DEBIAN-CVE-2006-2656

Stack-based buffer overflow in the tiffsplit command in libtiff 3.8.2 and earlier might might allow attackers to execute arbitrary code via a long filename. NOTE: tiffsplit is not setuid. If there is not a common scenario under which tiffsplit is called with attacker-controlled command line...

Buffer overflow

Buffer overflow in the tellplayersurrchanges function in Genecys 0.2 and earlier might allow remote attackers to execute arbitrary code via long arguments...

DEBIAN-CVE-2006-2465

Buffer overflow in MP3Info 0.8.4 allows attackers to execute arbitrary code via a long command line argument. NOTE: if mp3info is not installed setuid or setgid in any reasonable context, then this issue might not be a vulnerability...

CVE-2006-2402

Buffer overflow in the changeRegistration function in servernet.cpp for Outgun 1.0.3 bot 2 and earlier allows remote attackers to change the registration information of other players via a long string...

FreeBSD : bogofilter -- heap corruption through excessively long words (b747b2a9-7be0-11da-8ec4-0002b3b60e4c)

Matthias Andree reports : Bogofilter's/bogolexer's input handling in version 0.96.2 was not keeping track of its output buffers properly and could overrun a heap buffer if the input contained words whose length exceeded 16,384 bytes, the size of flex's input buffer. A 'word' here refers to a...

Open redirect

LaunchServices in Apple Mac OS X 10.4.6 allows remote attackers to cause Safari to launch unsafe content via long file name extensions, which prevents Download Validation from determining which application will be used to open the file...

Buffer overflow

Buffer overflow in 1 TZipBuilder 1.79.03.01, 2 Abakt 0.9.2 and 0.9.3-beta1, 3 CAM UnZip 4.0 and 4.3, and possibly other products, allows user-assisted attackers to execute arbitrary code via a ZIP archive that contains a file with a long file name...

Command injection

acFTP 1.4 allows remote attackers to cause a denial of service application crash via a long string with "" brace characters to the USER command...

CVE-2006-2242

acFTP 1.4 allows remote attackers to cause a denial of service application crash via a long string with "" brace characters to the USER command...

acFTP FTP Server <= 1.4 (USER) Remote Denial of Service Exploit

No description provided by source. / Exploit for : acFTP 1.4 DoS Exploit Advisory : http://secunia.com/advisories/19978/ Coder : Omnipresent Email : [email protected] Description : Preddy has discovered a vulnerability in acFTP, which can be exploited by malicious people to cause a DoS Denial ...

HiveMail 1.3 - addressbook.add.php Remote Code Execution

HiveMail 1.3 - addressbook.add.php Remote Code Execution !/usr/bin/perl HiveMail = 1.3 remote command execution exploit Advisory: http://www.gulftech.org/?node=research&articleid=00098-02102006 To get the hivesession: log on hivemail with firefox then look at the hivesession number in the url. ye...

Buffer overflow

Buffer overflow in XM Easy Personal FTP Server 4.3 and earlier allows remote attackers to execute arbitrary code, probably via a USER command with a long username...

Buffer overflow

Buffer overflow in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via a long request...

CVE-2006-2114

Buffer overflow in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via a long request...

CVE-2006-2114

Buffer overflow in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via a long request...

Buffer overflow

Multiple buffer overflows in 1 CxAce60.dll and 2 CxAce60u.dll in SpeedProject Squeez 5.10 Build 4460, and SpeedCommander 10.52 Build 4450 and 11.01 Build 4450, allow user-assisted remote attackers to execute arbitrary code via an ACE archive that contains a file with a long filename...

CVE-2006-2085

Multiple buffer overflows in 1 CxAce60.dll and 2 CxAce60u.dll in SpeedProject Squeez 5.10 Build 4460, and SpeedCommander 10.52 Build 4450 and 11.01 Build 4450, allow user-assisted remote attackers to execute arbitrary code via an ACE archive that contains a file with a long filename...

OCE 3121/3122 Printer (parser.exe) Denial of Service Exploit

No description provided by source. !/usr/bin/perl OCE 3121/3122 Printer DoS Exploit ---------------------------- By Herman Groeneveld aka sh4d0wman trancelover75 AT gmail.com Description: the printer runs a webserver to provide various printing tasks from java enabled browsers. Input is being...

OCE 3121/3122 Printer (parser.exe) Denial of Service Exploit

Exploit for hardware platform in category dos / poc ============================================================ OCE 3121/3122 Printer parser.exe Denial of Service Exploit ============================================================ !/usr/bin/perl OCE 3121/3122 Printer DoS Exploit...

OCE 31213122 Printer - parser.exe Denial of Service

OCE 31213122 Printer - parser.exe Denial of Service !/usr/bin/perl OCE 3121/3122 Printer DoS Exploit ---------------------------- By Herman Groeneveld aka sh4d0wman trancelover75 AT gmail.com Description: the printer runs a webserver to provide various printing tasks from java enabled browsers...