Berlios gpsd gpsd_report() Function Format String

The remote host is running GPSD, a daemon which monitors a GPS device and publishes its data over the network. The remote version of this software is vulnerable to format string attack due to the way it uses the syslog call. An attacker may exploit this flaw to execute arbitrary code on the remot...

Berlios gpsd (GPS/GIS daemon) format string bug

Format string bug on syslog call...

[Full-Disclosure] DMA[2005-0125a] - 'berlios gpsd format string vulnerability'

DMA2005-0125a - 'berlios gpsd remake of pygps format string vulnerability' Author: Kevin Finisterre Vendor: http://gpsd.berlios.de, http://www.pygps.org Product: 'gpsd' References: http://www.digitalmunition.com/DMA2005-0125a.txt Description: gpsd is a service daemon that monitors a GPS attached ...

Berlios GPSD 2.7.x - Remote Format String

/ Added , on line 75 /str0ke / / Copyright Johnh and KF 2005 Gpsd remote format string exploit By: Johnhatdigitalmunitiondotcom Bug Found By: kfatdigitalmunitiondotcom http://www.digitalmunition.com/DMA2005-0125a.txt Features: Version ident Debian machines provide uid=gpsd Redhat machines provide...

Berlios GPSD 2.7.x - Remote Format String

Berlios GPSD 2.7.x - Remote Format String / Added , on line 75 /str0ke / / Copyright Johnh and KF 2005 Gpsd remote format string exploit By: Johnhatdigitalmunitiondotcom Bug Found By: kfatdigitalmunitiondotcom http://www.digitalmunition.com/DMA2005-0125a.txt Features: Version ident Debian machine...

Berlios gpsd <= 2.7.x Remote Format String Vulnerability

Exploit for linux platform in category remote exploits ======================================================== Berlios gpsd include include include include include include include include include include include include include define GPSDPORT 2947 void shint stsockva; int newtcpConnect char hos...

CVE-2004-1004

Multiple format string vulnerabilities in Midnight Commander mc 4.5.55 and earlier allow remote attackers to have an unknown impact...

CVE-2004-1004

Multiple format string vulnerabilities in Midnight Commander mc 4.5.55 and earlier allow remote attackers to have an unknown impact...

CVE-2004-1004

CVE-2004-1004 affects Midnight Commander (mc) up to version 4.5.55 with multiple format string vulnerabilities. The provided connected advisories confirm that various distros release patches (e.g., SUSE SLES9 patch 5011441, Gentoo GLSA 200502-24, Debian DSA 639-1) to fix these issues. The CVE ent...

CVE-2004-1004: Undefined Security Weakness

Multiple format string vulnerabilities in Midnight Commander mc 4.5.55 and earlier allow remote attackers to have an unknown impact...

Multiple AtHoc toolbar bugs

Buffer overflows, format string bugs in ActiveX components...

CVE-2005-0012

Format string vulnerability in the aInterfacemsg function in Dillo before 0.8.3-r4 allows remote attackers to execute arbitrary code via format string specifiers in a web page...

CVE-2005-0012

CVE-2005-0012 affects Dillo before 0.8.3-r4, where a format string vulnerability in the a_Interface_msg() function can allow remote code execution via crafted web pages. The issue is documented across multiple feeds (NVD entry and OpenVAS/Gentoo GLSA references) with a base CVSS v2 score of 7.5 (...

CVE-2004-0561

Format string vulnerability in the log routine for gopher daemon gopherd 3.0.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code...

CVE-2004-1373

CVE-2004-1373 describes a format-string vulnerability in SHOUTcast 1.9.4 where a specially crafted filename in a URL can cause a crash or remote code execution. Multiple public sources (Metasploit module, Exploit-DB, and vendor/OpenVAS advisories) corroborate remote code execution and denial of s...

CVE-2004-0561

CVE-2004-0561 refers to a format-string vulnerability in the log routine of gopherd (Debian gopher package). Affected software is the gopher server (gopherd) in Debian, with the issue fixed in the 3.0.3woody2 update for Woody; other references note the same vulnerability across Debian advisories....

CVE-2005-0012

Format string vulnerability in the aInterfacemsg function in Dillo before 0.8.3-r4 allows remote attackers to execute arbitrary code via format string specifiers in a web page...

CVE-2005-0012: Undefined Security Weakness

Format string vulnerability in the aInterfacemsg function in Dillo before 0.8.3-r4 allows remote attackers to execute arbitrary code via format string specifiers in a web page...

CVE-2004-1373: Undefined Security Weakness

Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service application crash and execute arbitrary code via format string specifiers in a content URL, as demonstrated in the filename portion of a .mp3 file...

CVE-2004-0561: Undefined Security Weakness

Format string vulnerability in the log routine for gopher daemon gopherd 3.0.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code...