40 matches found
CVE-2018-3863
On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability. A strcpy overflows t...
PT-2018-16257 · Samsung · Samsung Smartthings Hub
Name of the Vulnerable Software and Affected Versions: Samsung SmartThings Hub STH-ETH-250 version 0.20.17 Description: The issue arises from the incorrect extraction of fields from a user-controlled JSON payload by the video-core process, leading to a buffer overflow on the stack. This can be...
ALPINE-CVE-2017-8816
The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service integer overflow and resultant buffer overflow, and application crash or possibly have unspecified other impact via vectors involving long user and password fields...
CVE-2017-8816
The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service integer overflow and resultant buffer overflow, and application crash or possibly have unspecified other impact via vectors involving long user and password fields...
Mozilla Firefox URL Long user name Denial Of Service (CVE-2017-7783)
A denial-of-service vulnerability exists in Mozilla Firefox. Mozilla Firefox fails to properly process a combination of username and password inside the URL. A remote attacker could exploit this vulnerability by persuading a target user to open a specially crafted html site...
UBUNTU-CVE-2017-15671
The glob function in glob.c in the GNU C Library aka glibc or libc6 before 2.27, when invoked with GLOBTILDE, could skip freeing allocated memory when processing the operator with a long user name, potentially leading to a denial of service memory leak...
Konica Minolta FTP Utility Denial of Service Vulnerability
KONICA MINOLTA FTP Utility is a software used by KONICA MINOLTA copiers. Konica Minolta FTP Utility 1.0 is implemented with a buffer overflow vulnerability. A remote attacker could cause a denial of service application crash by exploiting this vulnerability via a longer USER command...
DEBIAN-CVE-2013-0273
sametime.c in the Sametime protocol plugin in libpurple in Pidgin before 2.10.7 does not properly terminate long user IDs, which allows remote servers to cause a denial of service application crash via a crafted packet...
Stack overflow
Off-by-one error in the dologinloop function in libwzd-core/wzdlogin.c in wzdftpd 0.8.0, 0.8.2, and possibly other versions allows remote attackers to cause a denial of service daemon crash via a long USER command that triggers a stack-based buffer overflow. NOTE: some of these details are obtain...
CVE-2006-6909
Stack-based buffer overflow in http.c in Karl Dahlke Edbrowse aka Command line editor browser 3.1.3 allows remote attackers to execute arbitrary code by operating an FTP server that sends directory listings with 1 long user names or 2 long group names...
Buffer overflow
Buffer overflow in RevilloC MailServer and Proxy 1.21 allows remote attackers to execute arbitrary code via a long USER command...
CVE-2005-0634
Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long USER command...
Cooolsoft PowerFTP Server 2.x - Remote Denial of Service (2)
Cooolsoft PowerFTP Server 2.x - Remote Denial of Service 2 source: https://www.securityfocus.com/bid/5899/info PowerFTP server is a shareware ftp server available for the Microsoft Windows platform. It is distributed and maintained by Cooolsoft. It has been reported that PowerFTP server does not...
Cooolsoft PowerFTP Server 2.x - Remote Denial of Service (3)
source: https://www.securityfocus.com/bid/5899/info PowerFTP server is a shareware ftp server available for the Microsoft Windows platform. It is distributed and maintained by Cooolsoft. It has been reported that PowerFTP server does not properly handle long user names. When excessive data is...
CVE-2000-0843
Summary (CVE-2000-0843): Buffer overflow in pam_smb and pam_ntdom PAM modules can be triggered by a long username, enabling remote attackers to execute arbitrary commands. Connected Nessus data notes the overflow could allow an intruder to run arbitrary commands as root on the host, indicating a ...
Переполнение буфера в TelSrv
Переполнение буфера при длинном имени пользователя...
CVE-2000-0399
Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a long user name...
CVE-2000-0399
Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a long user name...