BrowseGate HTTP MIME Headers Remote Overflow

It is possible to kill the remote server by sending it an invalid request with too long HTTP headers Authorization and Referer. BrowseGate proxy is known to be vulnerable to this flaw. An attacker could exploit this vulnerability to cause the web server to crash continually or to execute arbitrar...

Long filenames buffer overflow in PGP

Buffer overflow on filenames longer than 192 bytes...

Buffer overflow in afd

Buffer overflow on long path in suid utils...

CVE-2002-1073

Buffer overflow in the control service for MERCUR Mailserver 4.2 allows remote attackers to execute arbitrary code via a long password...

CVE-2002-0894

NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service crash via 1 a request for a long .jsp file, or 2 a long URL sent directly to com.newatlanta.servletexec.JSP10Servlet...

CVE-2002-0910

Buffer overflows in netstd 3.07-17 package allows remote DNS servers to execute arbitrary code via a long FQDN reply, as observed in the utilities 1 linux-ftpd, 2 pcnfsd, 3 tftp, 4 traceroute, or 5 from/to...

CVE-2002-1067

Administrative web interface for IC9 Pocket Print Server Firmware 7.1.30 and 7.1.36f allows remote attackers to cause a denial of service reboot and reset via a long password, possibly due to a buffer overflow...

[SECURITY] [DSA 157-1] New irssi-text packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 157-1 [email protected] http://www.debian.org/security/ Martin Schulze August 23rd, 2002 http://www.debian.org/security/faq -...

Personal Web Sharing Long HTTP Request DoS

It was possible to kill the Personal Web Sharing service by sending it a too long request. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson nb: domain no longer exists References: To: [email protected] Subject: Personal Web Sharing...

CVE-2002-0753

Buffer overflow in Talentsoft Web+ 5.0 allows remote attackers to execute arbitrary code via an HTTP request with a long cookie...

ncompress vulnerable to buffer overflow via long filename

Overview Some versions of ncompress contain a buffer-overflow vulnerability. Description Versions 4.2.4 and earlier of ncompress do not properly handle filenames longer than 1023 characters. --- Impact By supplying long filenames to ncompress, an attacker may be able to gain local access to the...

TFTP Long Filename Vulnerability

...

CVE-2002-0744

namerslv in AIX 4.3.3 core dumps when called with a very long argument, possibly as a result of a buffer overflow...

CVE-2002-0753

Buffer overflow in Talentsoft Web+ 5.0 allows remote attackers to execute arbitrary code via an HTTP request with a long cookie...

CVE-2002-0740

Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d SPOOLDIR argument...

CVE-2001-0917

Jakarta Tomcat 4.0.1 allows remote attackers to reveal physical path information by requesting a long URL with a .JSP extension...

DoS on irssi 0.8.4

DoS on irssi 0.8.4 current version 1. Aplication description: Irssi is a modular IRC client for UNIX systems. It runs on text mode user interface, or on graphic mode user using GTK+. You can donwload irssi and get more information about it from official website, http://www.irssi.org 2. Problem...

MIT PGP Public Key Server 0.9.2/0.9.4 - Search String Remote Buffer Overflow

source: https://www.securityfocus.com/bid/4828/info The PGP Public Key Server is a freely available, open source software package distributed by MIT. It is designed for use on Linux and Unix operating systems. The PGP Public Key Server does not properly handle long search strings. Under some...

CVE-2002-0360

Buffer overflow in Sun AnswerBook2 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long filename argument to the gettransbitmap CGI program...

Apple OSX sliplogin overflow

side note ... isn't it odd that I can run gdb on a suid binary? Osx version 10.1.3 localhost: elguapo ls -al /usr/sbin/sliplogin -r-sr-xr-x 1 root wheel 14700 Dec 8 10:49 /usr/sbin/sliplogin localhost: elguapo sliplogin perl -e 'print "A" x 9000' Bus error localhost: elguapo uname -a Darwin...