security flaw

HTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before 1.5.0.4, when used with certain proxy servers, allows remote attackers to cause Firefox to interpret certain responses as if they were responses from two different sites via 1 invalid HTTP response headers with spaces...

DEBIAN-CVE-2006-0322

Unspecified vulnerability the edit comment formatting functionality in MediaWiki 1.5.x before 1.5.6 and 1.4.x before 1.4.14 allows attackers to cause a denial of service infinite loop via "certain malformed links."...

CVE-2006-0322: Undefined Security Weakness

Unspecified vulnerability the edit comment formatting functionality in MediaWiki 1.5.x before 1.5.6 and 1.4.x before 1.4.14 allows attackers to cause a denial of service infinite loop via "certain malformed links."...

security flaw

The IAPP dissector packet-iapp.c for Ethereal 0.9.1 to 0.10.9 does not properly use certain routines for formatting strings, which could leave it vulnerable to buffer overflows, as demonstrated using modified length values that are not properly handled by the dissectpdus and pduvaltostr functions...

PT-2005-1774 · Ethereal +1 · Ethereal +1

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.1 through 0.10.9 Description: The issue is related to the IAPP dissector in Ethereal, which does not properly handle string formatting. This could lead to buffer overflows, particularly when dealing with modified length...

IBM DB2 DTS To String Conversion - Denial of Service

source: https://www.securityfocus.com/bid/11400/info IBM DB2 is reported prone to a denial of service vulnerability when DTS to string conversion is carried out. It is reported that during a DTS to string conversion a trap occurs if an empty formatting string is provided. The vulnerability is...

IBM DB2 DTS To String Conversion - Denial of Service

IBM DB2 DTS To String Conversion - Denial of Service source: https://www.securityfocus.com/bid/11400/info IBM DB2 is reported prone to a denial of service vulnerability when DTS to string conversion is carried out. It is reported that during a DTS to string conversion a trap occurs if an empty...

irssi DoS

It's possible to insert formatting commands into messages text...

irssi - potential remote crash

irssi 0.8.9 release fixes a vulnerability that allows normal IRC users to remotely crash another user's irssi client, provided that either of these conditions is met: a irssi is running on an architecture that requires memory alignmentation ie. not x86 b "gui print text" signal is being used by...

JRE/JDK sandbox breaking

By using / instead of . in class name it's possible to bypass sandbox restrictions...

CVE-2002-0647

Buffer overflow in a legacy ActiveX control used to display specially formatted text in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code, aka "Buffer Overrun in Legacy Text Formatting ActiveX Control"...

Microsoft Internet Explorer 56 Legacy Text Formatting - ActiveX Component Buffer Overflow

Microsoft Internet Explorer 56 Legacy Text Formatting - ActiveX Component Buffer Overflow source: https://www.securityfocus.com/bid/5558/info A buffer overflow vulnerability has been reported in Microsoft Internet Explorer's Legacy Text Formatting ActiveX control. The Legacy Text Formatting Activ...

Format atring bug in TrACESroute

Ошибка форматной строки при обработке аргументов...

Outlook \r expliots - ripMIME fix.

A recent announcement of ripMIME 1.2.12 has been superceded with a new release which covers several issues as mentioned in [email protected]'s content-exploits analysis post. Specifically, "0 data poisoning" and "fake-end-of-line termination" due to fgets have been immediately covered. Issu...

Progres Databse PROMSGS Format strings issue.

Well once again I have found yet another Progress database issue. The PROMSGS has been looked at one time already for buffer overflows. It was supposed to be fixed. I was poking around at it today and noticed these format strings issues... PROGRESS Version 9.1C as of Thu Jun 7 10:03:59 EDT 2001...

Formatting string bug on cyrus-sasl library

This issue may be already have been on list. I assume that the moderator this case rejects this mail. On last non-beta version of cyrus-sasl library have formatting string bug on default logging callback. Default cyrys sasl logging callback is static int saslsyslogvoid context attributeunused, in...

Ошибка форматной строки в gm4 (format string)

No description provided...

webridge application suite gives up too much error information on Internal Server Error

Hi. I accidently come across this error yesterday. Im not sure what to class it as but it sure is a bug of some kind. This occurred because I tried to view some pages on the site and forgot to remove the trailing slash so it had // at the end of the URL. Still it should not give up this informati...

Ошибки в Oracle 8i Enterprise Edition server

Ошибки в группах тестирования ошибок запросов LDAP - 46 или 77 приводят к ошибкам форматной строки или срыву стека в приложениях использующих эти группы...

Rit Research Labs 'The Bat!' 1.x - Missing Linefeeds Denial of Service

source: https://www.securityfocus.com/bid/2636/info "The Bat!" is an MUA for Windows by Rit Research Labs. "The Bat!" is vulnerable to a remote denial of service attack. Email messages in which carriage return CR characters are not followed by a linefeed LF can cause "The Bat!" to incorrectly...