Batalla Naval 1.0 4 - Remote Buffer Overflow (2)

Batalla Naval 1.0 4 - Remote Buffer Overflow 2 // source: https://www.securityfocus.com/bid/7699/info Batalla Naval is prone to a remotely exploitable buffer overflow when handling requests of excessive length. This could allow for execution of malicious instructions in the context of the game...

Batalla Naval 1.0 4 - Remote Buffer Overflow (1)

Batalla Naval 1.0 4 - Remote Buffer Overflow 1 source: https://www.securityfocus.com/bid/7699/info Batalla Naval is prone to a remotely exploitable buffer overflow when handling requests of excessive length. This could allow for execution of malicious instructions in the context of the game serve...

Batalla Naval 1.0 4 - Remote Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/7699/info Batalla Naval is prone to a remotely exploitable buffer overflow when handling requests of excessive length. This could allow for execution of malicious instructions in the context of the game server. / by jsk for gbnserver remote exploit dem...

Security advisory: LSF 5.1 local root exploit

Security Advisory 22 May 2003 Local root in LSF 5.1 Name: Load Sharing Facility version 5.1 Severity: High Vendor URL: http://www.platform.com Author: Tomasz Grabowski [email protected] Vendor notified: 25 Feb 2003 Vendor response: 25 Feb 2003 Vendor fix: 19 Mar 2003 Commercial: I'm looking for ...

Apple QuickTime/Darwin Streaming MP3Broadcaster - ID3 Tag Handling

source: https://www.securityfocus.com/bid/7660/info MP3Broadcaster is shipped as part of Darwin Streaming Server software. MP3Broadcaster has been reported prone to a vulnerability when processing malicious ID3 tags. This is likely due to insufficient sanity checks performed when handling signed...

quotacheck security fix in rc.M

An upgraded sysvinit package is available which fixes a problem with the use of quotacheck in /etc/rc.d/rc.M. The original version of rc.M calls quotacheck like this: echo "Checking filesystem quotas: /sbin/quotacheck -avugM" /sbin/quotacheck -avugM The 'M' option is wrong. This causes the...

BitchX security fixes

New BitchX packages are available to fix security problems found by Timo Sirainen. BitchX is an IRC Internet Relay Chat client. Under certain circumstances, a malicious IRC server could cause BitchX to crash, or possibly to run arbitrary code as the user running BitchX. All sites running BitchX a...

[SECURITY] [DSA-305-1] New sendmail packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 305-1 [email protected] http://www.debian.org/security/ Matt Zimmerman May 15th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 299-1] New leksbot packages fix improper setuid-root execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 299-1 [email protected] http://www.debian.org/security/ Matt Zimmerman May 6th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 300-1] New Balsa packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 300-1 [email protected] http://www.debian.org/security/ Martin Schulze May 6th, 2003 http://www.debian.org/security/faq -...

Youbin 2.5/3.0/3.4 - 'HOME' Buffer Overflow

source: https://www.securityfocus.com/bid/7503/info It has been reported that youbin is vulnerable to a locally exploitable buffer overflow. The problem is said to occur while processing environment variables. Specifically, an internal memory buffer may be overrun while handling a HOME environmen...

[SECURITY] [DSA 292-3] New mime-support packages really fix temporary file race conditions

-------------------------------------------------------------------------- Debian Security Advisory DSA 292-3 [email protected] http://www.debian.org/security/ Martin Schulze April 30th, 2003 http://www.debian.org/security/faq -...

Pi3Web 2.0.1 - Denial of Service (PoC)

/ Pi3Web 2.0.1 DoS - Pr00f of concept. Vulnerable systems: Pi3Web 2.0.1 maybe others Vendor: www.johnroy.com/pi3 - http://pi3web.sourceforge.net/ Patch: no yet. Info: Pi3Web Server is vulnerable to a denial of Service. when a malformed HTTP Request is done the webserver hangs due to an stack...

[SECURITY] [DSA 292-1] New mime-support packages fix temporary file race conditions

-------------------------------------------------------------------------- Debian Security Advisory DSA 292-1 [email protected] http://www.debian.org/security/ Martin Schulze April 22nd, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 291-1] New ircII packages fix DoS and arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 291-1 [email protected] http://www.debian.org/security/ Martin Schulze April 22nd, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 291-1] New ircII packages fix DoS and arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 291-1 [email protected] http://www.debian.org/security/ Martin Schulze April 22nd, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 290-1] New sendmail-wide packages fix DoS and arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 290-1 [email protected] http://www.debian.org/security/ Martin Schulze April 17th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 289-1] New rinetd packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 289-1 [email protected] http://www.debian.org/security/ Martin Schulze April 17th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 267-2] New lpr packages fix local root exploit (potato)

-------------------------------------------------------------------------- Debian Security Advisory DSA 267-2 [email protected] http://www.debian.org/security/ Martin Schulze April 15th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 267-2] New lpr packages fix local root exploit (potato)

-------------------------------------------------------------------------- Debian Security Advisory DSA 267-2 [email protected] http://www.debian.org/security/ Martin Schulze April 15th, 2003 http://www.debian.org/security/faq -...