CVE-2002-1215

Multiple format string vulnerabilities in heartbeat 0.4.9 and earlier claimed as buffer overflows in some sources allow remote attackers to execute arbitrary code via certain packets to UDP port 694 incorrectly claimed as TCP in some sources...

CVE-2002-1215

Multiple format string vulnerabilities in heartbeat 0.4.9 and earlier claimed as buffer overflows in some sources allow remote attackers to execute arbitrary code via certain packets to UDP port 694 incorrectly claimed as TCP in some sources...

CVE-2002-1215

CVE-2002-1215 affects heartbeat 0.4.9 and earlier. Multiple format string vulnerabilities allow a remote attacker to execute arbitrary code by sending crafted UDP packets to port 694 (some sources describe as a buffer overflow). Debian/OSS-related advisories reference this in DSAs and OpenVAS ent...

CVE-2002-1215

Multiple format string vulnerabilities in heartbeat 0.4.9 and earlier claimed as buffer overflows in some sources allow remote attackers to execute arbitrary code via certain packets to UDP port 694 incorrectly claimed as TCP in some sources...

Format string bugs in heartbeat

Few format strings potentially can lead to remote root compromise UDP/694...

CVE-2002-0930

Format string vulnerability in the FTP server for Novell Netware 6.0 SP1 NWFTPD allows remote attackers to cause a denial of service ABEND via format strings in the USER command...

DEBIAN-CVE-2002-1049

Format string vulnerability in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service crash via the TSI data element...

DEBIAN-CVE-2002-0916

Format string vulnerability in the allowuser code for the Stellar-X msntauth authentication module, as distributed in Squid 2.4.STABLE6 and earlier, allows remote attackers to execute arbitrary code via format strings in the user name, which are not properly handled in a syslog call...

CVE-2002-0925

Format string vulnerability in mmsyslog function allows remote attackers to execute arbitrary code via 1 the USER command to mmpop3d for mmmail 0.0.13 and earlier, 2 the HELO command to mmsmtpd for mmmail 0.0.13 and earlier, or 3 the USER command to mmftpd 0.0.7 and earlier...

CVE-2002-0916

Format string vulnerability in the allowuser code for the Stellar-X msntauth authentication module, as distributed in Squid 2.4.STABLE6 and earlier, allows remote attackers to execute arbitrary code via format strings in the user name, which are not properly handled in a syslog call...

CVE-2002-0913

Format string vulnerability in logdoit function of Slurp NNTP client 1.1.0 allows a malicious news server to execute arbitrary code on the client via format strings in a server response...

CVE-2002-0884

Multiple format string vulnerabilities in in.rarpd ARP server on Solaris, Caldera UnixWare and Open UNIX, and possibly other operating systems, allows remote attackers to execute arbitrary code via format strings that are not properly handled in the functions 1 syserr and 2 error...

CVE-2002-0916

Format string vulnerability in the allowuser code for the Stellar-X msntauth authentication module, as distributed in Squid 2.4.STABLE6 and earlier, allows remote attackers to execute arbitrary code via format strings in the user name, which are not properly handled in a syslog call...

Unauthorized access in WatchGuard

Format string bugs and insufficient username checks allows administrative access...

IIL Advisory: Format String bug in Null Webmail (0.6.3)

Illegal Instruction Labs Advisory ------------------------------------------------------------------------- Advisory name: Format String bug in Null Webmail 0.6.3 Advisory number: 7 Application: Null Webmail 0.6.3 Author: Dan Cahill E-mail: [email protected] Homepage:...

CVE-2002-0851

Format string vulnerability in ISDN Point to Point Protocol PPP daemon ipppd in the ISDN4Linux i4l package allows local users to gain root privileges via format strings in the device name command line argument, which is not properly handled in a call to syslog...

CVE-2002-0913

CVE-2002-0913 describes a format string vulnerability in the Slurp NNTP client 1.1.0, specifically in the log_doit function. A malicious news server can exploit this by sending a crafted server response to execute arbitrary code on the affected client. The vulnerability is network-based with low ...

CVE-2002-0925

Format string vulnerability in mmsyslog function allows remote attackers to execute arbitrary code via 1 the USER command to mmpop3d for mmmail 0.0.13 and earlier, 2 the HELO command to mmsmtpd for mmmail 0.0.13 and earlier, or 3 the USER command to mmftpd 0.0.7 and earlier...

CVE-2002-0930

Format string vulnerability in the FTP server for Novell Netware 6.0 SP1 NWFTPD allows remote attackers to cause a denial of service ABEND via format strings in the USER command...

CVE-2002-0930

The CVE-2002-0930 entry describes a format-string vulnerability in the NWFTPD FTP server of Novell NetWare 6.0 SP1. The issue allows remote attackers to cause a denial of service (ABEND) via format strings in the USER command. Affected software explicitly named is the NWFTPD component of NetWare ...