[FMADV] Format String Bug in OllyDbg 1.10

FMADV - OllyDbg Format String Bug Introduction: There exists a format string bug in the code that handles Debugger Messages in OllyDbg. This means any traced application can crash OllyDbg and execute machine code. About From the Webpage: OllyDbg is a 32-bit assembler level analysing debugger for...

mod_ssl contains a format string vulnerability in the ssl_log() function

Overview There is a format string vulnerability in the ssllog function of the modssl module that could allow an attacker to potentially execute arbitrary code. Description modssl is an Apache module that provides Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocol support...

[SECURITY] [DSA 529-1] New netkit-telnet-ssl package fixes format string vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 529-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 17th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 529-1] New netkit-telnet-ssl package fixes format string vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 529-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 17th, 2004 http://www.debian.org/security/faq -...

DSA-529 netkit-telnet-ssl - format string

Bulletin has no description...

apache13-modssl -- format string vulnerability in proxy support

A OpenPKG Security Advisory reports: Triggered by a report to Packet Storm from Virulent, a format string vulnerability was found in modssl, the Apache SSL/TLS interface to OpenSSL, version up to and including 2.8.18 for Apache 1.3. The modssl in Apache 2.x is not affected. The vulnerability coul...

Re: mod_ssl-2.8.18-1.3.31 Format string vulnerability

On Fri, Jul 16, 2004, [email protected] wrote: Thought you might like to look at this if you haven't seen it already. Any feedback on it is appreciated. -Packet Storm ----- Forwarded message from Virulent [email protected] ----- Delivered-To: [email protected]...

Solaris 2.6 (x86) : 112894-01

SunOS 5.6x86: rpc.rwalld has format string problem. Date this patch was last updated by Sun : Jun/17/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. i...

Solaris 2.5.1 (sparc) : 112891-01

SunOS 5.5.1: rpc.rwalld has format string problem. Date this patch was last updated by Sun : Jun/14/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if...

Solaris 2.5.1 (x86) : 112892-01

SunOS 5.5.1x86: rpc.rwalld has format string problem. Date this patch was last updated by Sun : Jun/14/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc...

CVE-2004-0640

Format string vulnerability in the SSLsetverify function in telnetd.c for SSLtelnet daemon SSLtelnetd 0.13 allows remote attackers to execute arbitrary code...

CVE-2004-0640

CVE-2004-0640 is a format string vulnerability in the SSL_set_verify function of telnetd.c for the SSLtelnet daemon (SSLtelnetd) v0.13 that allows remote code execution. Connected records tie this to netkit-telnet-ssl and related packages (e.g., Debian netkit-telnet-ssl) with advisories noting a ...

CVE-2004-0640: Undefined Security Weakness

Format string vulnerability in the SSLsetverify function in telnetd.c for SSLtelnet daemon SSLtelnetd 0.13 allows remote attackers to execute arbitrary code...

CVE-2004-0448

Format string vulnerability in the log function for jftpgw 0.13.4 and earlier allows remote authenticated users to execute arbitrary code via format string specifiers in certain syslog messages...

CVE-2004-0448

The CVE-2004-0448 entry describes a format-string vulnerability in the log function of jftpgw 0.13.4 and earlier. The flaw allows remote authenticated users to execute arbitrary code via format string specifiers in certain syslog messages. Documents confirm affected software (jftpgw, an FTP proxy...

CVE-2004-0448: Undefined Security Weakness

Format string vulnerability in the log function for jftpgw 0.13.4 and earlier allows remote authenticated users to execute arbitrary code via format string specifiers in certain syslog messages...

FreeBSD : qpopper format string vulnerability (160)

The following package needs to be updated: qpopper %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgebdf65c72ca611d893550020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

FreeBSD : hsftp format string vulnerabilities (68)

The following package needs to be updated: hsftp %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg316e1c9b671c11d89aad000a95bc6fae.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-20...

FreeBSD : ezbounce remote format string vulnerability (45)

The following package needs to be updated: ezbounce %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgc480eb5e7f0011d8868e000347dd607f.nasl. Disabled on 2011/10/01. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

RHEL 2.1 : tripwire (RHSA-2004:244)

Updated Tripwire packages that fix a format string security vulnerability are now available. Tripwire is a system integrity assessment tool. Paul Herman discovered a format string vulnerability in Tripwire version 2.3.1 and earlier. If Tripwire is configured to send reports via email, a local use...