973 matches found
DGUX lpsched buffer overflow
Hi there! There's a vulnerability in DG's UNIX implementation DGUX, version R4.20MU06 and MU02 ia32 arch. The problem is when a very long, non-existant, printer name is passed to the program lpsched. It tries to format an error message and then the buffer overflow occurs... Data General was told...
Advisory: Half-life server buffer overflows and formatting vulnerabilities
Author: Stan Bubrouski [email protected] Date: March 9, 2001 Package: Half-Life dedicated server for Windows and Linux and the Windows client as well. Versions affected: All are believed vulnerable including latest builds for Windows Build 1572 and Linux Build 1573 Severity: Remote users with acce...
Проблема в dhcp сервере/клиенте в linux
Ошибка форматной строки...
Дырка в hybrid-ircd
Ошибка форматной строки при разборе FQDN клиента...
CVE-2000-0583
CVE-2000-0583 affects the vpopmail package: the vchkpw program (versions prior to 4.8) fails to properly cleanse an untrusted format string in a syslog call, enabling remote users to trigger a denial of service by sending a USER or PASS command containing formatting directives. The remediation is...
CVE-2000-0442
Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command...
CVE-2000-0442: Undefined Security Weakness
Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command...
bitchx.dos.txt
There's a small bug in the latest BitchX in which a nasty user can invite you to a channel with a %s in it, causing the client to coredump. As alot of channels/users on irc use the client, I felt I should post a notice about this problem. A small patch is available on www.bitchx.com/downloads.htm...
PT-2000-1517 · Vpopmail · Vpopmail
Name of the Vulnerable Software and Affected Versions: vpopmail versions prior to 4.8 Description: The issue is related to the vchkpw program in vpopmail, which does not properly cleanse an untrusted format string used in a call to syslog. This allows remote attackers to cause a denial of service...
CVE-2000-0442
Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command...
Security update 1970-01-01
...