CVE-2005-3863

Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and earlier, as used in products such as 1 centericq, 2 orpheus, 3 motor, and 4 groan, allows local users or remote attackers to execute arbitrary code via a long parameter to the VGETSTRING macro...

CVE-2005-3863

CVE-2005-3863 describes a stack-based buffer overflow in kkstrtext.h of the ktools library (version 0.3 and earlier) used by multiple products (e.g., centericq, orpheus, motor, groan). The overflow can be triggered by a long parameter to the VGETSTRING macro and may allow an attacker to execute a...

CVE-2005-3863: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and earlier, as used in products such as 1 centericq, 2 orpheus, 3 motor, and 4 groan, allows local users or remote attackers to execute arbitrary code via a long parameter to the VGETSTRING macro...

Linux Kernel 2.6 - Console Keymap Local Command Injection

Linux Kernel 2.6 - Console Keymap Local Command Injection source: https://www.securityfocus.com/bid/15122/info The Linux kernel is susceptible to a local command-injection vulnerability via console keymap modifications. This issue occurs because unprivileged users can alter the system-wide consol...

Quake 2 Lithium Mod V 1.24 Macro Expansion Vuln?

Well I ran quake 2 using Lithium mod V 1.24 under OllyDBG and it seems that the lithium II mod for quake 2 latest PATCH 3.20 is parsing the '' in nicks. My well crafted nickname '999fffff' is being pushed onto the stack as 004144A1 |. 68 E821AF00 PUSH QUAKE2.00AF21E8 ; ASCII "0.000000 0.000000...

CVE-2002-1776

Symantec Norton AntiVirus 2002 is affected by CVE-2002-1776. The issue allows remote attackers to bypass virus protection via a Word Macro virus with a .nch or .dbx extension, which is automatically recognized and executed as a Microsoft Office document. The vendor disputes the claim, noting that...

CVE-2002-1776

NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to bypass virus protection via a Word Macro virus with a .nch or .dbx extension, which is automatically recognized and executed as a Microsoft Office document. NOTE: the vendor has disputed th...

CVE-2002-1776: Undefined Security Weakness

NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to bypass virus protection via a Word Macro virus with a .nch or .dbx extension, which is automatically recognized and executed as a Microsoft Office document. NOTE: the vendor has disputed th...

CVE-2004-1442

Cross-site scripting XSS vulnerability in db2www CGI interpreter in IBM Net.Data 7 and 7.2 allows remote attackers to inject arbitrary web script or HTML via a macro filename, which is not properly handled by error messages such as "DTWP001E."...

CVE-2004-1442: Undefined Security Weakness

Cross-site scripting XSS vulnerability in db2www CGI interpreter in IBM Net.Data 7 and 7.2 allows remote attackers to inject arbitrary web script or HTML via a macro filename, which is not properly handled by error messages such as "DTWP001E."...

CVE-2004-1442

Cross-site scripting XSS vulnerability in db2www CGI interpreter in IBM Net.Data 7 and 7.2 allows remote attackers to inject arbitrary web script or HTML via a macro filename, which is not properly handled by error messages such as "DTWP001E."...

DEBIAN-CVE-2004-2167

Multiple buffer overflows in LaTeX2rtf 1.9.15, and possibly other versions, allow remote attackers to execute arbitrary code via 1 the expandmacro function, and possibly 2 Environments and 3 TranslateCommand...

A page containing the rss-macro is not displayed if the requested rss-feed is "down"

A page containing the rss-feed macro is not shown if the requested rss-feed is "down" there's no response sent to the browser. It would certainly be better if the page could be displayed anyway; perhaps with a message stating that the feed contents can't be fetched...

A page containing the rss-macro is not displayed if the requested rss-feed is "down"

A page containing the rss-feed macro is not shown if the requested rss-feed is "down" there's no response sent to the browser. It would certainly be better if the page could be displayed anyway; perhaps with a message stating that the feed contents can't be fetched...

GlobalScape - CuteFTP macros '.mcr' Local File Write

Application: GlobalSCAPE CuteFTP V6.0 http://www.globalscape.com/ Risk: Medium / e-mail: [email protected] web: http://www.prohack.net / --The bug: Atacker can create a crafted CuteFTP macro .mcr, and when its loaded in the target computer, it can download the Arbitrary file into the target user...

GlobalSCAPE - CuteFTP macros (*.mcr) Local Vulnerability

No description provided by source. Application: GlobalSCAPE CuteFTP V6.0 http://www.globalscape.com/ Risk: Medium / e-mail: [email protected] web: http://www.prohack.net / --The bug: Atacker can create a crafted CuteFTP macro .mcr, and when its loaded in the target computer, it can download the...

CVE-2002-1200: Improper Restriction of Operations within the Bounds of a Memory Buffer

Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when using template filenames or output, does not properly track the size of a buffer when constant characters are encountered during macro expansion, which allows remote attackers to cause a denial of service and possibly execute...

LibPNG <= 1.2.5 png_jmpbuf() Local Buffer Overflow Exploit

Exploit for linux platform in category local exploits ========================================================== LibPNG include include "png.h" / The pngjmpbuf macro, used in error handling, became available in libpng version 1.0.6. If you want to be able to run your code with older versions of...

LibPNG 1.2.5 - 'png_jmpbuf()' Local Buffer Overflow

include include include "png.h" / The pngjmpbuf macro, used in error handling, became available in libpng version 1.0.6. If you want to be able to run your code with older versions of libpng, you must define the macro yourself but only if it is not already defined by libpng!. / ifndef pngjmpbuf...

CVE-2003-0820

Microsoft Word 97, 98J, 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not properly check the length of the "Macro names" data value, which could allow remote attackers to execute arbitrary code via a buffer overflow attack...