5369 matches found
PT-2005-2458 · Ethereal +1 · Ethereal +1
Name of the Vulnerable Software and Affected Versions: Ethereal versions prior to 0.10.11 Description: A double free vulnerability in the ICEP dissector may allow remote attackers to execute arbitrary code. Recommendations: For versions prior to 0.10.11, update to version 0.10.11 or later to...
[SECURITY] [DSA 556-1] New netkit-telnet packages fix invalid free
-------------------------------------------------------------------------- Debian Security Advisory DSA 556-1 [email protected] http://www.debian.org/security/ Matt Zimmerman October 2nd, 2004 http://www.debian.org/security/faq -...
Debian DSA-426-1 : netpbm-free - insecure temporary files
netpbm is a graphics conversion toolkit made up of a large number of single-purpose programs. Many of these programs were found to create temporary files in an insecure manner, which could allow a local attacker to overwrite files with the privileges of the user invoking a vulnerable netpbm tool...
CVE-2004-0643
Double free vulnerability in the krb5rdcred function for MIT Kerberos 5 krb5 1.3.1 and earlier may allow local users to execute arbitrary code...
DEBIAN-CVE-2004-0643
Double free vulnerability in the krb5rdcred function for MIT Kerberos 5 krb5 1.3.1 and earlier may allow local users to execute arbitrary code...
CVE-2004-0642
Double free vulnerabilities in the error handling code for ASN.1 decoders in the 1 Key Distribution Center KDC library and 2 client library for MIT Kerberos 5 krb5 1.3.4 and earlier may allow remote attackers to execute arbitrary code...
CVE-2004-0643
CVE-2004-0643 describes a double-free vulnerability in MIT Kerberos 5 (krb5) prior to or at 1.3.1, specifically in krb5_rd_cred, potentially allowing arbitrary code execution on vulnerable KDC/clients. Connected advisories extend this class of issues to Kerberos KDC and libraries (double-free bug...
CVE-2004-0643
Double free vulnerability in the krb5rdcred function for MIT Kerberos 5 krb5 1.3.1 and earlier may allow local users to execute arbitrary code...
Mandrake Linux Security Advisory : krb5 (MDKSA-2004:088)
A double-free vulnerability exists in the MIT Kerberos 5's KDC program that could potentially allow a remote attacker to execute arbitrary code on the KDC host. As well, multiple double-free vulnerabilities exist in the krb5 library code, which makes client programs and application servers...
MIT Kerberos krb524d insecurely deallocates memory (double-free)
Overview The MIT Kerberos krb524d daemon does not securely deallocate heap memory when handling an error condition, resulting in a double-free vulnerability. An unauthenticated, remote attacker could execute arbitrary code on a system running krb524d, which in many cases is also a Kerberos...
MIT Kerberos 5 ASN.1 decoding function krb5_rd_cred() insecurely deallocates memory (double-free)
Overview The krb5rdcred function in the MIT Kerberos 5 library does not securely deallocate heap memory when decoding ASN.1 structures, resulting in a double-free vulnerability. A remote, authenticated attacker could execute arbitrary code or cause a denial of service on any system running an...
CVE-2003-0015
Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands...
krb5 -- double-free vulnerabilities
An advisory published by the MIT Kerberos team says: The MIT Kerberos 5 implementation's Key Distribution Center KDC program contains a double-free vulnerability that potentially allows a remote attacker to execute arbitrary code. Compromise of a KDC host compromises the security of the entire...
Remote CVS 1.11.15 - error_prog_name Arbitrary Code Execution
Remote CVS 1.11.15 - errorprogname Arbitrary Code Execution / Remote CVS = 1.11.15 exploit for the errorprogname double free vuln. by Gyan Chawdhary, [email protected] Vulnerability Description: The Vulnerability lies in the serveargumentx function. The Argumentx command parameter is used to...
CVE-2004-0416
Double free vulnerability for the errorprogname string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code...
CVE-2004-0416
Double free vulnerability for the errorprogname string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code...
Mandrake Linux Security Advisory : zlib (MDKSA-2002:022)
Matthias Clasen found a security issue in zlib that, when provided with certain input, causes zlib to free an area of memory twice. This 'double free' bug can be used to crash any programs that take untrusted compressed input, such as web browsers, email clients, image viewing software, etc. This...
Microsoft Internet Explorer contains a double-free vulnerability in the processing of GIF files
Overview A double-free vulnerability in Microsoft's Internet Explorer IE web browser could allow a remote attacker to cause a denial-of-service condition or execute arbitrary code on a vulnerable system. Description Microsoft Internet Explorer IE is a web browser. A double-free vulnerability has...