4yj4y...

sobexsrv 1.0.0_pre3 Bluetooth - 'syslog()' Remote Format String

!/usr/bin/perl trifinite.group Bluetooth sobexsrv remote syslog exploit code by kflistsatdigitalmunitiondotcom http://www.digitalmunition.com Shouts to my nigga Chung and the Donut Shop... keep fighting that SARS dude! Big ups to d4yj4y beeeeeeeeeeeeeotch! $retloc = 0x8053418; Due to unicode the...