840 matches found
Format atring bug in TrACESroute
Ошибка форматной строки при обработке аргументов...
Outlook \r expliots - ripMIME fix.
A recent announcement of ripMIME 1.2.12 has been superceded with a new release which covers several issues as mentioned in [email protected]'s content-exploits analysis post. Specifically, "0 data poisoning" and "fake-end-of-line termination" due to fgets have been immediately covered. Issu...
Progres Databse PROMSGS Format strings issue.
Well once again I have found yet another Progress database issue. The PROMSGS has been looked at one time already for buffer overflows. It was supposed to be fixed. I was poking around at it today and noticed these format strings issues... PROGRESS Version 9.1C as of Thu Jun 7 10:03:59 EDT 2001...
Formatting string bug on cyrus-sasl library
This issue may be already have been on list. I assume that the moderator this case rejects this mail. On last non-beta version of cyrus-sasl library have formatting string bug on default logging callback. Default cyrys sasl logging callback is static int saslsyslogvoid context attributeunused, in...
Ошибка форматной строки в gm4 (format string)
No description provided...
webridge application suite gives up too much error information on Internal Server Error
Hi. I accidently come across this error yesterday. Im not sure what to class it as but it sure is a bug of some kind. This occurred because I tried to view some pages on the site and forgot to remove the trailing slash so it had // at the end of the URL. Still it should not give up this informati...
Ошибки в Oracle 8i Enterprise Edition server
Ошибки в группах тестирования ошибок запросов LDAP - 46 или 77 приводят к ошибкам форматной строки или срыву стека в приложениях использующих эти группы...
Rit Research Labs 'The Bat!' 1.x - Missing Linefeeds Denial of Service
source: https://www.securityfocus.com/bid/2636/info "The Bat!" is an MUA for Windows by Rit Research Labs. "The Bat!" is vulnerable to a remote denial of service attack. Email messages in which carriage return CR characters are not followed by a linefeed LF can cause "The Bat!" to incorrectly...
DGUX lpsched buffer overflow
Hi there! There's a vulnerability in DG's UNIX implementation DGUX, version R4.20MU06 and MU02 ia32 arch. The problem is when a very long, non-existant, printer name is passed to the program lpsched. It tries to format an error message and then the buffer overflow occurs... Data General was told...
Advisory: Half-life server buffer overflows and formatting vulnerabilities
Author: Stan Bubrouski [email protected] Date: March 9, 2001 Package: Half-Life dedicated server for Windows and Linux and the Windows client as well. Versions affected: All are believed vulnerable including latest builds for Windows Build 1572 and Linux Build 1573 Severity: Remote users with acce...
Проблема в dhcp сервере/клиенте в linux
Ошибка форматной строки...
Дырка в hybrid-ircd
Ошибка форматной строки при разборе FQDN клиента...
CVE-2000-0583
CVE-2000-0583 affects the vpopmail package: the vchkpw program (versions prior to 4.8) fails to properly cleanse an untrusted format string in a syslog call, enabling remote users to trigger a denial of service by sending a USER or PASS command containing formatting directives. The remediation is...
CVE-2000-0442
Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command...
bitchx.dos.txt
There's a small bug in the latest BitchX in which a nasty user can invite you to a channel with a %s in it, causing the client to coredump. As alot of channels/users on irc use the client, I felt I should post a notice about this problem. A small patch is available on www.bitchx.com/downloads.htm...
PT-2000-1517 · Vpopmail · Vpopmail
Name of the Vulnerable Software and Affected Versions: vpopmail versions prior to 4.8 Description: The issue is related to the vchkpw program in vpopmail, which does not properly cleanse an untrusted format string used in a call to syslog. This allows remote attackers to cause a denial of service...
CVE-2000-0442
Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command...
Security update 1970-01-01
...