smbd -- buffer-overrun vulnerability

Caused by improper bounds checking of certain trans2 requests, there is a possible buffer overrun in smbd. The attacker needs to be able to create files with very specific Unicode filenames on the share to take advantage of this issue...

XFree86 4.3 - Font Information File Buffer Overflow

XFree86 4.3 - Font Information File Buffer Overflow // source: https://www.securityfocus.com/bid/9636/info It has been reported that the XFree86 X Windows system is prone to a local buffer overflow vulnerability. The issue arises from improper bounds checking when parsing the 'font.alias' file...

Squid 2.5.x3.x - NTLM Buffer Overflow (Metasploit)

Squid 2.5.x3.x - NTLM Buffer Overflow Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

multiple buffer overflows in xboing

Steve Kemp reports in a Debian bug submission: Due to improper bounds checking it is possible for a malicious user to gain a shell with membership group 'games'. The binary is installed setgid games. Environmental variables are used without being bounds-checked in any way, from the source code:...

WSMP3 0.0.10.0.2 - Multiple Buffer Overflow Vulnerabilities

WSMP3 0.0.10.0.2 - Multiple Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/6239/info Several buffer overflow conditions have been reported for WSMP3. The vulnerability is due to improper bounds checking when copying data to local buffers. An attacker can exploit this...

WSMP3 0.0.1/0.0.2 - Multiple Buffer Overflow Vulnerabilities

source: https://www.securityfocus.com/bid/6239/info Several buffer overflow conditions have been reported for WSMP3. The vulnerability is due to improper bounds checking when copying data to local buffers. An attacker can exploit this vulnerability by sending an overly long request to the...

SmartMax MailMax 4.8 - Popmax Buffer Overflow

// source: https://www.securityfocus.com/bid/5285/info Reportedly, MailMax is vulnerable to buffer overflow attacks against its POP3 daemon, popmax. The vulnerability occurs due to improper bounds checking of the 'USER' argument. It is possible for an attacker to cause the buffer overflow conditi...

Joe Kloss RobinHood 1.1 - Remote Buffer Overflow

source : https://www.securityfocus.com/bid/1944/info RobinHood is a HTTP/1.1 web server based upon libHTTP and is designed for the BeOS platform. Improper bounds checking exists in code that handles requests RHCWindow.cpp and RHLogger.cpp. The components RHConsole and RHDaemon will cease operatio...

dalnet 4.6.5 remote vulnerability

This was something that w00w00 was originally going to release under the w00giving, but we never did. So, I thought this would fit well with vuln-dev. The complication is that no individual variable is large enough to fit shellcode, so it requires splitting the shellcode between the nickname,...

Jgaa WarFTPd 1.66 x4s1.67-3 - CWDMKD Denial of Service

Jgaa WarFTPd 1.66 x4s1.67-3 - CWDMKD Denial of Service // source: https://www.securityfocus.com/bid/966/info War-FTPd 1.67 and possibly previous versions are susceptible to a buffer overflow DoS attack. Due to improper bounds checking in the code that handles MKD and CWD commands, it is possible ...

unixware.xlock.txt

-----Original Message----- Date: Fri, 26 Nov 1999 04:29:42 +0300 MSK From: Matt Conover To: [email protected] Subject: w00giving '99 7: UnixWare 7's xlock Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII w00w00 Security Development WSD...

unixware.su.txt

-----Original Message----- Date: Fri, 26 Nov 1999 04:16:41 +0300 MSK From: Matt Conover To: [email protected] cc: [email protected] Subject: w00giving '99 5 and w00news: UnixWare 7's su Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII w00w00 Security Developmen...