497 matches found
glibc: stack overflow in getaddrinfo()'s use of alloca()
REJECTED CVE This CVE has been rejected. This candidate is a duplicate of CVE-2013-4357. Note: All CVE users should reference CVE-2013-4357 instead of this candidate...
NetBSD 5.1 libc/net multiple functions stack buffer overflow
NetBSD 5.1 libc/net multiple functions stack buffer overflow Author: Maksymilian Arciemowicz http://netbsd.org/donations/ Date: - Dis.: 01.04.2011 - Pub.: 01.07.2011 CVE: CVE-2011-1656 CWE: CWE-121 Affected software: - NetBSD 5.1 fixed Affected functions: - getservbyname3 - getservbynamer3 -...
NetBSD 5.1 libc/net multiple functions stack buffer overflow
No description provided by source. NetBSD 5.1 libc/net multiple functions stack buffer overflow Author: Maksymilian Arciemowicz http://netbsd.org/donations/ Date: - Dis.: 01.04.2011 - Pub.: 01.07.2011 CVE: CVE-2011-1656 CWE: CWE-121 Affected software: - NetBSD 5.1 fixed Affected functions: -...
NetBSD 5.1 libc/net Stack Buffer Overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NetBSD 5.1 libc/net multiple functions stack buffer overflow Author: Maksymilian Arciemowicz http://netbsd.org/donations/ Date: - - Dis.: 01.04.2011 - - Pub.: 01.07.2011 CVE: CVE-2011-1656 CWE: CWE-121 Affected software: - - NetBSD 5.1 fixed Affected...
IBM AIX 5.3 getaddrinfo()函数远程拒绝服务漏洞
BUGTRAQ ID: 38964 CVE ID: CVE-2010-1124 IBM AIX是一款商业性质的UNIX操作系统。 IBM AIX在执行getaddrinfo调用后bos.rte.libc不支持读取某些地址字段，用户受骗访问了恶意服务器IP地址就会导致拒绝服务。 IBM AIX 5.3 厂商补丁： IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www-01.ibm.com/support/docview.wss?uid=isg1IZ66710...
Code injection
bos.rte.libc 5.3.9.4 on IBM AIX 5.3 does not properly support reading a certain address field after a successful getaddrinfo function call, which allows context-dependent attackers to cause a denial of service application crash via unspecified vectors, as demonstrated by IBM DB2 crashes on "syste...
CVE-2010-1124
bos.rte.libc 5.3.9.4 on IBM AIX 5.3 does not properly support reading a certain address field after a successful getaddrinfo function call, which allows context-dependent attackers to cause a denial of service application crash via unspecified vectors, as demonstrated by IBM DB2 crashes on "syste...
CVE-2010-1124
bos.rte.libc 5.3.9.4 on IBM AIX 5.3 does not properly support reading a certain address field after a successful getaddrinfo function call, which allows context-dependent attackers to cause a denial of service application crash via unspecified vectors, as demonstrated by IBM DB2 crashes on "syste...
CVE-2010-1124: Undefined Security Weakness
bos.rte.libc 5.3.9.4 on IBM AIX 5.3 does not properly support reading a certain address field after a successful getaddrinfo function call, which allows context-dependent attackers to cause a denial of service application crash via unspecified vectors, as demonstrated by IBM DB2 crashes on "syste...
Debian Security Advisory DSA 458-2 (python2.2)
The remote host is missing an update to python2.2 announced via advisory DSA 458-2. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Debian DSA-458-3 : python2.2 - buffer overflow
This security advisory corrects DSA 458-2 which caused a problem in the gethostbyaddr routine. The original advisory said : Sebastian Schmidt discovered a buffer overflow bug in Python's getaddrinfo function, which could allow an IPv6 address, supplied by a remote attacker via DNS, to overwrite...
Python 2.2: Buffer overflow in getaddrinfo()
Background Python is an interpreted, interactive, object-oriented, cross-platform programming language. Description If IPV6 is disabled in Python 2.2, getaddrinfo is not able to handle IPV6 DNS requests properly and a buffer overflow occurs. Impact An attacker can execute arbitrary code as the us...
CVE-2004-0150
The CVE-2004-0150 entry concerns Python 2.2.0–2.2.1 where a buffer overflow in getaddrinfo (with IPv6 support disabled) can permit remote code execution via a DNS-obtained IPv6 address. Affected component: Python's getaddrinfo routine; root cause is improper handling of DNS IPv6 addresses leading...
CVE-2004-0150: Buffer Copy without Checking Size of Input
Buffer overflow in the getaddrinfo function in Python 2.2 before 2.2.2, when IPv6 support is disabled, allows remote attackers to execute arbitrary code via an IPv6 address that is obtained using DNS...
Mandrake Linux Security Advisory : python (MDKSA-2004:019)
A buffer overflow in python 2.2's getaddrinfo function was discovered by Sebastian Schmidt. If python 2.2 is built without IPv6 support, an attacker could configure their name server to let a hostname resolve to a special IPv6 address, which could contain a memory address where shellcode is place...
PT-2004-1331 · Python · Python
Name of the Vulnerable Software and Affected Versions: Python versions 2.2 through 2.2.1 Description: A buffer overflow issue exists in the getaddrinfo function when IPv6 support is disabled, allowing remote attackers to execute arbitrary code via an IPv6 address obtained using DNS...