Multiple bru bugs

Buffer overflows, format string bugs...

Tolis Group BRU 17.0 - Local Privilege Escalation (2)

Tolis Group BRU 17.0 - Local Privilege Escalation 2 // source: https://www.securityfocus.com/bid/8215/info It has been reported that BRU may not properly parse commandline arguments, potentially leading to at least two vectors of exploitation. It may be possible for local attackers to conduct...

Tolis Group BRU 17.0 - Local Privilege Escalation (1)

Tolis Group BRU 17.0 - Local Privilege Escalation 1 // source: https://www.securityfocus.com/bid/8215/info It has been reported that BRU may not properly parse commandline arguments, potentially leading to at least two vectors of exploitation. It may be possible for local attackers to conduct...

Tolis Group BRU 17.0 - Local Privilege Escalation (1)

// source: https://www.securityfocus.com/bid/8215/info It has been reported that BRU may not properly parse commandline arguments, potentially leading to at least two vectors of exploitation. It may be possible for local attackers to conduct format string-based attacks as well as buffer...

Tolis Group BRU 17.0 - Local Privilege Escalation (2)

// source: https://www.securityfocus.com/bid/8215/info It has been reported that BRU may not properly parse commandline arguments, potentially leading to at least two vectors of exploitation. It may be possible for local attackers to conduct format string-based attacks as well as buffer...

CVE-2003-0555

ImageMagick 5.4.3.x and earlier allows attackers to cause a denial of service crash and possibly execute arbitrary code via a "%x" filename, possibly triggering a format string vulnerability...

ImageMagic format string bug

Format string bug in filename...

CVE-2003-0555: Undefined Security Weakness

ImageMagick 5.4.3.x and earlier allows attackers to cause a denial of service crash and possibly execute arbitrary code via a "%x" filename, possibly triggering a format string vulnerability...

zkfingerd-2.0.2(the last version)Format String Vulnerabilities

======================================== Ph4nt0m Security Advisory 22003--7-7 ======================================== Title: zkfingerd-2.0.2the last versionFormat String Vulnerabilities Advisory Number : SRT2003-7-7-002 Product : zkfingerd Version : 2.0.2 possibility All versions Vendor :...

zkfingerd format string bug

Format string on syslog call...

CVE-2003-0510

CVE-2003-0510 is a format-string vulnerability in ezbounce limited to v1.0–1.50 that lets remote attackers run arbitrary code via the sessions command. The issue is network-accessible with no authentication required (per CVSS data); exploitation is noted in advisories, with some reports of obtain...

CVE-2003-0510: Undefined Security Weakness

Format string vulnerability in ezbounce 1.0 through 1.50 allows remote attackers to execute arbitrary code via the "sessions" command...

CVE-2003-0391

Format string vulnerability in Magic WinMail Server 2.3, and possibly other 2.x versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in the PASS command...

Linux eXtremail 1.5.x Remote Format Strings Exploit

Exploit for linux platform in category remote exploits =================================================== Linux eXtremail 1.5.x Remote Format Strings Exploit =================================================== // / Linux eXtremail 1.5.x Remote Format Strings Exploit / / / / / / By B-r00t -...

[Full-Disclosure] extremail (latest) fmt strings

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote Vulnerabilities in eXtremail Server. =========================================== Date: 02.07.2003 Email: B-r00t [email protected] Reference: http://www.extremail.com/ Versions: Linux eXtremail-1.5-8 = VULNERABLE Linux eXtremail-1.5-5 =...

ezbounce format string bug

Format string bug in "sessions" command...

ezbounce[v1.0-(1.04a/1.50pre6)]: remote format string exploit.

just downloaded ezbounce, quick audit yielded this format bug. the bug exists from version 1.0 to current1.04a-stable/1.50-pre6-beta at the time. the bug occurs inside the "sessions" command. most of the details are explained in the exploit comments. pretty much explains how to get the addresses...

eXtremail 1.5.x (Linux) - Remote Format Strings

// / Linux eXtremail 1.5.x Remote Format Strings Exploit / / / / / / By B-r00t - 02/07/2003 / / / / Versions: Linux eXtremail-1.5-8 = VULNERABLE / / Linux eXtremail-1.5-5 = VULNERABLE / / Exploit uses format strings bug in fLog of smtpd to bind a / / r00tshell to port 36864 on the target eXtremai...

ezbounce 1.01.5 - Format String

ezbounce 1.01.5 - Format String // source: https://www.securityfocus.com/bid/8071/info It has been reported that ezbounce is affected by a format string vulnerability. The condition is present in the file "ezbounce/commands.cpp" and can be triggered when session support is enabled. To exploit thi...

ezbounce remote format string vulnerability

A security hole exists that can be used to crash the proxy and execute arbitrary code. An exploit is circulating that takes advantage of this, and in some cases succeeds in obtaining a login shell on the machine...