CVE-2004-1128: Undefined Security Weakness

Buffer overflow in CMailCOM.dll in CMailServer 5.2 allows remote attackers to execute arbitrary code via an attachment with a long filename...

Multiple vulnerabilities in Kreed 1.05

Luigi Auriemma Application: Kreed http://www.kreed3d.com Versions: = 1.05 Platforms: Windows Bugs: A in-game format string B forced exit caused by "message too long" C server temporary freezed by script errors Exploitation: remote, versus server Date: 02 December 2004 Author: Luigi Auriemma e-mai...

CVE-2004-1094

CVE-2004-1094 concerns a buffer overflow in InnerMedia DynaZip DUNZIP32.dll (version 5.00.03 and earlier) that enables remote code execution when a crafted ZIP with a long filename is processed. Affected products include RealPlayer 10 / RealOne Player and various third‑party apps (e.g., CheckMark...

CVE-2004-1118

Buffer overflow in the WodFtpDLX.ocx WeOnlyDo! ActiveX component before 2.3.2.97, as used by CoffeeCup Direct FTP 6.2.0.62 and CoffeeCup Free FTP 3.0.0.10, and possibly other applications, allows remote attackers to execute arbitrary code via a long filename...

CVE-2004-1079: Undefined Security Weakness

Buffer overflow in 1 ncplogin and 2 ncpmap in nwclient.c for ncpfs 2.2.4, and possibly other versions, may allow local users to gain privileges via a long -T option...

CVE-2004-1094: Undefined Security Weakness

Buffer overflow in InnerMedia DynaZip DUNZIP32.dll file version 5.00.03 and earlier allows remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename, as demonstrated using 1 a .rjs skin file in RealPlayer 10 through RealPlayer 10.5 6.0.12.1053, RealOne Playe...

3Dmax 6.x backburner Manager 2.2 - Denial of Service

3Dmax backburner Manager Dos Exploit There are security hole in 3Dmax backburner Manager Default listen port is 3234. It's can be Dos by long string Tested on Version 3dmax 5.0 backburner Manager Version 2.0 3dmax 6.0 backburner Manager Version 2.2 3dmax 6.0 SP1 backburner Manager Version 2.2 All...

CVE-2004-0947

CVE-2004-0947 is confirmed across connected docs as a vulnerability in the unarj utility. The issue is a buffer overflow when handling long filenames in arj archives, enabling remote code execution. Related advisories additionally describe a directory-traversal weakness in the -x extract option t...

CVE-2004-0947

Buffer overflow in unarj before 2.63a-r2 allows remote attackers to execute arbitrary code via an arj archive that contains long filenames...

PT-2004-1120 · Unrarj Team · Unarj

Name of the Vulnerable Software and Affected Versions: unarj versions prior to 2.63a-r2 Description: The issue is caused by a buffer overflow in the unarj library, which handles data archiving. This can be exploited by a remote attacker to execute arbitrary code using an arj archive containing...

CVE-2004-0947: Undefined Security Weakness

Buffer overflow in unarj before 2.63a-r2 allows remote attackers to execute arbitrary code via an arj archive that contains long filenames...

CVE-2004-0298

CesarFTP 0.99e allows remote attackers to cause a denial of service CPU consumption via a long RETR parameter...

CVE-2004-0262

Stack-based buffer overflow in The Palace 3.5 and earlier client allows remote attackers to execute arbitrary code via a link to a palace:// url followed by a long server address string...

GLSA-200411-29 : unarj: Long filenames buffer overflow and a path traversal vulnerability

The remote host is affected by the vulnerability described in GLSA-200411-29 unarj: Long filenames buffer overflow and a path traversal vulnerability unarj has a bounds checking vulnerability within the handling of long filenames in archives. It also fails to properly sanitize paths when extracti...

CVE-2004-1010

Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname...

CVE-2004-1010

Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname...

CVE-2004-1010: Undefined Security Weakness

Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname...

unarj -- long filename buffer overflow

Ludwig Nussel has discovered a buffer overflow vulnerability in unarj's handling of long filenames which could potentially lead to execution of arbitrary code with the permissions of the user running unarj...

OmniHTTPd Pro Long POST Request DoS

The remote host is running OmniHTTPd Pro HTTP Server. The remote version of this software seems to be vulnerable to a buffer overflow when handling specially long POST request. This may allow an attacker to crash the remote service, thus preventing it from answering legitimate client requests. C...

Mandrake Linux Security Advisory : gaim (MDKSA-2004:110)

More vulnerabilities have been discovered in the gaim instant messenger client. The vulnerabilities pertinent to version 0.75, which is the version shipped with Mandrakelinux 10.0, are: installing smiley themes could allow remote attackers to execute arbitrary commands via shell metacharacters in...