FreeBSD : GNATS local privilege elevation (58)

The following package needs to be updated: gnats %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg4d837296cc2811d8a54c02e0185c0b53.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-20...

CVE-2004-0623

GNU GNATS 4.00 is affected by a format string vulnerability in misc.c that can allow a remote attacker to execute arbitrary code via format specifiers in a string logged by syslog. The CVE-2004-0623 entry notes a high severity (base score 10.0, CVSS2: AV:N/AC:L/Au:N/C:C/I:C/A:C) with remote, unau...

CVE-2004-0623

Removed by vendor...

CVE-2004-0623

Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in a string that gets logged by syslog...

GNATS format string bugs

Format string bug in syslog call...

format string vulnerability in Gnats

Zone-h Security Advisory Date of discovery : 21 june 2004 Date of release : 24 june 2004 Bug found by Khan Shirani [email protected] http://www.zone-h.org --------------------------------------- Software : GNU Gnats 4.00 Bugs : formats string bugs Risk : low/medium Platform : nix...

gnats -- format string vulnerability

Gnats suffers from a format string bug, which may enable an attacker to execute arbitary code...

[EXPL] GNATS Buffer Overflow Exploit Code Released (queue-pr)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion Beyond Security in Canada Toronto-based Sunrays Technologies is now Beyond Security's representative in Canada. We welcome ISPs, system...

GNU GNATS buffer overflows

Multiple buffer overflows...

GNU GNATS 3.113.1_6 - Queue-PR Database Command Line Option Buffer Overflow

source: https://www.securityfocus.com/bid/8232/info A stack overflow vulnerability has been reported for the queue-pr utility of GNATS. The vulnerability occurs due to insufficient checks performed on the arguments to the '-d' commandline option. Successful exploitation may result in the executio...

GNU GNATS 3.113.1_6 - Queue-PR Database Command Line Option Buffer Overflow

GNU GNATS 3.113.16 - Queue-PR Database Command Line Option Buffer Overflow source: https://www.securityfocus.com/bid/8232/info A stack overflow vulnerability has been reported for the queue-pr utility of GNATS. The vulnerability occurs due to insufficient checks performed on the arguments to the...

[Full-Disclosure] GNATS (The GNU bug-tracking system) multiple buffer overflow vulnerabilities.

======================================== INetCop Security Advisory 2003-0x82-018 ======================================== Title: GNATS The GNU bug-tracking system multiple buffer overflow vulnerabilities. 0x01. Description About: GNATS is a portable incident/bug report/help request-tracking syste...

GNU GNATS 3.0 02 - PR-Edit Command Line Option Heap Corruption

source: https://www.securityfocus.com/bid/8003/info A heap overflow vulnerability has been reported for the pr-edit utility of GNATS. The vulnerability occurs due to insufficient checks performed on the arguments to the '-d' commandline option. Successful exploitation may result in the execution ...

GNU GNATS 3.113 - Environment Variable Buffer Overflow

// source: https://www.securityfocus.com/bid/8005/info It has been reported that GNATS is prone to a buffer overflow condition when parsing certain environment variables. An attacker can exploit this vulnerability by setting an overly long environment variable and invoking one of several GNATS...

GNU GNATS 3.113 - Environment Variable Buffer Overflow

GNU GNATS 3.113 - Environment Variable Buffer Overflow // source: https://www.securityfocus.com/bid/8005/info It has been reported that GNATS is prone to a buffer overflow condition when parsing certain environment variables. An attacker can exploit this vulnerability by setting an overly long...

GNATS local privilege elevation

GNATS 3.113.1 contains multiple buffer overflows, through which a local attacker could gain elevated privileges on the system...

GNU GNATS 3.0 02 - PR-Edit Command Line Option Heap Corruption

GNU GNATS 3.0 02 - PR-Edit Command Line Option Heap Corruption source: https://www.securityfocus.com/bid/8003/info A heap overflow vulnerability has been reported for the pr-edit utility of GNATS. The vulnerability occurs due to insufficient checks performed on the arguments to the '-d' commandli...

CVE-2001-0808

gnatsweb.pl in GNATS GnatsWeb 2.7 through 3.95 allows remote attackers to execute arbitrary commands via certain characters in the helpfile parameter...

CVE-2001-0808

GNATS GnatsWeb 2.7–3.95 is affected by CVE-2001-0808 where remote attackers can execute arbitrary commands via certain characters in the help_file parameter. The underlying cause is a command-execution input handling issue in gnatsweb.pl. Documented impact is arbitrary command execution with netw...