Melange Chat Server 1.10 Remote Buffer Overflow Exploit

No description provided by source. / Proof of Concept for Melange Chat Server 1.10 a lame remote bof exploit by innerphobia [email protected] 12/24/02 Credits go to: - iDefense Labs for the advisory - blink for discovering the bug - Irian for the shellcode With careful calculation it is possible t...

iDefense Security Advisory 10.21.06: Novell eDirectory evtFilteredMonitorEventsRequest Invalid Free Vulnerability

Novell eDirectory evtFilteredMonitorEventsRequest Invalid Free Vulnerability iDefense Security Advisory 10.21.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 21, 2006 I. BACKGROUND Novell eDirectory is a cross-platform lightweight directory access protocol LDAP server. More informati...

[Full-disclosure] iDefense Security Advisory 02.07.06: QNX Neutrino RTOS fontsleuth Command Format String Vulnerability

QNX Neutrino RTOS fontsleuth Command Format String Vulnerability iDefense Security Advisory 02.07.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=380 February 7, 2006 I. BACKGROUND QNX Software Systems Ltd.'s Neutrino RTOS QNX is a real-time operating system designed for us...

[Full-disclosure] iDEFENSE Security Advisory 10.24.05: SCO Unixware Setuid ppp prompt Buffer Overflow Vulnerability

SCO Unixware Setuid ppp prompt Buffer Overflow Vulnerability iDEFENSE Security Advisory 10.24.05 http://www.idefense.com/application/poi/display?type=vulnerabilities October 24, 2005 I. BACKGROUND SCO UnixWare is a UNIX operating system. More information is available at:...

[Full-disclosure] iDEFENSE Security Advisory 09.30.05: RealNetworks RealPlayer/HelixPlayer RealPix Format String Vulnerability

RealNetworks RealPlayer/HelixPlayer RealPix Format String Vulnerability iDEFENSE Security Advisory 09.30.05 www.idefense.com/application/poi/display?id=311&type=vulnerabilities September 30, 2005 I. BACKGROUND RealPlayer is an application for playing various media formats, developed by RealNetwor...

iDEFENSE Security Advisory 09.13.05: Linksys WRT54G 'upgrade.cgi' Firmware Upload Design Error Vulnerability

Linksys WRT54G 'upgrade.cgi' Firmware Upload Design Error Vulnerability iDEFENSE Security Advisory 09.13.05 www.idefense.com/application/poi/display?id=307&type=vulnerabilities September 13, 2005 I. BACKGROUND The Linksys WRT54G is a combination wireless access point, switch and router. More...

iDEFENSE Security Advisory 09.13.05: Linksys WRT54G Management Interface DoS Vulnerability

Linksys WRT54G Management Interface DoS Vulnerability iDEFENSE Security Advisory 09.13.05 www.idefense.com/application/poi/display?id=308&type=vulnerabilities September 13, 2005 I. BACKGROUND The Linksys WRT54G is a combination wireless access point, switch and router. More information is availab...

iDEFENSE Security Advisory 04.26.05: MySQL MaxDB Webtool Remote 'If' Stack Overflow Vulnerability

MySQL MaxDB Webtool Remote 'If' Stack Overflow Vulnerability iDEFENSE Security Advisory 04.26.05 www.idefense.com/application/poi/display?id=236&type=vulnerabilities April 26, 2005 I. BACKGROUND MaxDB by MySQL is a re-branded and enhanced version of SAP DB, SAP AG's open source database. MaxDB is...

Possible remote code execution

Description Remote exploitation of an integer overflow vulnerability in the smbd daemon included in Samba 2.0.x, Samba 2.2.x, and Samba 3.0.x prior to and including 3.0.9 could allow an attacker to cause controllable heap corruption, leading to execution of arbitrary commands with root privileges...

security issues in pine

Upgraded pine packages are available for Slackware 8.1, 9.0 and - -current. These fix two security problems found by iDEFENSE Labs which could lead to arbitrary code execution when a specially crafted email is processed by Pine. This problem is fixed in Pine 4.58. Sites which use the Pine mail...