CVE-2004-0623

GNU GNATS 4.00 is affected by a format string vulnerability in misc.c that can allow a remote attacker to execute arbitrary code via format specifiers in a string logged by syslog. The CVE-2004-0623 entry notes a high severity (base score 10.0, CVSS2: AV:N/AC:L/Au:N/C:C/I:C/A:C) with remote, unau...

CVE-2004-0393

CVE-2004-0393 corresponds to a format-string vulnerability in rlpr/rlprd (rlpr daemon) version 2.0.4. The flaw resides in the msg() function, where unbounded format strings provided to syslog can lead to arbitrary code execution. Documented impact is remote code execution with the rlprd process p...

CVE-2004-0623

Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in a string that gets logged by syslog...

CVE-2004-0451

Multiple format string vulnerabilities in the 1 logquit, 2 logerr, or 3 loginfo functions in Software Upgrade Protocol SUP allows remote attackers to execute arbitrary code via format string specifiers in messages that are logged by syslog...

CVE-2004-0393

Format string vulnerability in the msg function for rlpr daemon rlprd 2.0.4 allows remote attackers to execute arbitrary code via format string specifiers in a buffer that can not be resolved, which is provided to the syslog function...

GNATS format string bugs

Format string bug in syslog call...

format string vulnerability in Gnats

Zone-h Security Advisory Date of discovery : 21 june 2004 Date of release : 24 june 2004 Bug found by Khan Shirani [email protected] http://www.zone-h.org --------------------------------------- Software : GNU Gnats 4.00 Bugs : formats string bugs Risk : low/medium Platform : nix...

Rlpr 2.04 - msg() Remote Format String

Rlpr 2.04 - msg Remote Format String by jaguar !/usr/bin/python import os, sys, socket, struct, time, telnetlib class rlprd: fd = None pad = 2 00000000 31DB xor ebx,ebx 00000002 F7E3 mul ebx 00000004 B003 mov al,0x3 00000006 80C304 add bl,0x4 00000009 89E1 mov ecx,esp 0000000B 4A dec edx 0000000C...

Rlpr 2.04 - 'msg()' Remote Format String

by jaguar !/usr/bin/python import os, sys, socket, struct, time, telnetlib class rlprd: fd = None pad = 2 00000000 31DB xor ebx,ebx 00000002 F7E3 mul ebx 00000004 B003 mov al,0x3 00000006 80C304 add bl,0x4 00000009 89E1 mov ecx,esp 0000000B 4A dec edx 0000000C CC int3 0000000D CD80 int 0x80...

Rlpr Advisory

,'| .-''-.....--'; / '. ..-' , ,--...--''' .--''' /' -';' ; ; ; ...--'' ...--..' .;.' fL ,....----''' ,..--'' felinemenace.org Program: rlprd 2.0.4 Impact: remote root Discovered: jaguar Writeup and exploits: Andrew Griffiths 1 Background It is a package that makes it possible or at the very leas...

rlpr <= 2.04 msg() Remote Format String Exploit

Exploit for linux platform in category remote exploits =============================================== rlpr 0,1,2 lnxstagetwo = "\x31\xc0\x89\xc3\x89\xc1\x89\xc2\xb2\x3f\x88\xd0\xb3\x04" lnxstagetwo += "\xcd\x80\x89\xd0\x41\xcd\x80\x89\xd0\x41\xcd\x80" execute /bin/sh lnxstagetwo += "\x90" 100...

rlpr format string bug

syslog format string bug...

CVE-2004-0453

Format string vulnerability in the monitor "memory dump" command in VICE 1.6 to 1.14 allows local users to cause a denial of service emulator crash and possibly execute arbitrary code via format string specifiers in an output string...

CVE-2004-0453

CVE-2004-0453 describes a format string vulnerability in the monitor “memory dump” command of VICE versions 1.6 through 1.14. The issue arises from format string specifiers in an output string, allowing local users to cause a denial of service (emulator crash) and potentially execute arbitrary co...

CVE-2004-0579

The CVE-2004-0579 entry concerns the Debian-related format-string vulnerability in the program named “super.” Public documentation in the connected sources confirms that this flaw exists in versions prior to 3.23 and allows a local user to execute arbitrary code with root privileges due to a faul...

CVE-2004-0579

Format string vulnerability in super before 3.23 allows local users to execute arbitrary code as root...

CVE-2004-0579

Format string vulnerability in super before 3.23 allows local users to execute arbitrary code as root...

gnats -- format string vulnerability

Gnats suffers from a format string bug, which may enable an attacker to execute arbitary code...

[Full-Disclosure] [SECURITY] [DSA 524-1] New rlpr packages fix multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 524-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 19th, 2004 http://www.debian.org/security/faq -...

sup format string bug

Format string bug on syslog call...