proftpd -- Long Command Processing Vulnerability

Secunia reports: The vulnerability is caused due to the application truncating an overly long FTP command, and improperly interpreting the remainder string as a new FTP command. This can be exploited to execute arbitrary FTP commands with the privileges of another user by e.g. tricking the user...

CVE-2008-4136

Michael Roth Software Personal FTP Server PFT 6.0f allows remote attackers to cause a denial of service service crash via multiple RETR commands, possibly involving long filenames...

Buffer overflow

Buffer overflow in the SQLVDIRLib.SQLVDirControl ActiveX control in Tools\Binn\sqlvdir.dll in Microsoft SQL Server 2000 aka SQL Server 8.0 allows remote attackers to cause a denial of service browser crash or possibly execute arbitrary code via a long URL in the second argument to the Connect...

Stack overflow

Stack-based buffer overflow in Acoustica Beatcraft 1.02 Build 19 allows user-assisted attackers to cause a denial of service or execute arbitrary code via a Beatcraft Project aka bcproj file with a long string in a certain instruments title field...

DEBIAN-CVE-2008-3529

Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service crash or execute arbitrary code via a long XML entity name...

libxml2: long entity name heap buffer overflow

Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service crash or execute arbitrary code via a long XML entity name...

phsBlog 0.2 - Bypass SQL Injection Filtering

phsBlog 0.2 - Bypass SQL Injection Filtering !/usr/bin/perl ---------------------------------------------------------------- Script : PhsBlog v0.2 Type : Bypass Sql injection Filtering Exploit Method : GET Risk : High ---------------------------------------------------------------- Discovered by ...

ZoneAlarm Security Suite 7.0 - AntiVirus Directory Path Buffer Overflow (PoC)

ZoneAlarm Security Suite 7.0 - AntiVirus Directory Path Buffer Overflow PoC source: https://www.securityfocus.com/bid/31124/info ZoneAlarm Security Suite is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input when...

Dreambox DM500超长请求拒绝服务漏洞

CNCAN ID：CNCAN-2008090302 Dreambox DM500是一款卫星电视接收设备。 Dreambox DM500 WEB接口处理超长请求存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 发送超长的HTTP请求给WEB服务程序处理，可导致程序停止响应，造成拒绝服务攻击。 Dreambox DM500 目前没有解决方案提供： http://www.dream-multimedia-tv.de/english/productsdm500.php...

openSUSE 10 Security Update : git (git-5585)

This patch fixes several buffer overflows in some git tools, when repositories contain very long pathnames. CVE-2008-3546 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update git-5585. The text...

CVE-2008-3936

The web interface in Dreambox DM500C allows remote attackers to cause a denial of service application hang via a long URI...

Design/Logic Flaw

The web interface in Dreambox DM500C allows remote attackers to cause a denial of service application hang via a long URI...

CVE-2008-3936

The web interface in Dreambox DM500C allows remote attackers to cause a denial of service application hang via a long URI...

DEBIAN-CVE-2008-3916

Heap-based buffer overflow in the stripescapes function in signal.c in GNU ed before 1.0 allows context-dependent or user-assisted attackers to execute arbitrary code via a long filename. NOTE: since ed itself does not typically run with special privileges, this issue only crosses privilege...

CVE-2008-3916

Heap-based buffer overflow in the stripescapes function in signal.c in GNU ed before 1.0 allows context-dependent or user-assisted attackers to execute arbitrary code via a long filename. NOTE: since ed itself does not typically run with special privileges, this issue only crosses privilege...

AZL-7423 CVE-2008-3908 affecting package wordnet for versions less than 3.0-38

Multiple buffer overflows in Princeton WordNet wn 3.0 allow context-dependent attackers to execute arbitrary code via 1 a long argument on the command line; a long 2 WNSEARCHDIR, 3 WNHOME, or 4 WNDBVERSION environment variable; or 5 a user-supplied dictionary aka data file. NOTE: since WordNet...

FreeBSD Ports: fetchmail

The remote host is missing an update to the system as announced in the referenced advisory. VID 168190df-3e9a-11dd-87bc-000ea69a5213 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

libxine -- multiple buffer overflows in RTSP

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-3795

Buffer overflow in Ipswitch WSFTP Home client allows remote FTP servers to have an unknown impact via a long "message response."...

FlashGet FTP PWD Response Remote Buffer Overflow Vulnerability

This host is running FlashGet, which is prone to Remote Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: secpodflashgetftppwdbofvuln900203.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: FlashGet FTP PWD Response Remote Buffer Overflow Vulnerability. Authors: Veerendra GG Copyrigh...