Medieval Total War <= 1.1 broadcast crash

Luigi Auriemma Application: Medieval Total War http://www.totalwar.com Versions: = 1.1 Platforms: Windows Bug: Remote crash of server and attached clients caused by long nickname Risk: Low/Medium Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction...

DEBIAN-CVE-2003-0805

Multiple buffer overflows in UMN gopher daemon gopherd 2.x and 3.x before 3.0.6 allows attackers to execute arbitrary code via 1 a long filename as a result of a LIST command, and 2 the GSisText function, which calculates the view-type...

DEBIAN-CVE-2003-0826

lsh daemon lshd does not properly return from certain functions in 1 readline.c, 2 channelcommands.c, or 3 clientkeyexchange.c when long input is provided, which could allow remote attackers to execute arbitrary code via a heap-based buffer overflow attack...

CVE-2003-0830

Buffer overflow in marbles 1.0.2 and earlier allows local users to gain privileges via a long HOME environment variable...

CVE-2003-0833

Stack-based buffer overflow in webfs before 1.20 allows attackers to execute arbitrary code by creating directories that result in a long pathname...

Gamespy3d <= 263015 lets code execution through long IRC answer

Luigi Auriemma Application: Gamespy 3d http://www.gamespy3d.com Versions: = 263015 Platforms: Windows Bug: Code execution through memory corruption caused by long data from IRC server Risk: Medium Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introductio...

CAN-2003-0543/0544 OpenSSL ASN.1 protocol crashes

OpenSSL 0.9.6 and 0.9.7 does not properly track the number of characters in certain ASN.1 inputs, which allows remote attackers to cause a denial of service crash via an SSL client certificate that causes OpenSSL to read past the end of a buffer when the long form is used...

MS Windows (RPC DCOM) Long Filename Overflow Exploit (MS03-026)

No description provided by source. include stdio.h include winsock2.h include windows.h include process.h include string.h include winbase.h pragma commentlib,"ws232" unsigned char bindstr= 0x05,0x00,0x0B,0x03,0x10,0x00,0x00,0x00,0x48,0x00,0x00,0x00,0x7F,0x00,0x00,0x00,...

MS Windows (RPC DCOM) Long Filename Overflow Exploit (MS03-026)

Exploit for unknown platform in category remote exploits =============================================================== MS Windows RPC DCOM Long Filename Overflow Exploit MS03-026 =============================================================== include include include include include include prag...

Microsoft Windows - RPC DCOM Long Filename Overflow (MS03-026)

Microsoft Windows - RPC DCOM Long Filename Overflow MS03-026 include include include include include include pragma commentlib,"ws232" unsigned char bindstr= 0x05,0x00,0x0B,0x03,0x10,0x00,0x00,0x00,0x48,0x00,0x00,0x00,0x7F,0x00,0x00,0x00,...

Microsoft Windows - 'RPC DCOM' Long Filename Overflow (MS03-026)

include include include include include include pragma commentlib,"ws232" unsigned char bindstr= 0x05,0x00,0x0B,0x03,0x10,0x00,0x00,0x00,0x48,0x00,0x00,0x00,0x7F,0x00,0x00,0x00, 0xD0,0x16,0xD0,0x16,0x00,0x00,0x00,0x00,0x01,0x00,0x00,0x00,0x01,0x00,0x01,0x00,...

CVE-2003-0762

Buffer overflow in 1 foxweb.dll and 2 foxweb.exe of Foxweb 2.5 allows remote attackers to execute arbitrary code via a long URL PATHINFO value...

CVE-2003-0766

Multiple heap-based buffer overflows in FTP Desktop client 3.5, and possibly earlier versions, allow remote malicious servers to execute arbitrary code via 1 a long FTP banner, 2 a long response to a USER command, or 3 a long response to a PASS command...

PT-2003-1696 · Microsoft · Windows 2000 +3

Heap-based buffer overflow in the Distributed Component Object Model DCOM interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed RPC request with a long filename parameter, a different vulnerability than CVE-2003-0352 Blaster/Nachi and CVE-2003-0715...

CVE-2003-0525

The getCanonicalPath function in Windows NT 4.0 may free memory that it does not own and cause heap corruption, which allows attackers to cause a denial of service crash via requests that cause a long file name to be passed to getCanonicalPath, as demonstrated on the IBM JVM using a long string t...

DEBIAN-CVE-2003-0620

Multiple buffer overflows in man-db 2.4.1 and earlier, when installed setuid, allow local users to gain privileges via 1 MANDATORYMANPATH, MANPATHMAP, and MANDBMAP arguments to addtodirlist in manp.c, 2 a long pathname to ultsrc in ultsrc.c, 3 a long .so argument to testforinclude in ultsrc.c, 4 ...

DEBIAN-CVE-2003-0685

Buffer overflow in Netris 0.52 and earlier, and possibly other versions, allows remote malicious Netris servers to execute arbitrary code on netris clients via a long server response...

DEBIAN-CVE-2003-0454

Multiple buffer overflows in xgalaga 2.0.34 and earlier allow local users to gain privileges via a long HOME environment variable...

CVE-2003-0595

Buffer overflow in WiTango Application Server and Tango 2000 allows remote attackers to execute arbitrary code via a long cookie to WitangoUserReference...

CVE-2003-0525

The getCanonicalPath function in Windows NT 4.0 may free memory that it does not own and cause heap corruption, which allows attackers to cause a denial of service crash via requests that cause a long file name to be passed to getCanonicalPath, as demonstrated on the IBM JVM using a long string t...