Lucene search
+L

1257 matches found

Check Point Advisories
Check Point Advisories
added 2008/10/24 12:0 a.m.47 views

Update Protection against mIRC PRIVMSG Message Processing Buffer Overflow

A buffer overflow vulnerability was reported in mIRC, a popular IRC client for Microsoft Windows. Internet Relay Chat IRC is a form of instant messaging over the Internet, mainly designed for group communication in discussion forums. Remote attackers could exploit this vulnerability by tricking a...

9.3CVSS7AI score0.38737EPSS
SaveExploits10
Tenable Nessus
Tenable Nessus
added 2008/10/21 12:0 a.m.333 views

RealVNC VNC Viewer < 4.1.3/4.4.3 Arbitrary Command Execution

The version of RealVNC's VNC Viewer installed on the remote Windows host is affected by multiple issues : - An error in the 'CMsgReader::readRect' function in 'common/rfb/CMsgReader.cxx' that comes into play when processing encoding types, may allow arbitrary code execution on the remote system. ...

10CVSS6.3AI score0.04052EPSS
SaveExploits0References5
Saint
Saint
added 2008/03/13 12:0 a.m.38 views

mIRC PRIVMSG hostname buffer overflow

Added: 03/13/2008 CVE: CVE-2008-4449 BID: 31552 OSVDB: 48752 Background mIRC is an Internet Relay Chat IRC client. Problem A buffer overflow in mIRC allows command execution when a user connects to a malicious IRC server which sends a PRIVMSG message with a long, specially crafted hostname...

9.3CVSS6.9AI score0.38737EPSS
SaveExploits10
Check Point Advisories
Check Point Advisories
added 2008/01/31 12:0 a.m.11 views

Microsoft Windows DHCP Packets Handling Denial of Service (MS08-004; CVE-2008-0084)

The Dynamic Host Configuration Protocol DHCP provides central management of IP addresses and other details related to the IP configuration used on the network. An attacker can exploit this vulnerability by sending a specially craftedpacket through a malicious DHCP server. This may result in a...

7.8CVSS6AI score0.73599EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.26 views

Debian Security Advisory DSA 1045-1 (openvpn)

The remote host is missing an update to openvpn announced via advisory DSA 1045-1. Hendrik Weimer discovered that OpenVPN, the Virtual Private Network daemon, allows to push environment variables to a client allowing a malicious VPN server to take over connected clients. the old stable distributi...

9CVSS0.3AI score0.03021EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.23 views

Debian Security Advisory DSA 686-1 (gftp)

The remote host is missing an update to gftp announced via advisory DSA 686-1. OpenVAS Vulnerability Test $Id: deb6861.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 686-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

5CVSS0.2AI score0.08912EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.18 views

Debian: Security Advisory (DSA-697-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS9.5AI score0.08635EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.18 views

Debian: Security Advisory (DSA-832-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.2AI score0.10038EPSS
SaveExploits2References3
Metasploit
Metasploit
added 2007/12/18 4:30 a.m.64 views

Apple OS X Software Update Command Execution

This module exploits a feature in the Distribution Packages, which are used in the Apple Software Update mechanism. This feature allows for arbitrary command execution through JavaScript. This exploit provides the malicious update server. Requests must be redirected to this server by other means...

9.3CVSS7.2AI score0.22982EPSS
SaveExploits4
Ubuntu
Ubuntu
added 2007/06/21 11:52 p.m.48 views

USN-475-1: evolution-data-server vulnerability

Philip Van Hoof discovered that the IMAP client in Evolution did not correctly verify the SEQUENCE value. A malicious or spoofed server could exploit this to execute arbitrary code with user privileges...

6.8CVSS5.8AI score0.03122EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2007/02/18 12:0 a.m.17 views

SUSE-SA:2007:005: w3m

The remote host is missing the patch for the advisory SUSE-SA:2007:005 w3m. A format string problem in w3m -dump / -backend mode could be used by a malicious server to crash w3m or execute code. In SUSE Linux 10.1, openSUSE 10.2 and SUSE Linux Enterprise Server and Desktop 10 this problem was not...

9.3CVSS7.6AI score0.04699EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2007/01/11 12:0 a.m.23 views

FreeBSD : mplayer -- buffer overflow in the code for RealMedia RTSP streams. (b2ff68b2-9f29-11db-a4e4-0211d87675b7)

A potential buffer overflow was found in the code used to handle RealMedia RTSP streams. When checking for matching asm rules, the code stores the results in a fixed-size array, but no boundary checks are performed. This may lead to a buffer overflow if the user is tricked into connecting to a...

7.5CVSS5.8AI score0.05346EPSS
SaveExploits1References4
NVD
NVD
added 2007/01/08 8:28 p.m.14 views

CVE-2007-0100

The Perforce client does not restrict the set of files that it overwrites upon receiving a request from the server, which allows remote attackers to overwrite arbitrary files by modifying the client config file on the server, or by operating a malicious server...

10CVSS6.8AI score0.01839EPSS
SaveExploits0References2
Prion
Prion
added 2007/01/08 8:28 p.m.18 views

Design/Logic Flaw

The Perforce client does not restrict the set of files that it overwrites upon receiving a request from the server, which allows remote attackers to overwrite arbitrary files by modifying the client config file on the server, or by operating a malicious server...

10CVSS7.3AI score0.01839EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2007/01/08 8:0 p.m.21 views

CVE-2007-0100

The Perforce client does not restrict the set of files that it overwrites upon receiving a request from the server, which allows remote attackers to overwrite arbitrary files by modifying the client config file on the server, or by operating a malicious server...

6.8AI score0.01839EPSS
SaveExploits0References2
seebug.org
seebug.org
added 2006/12/08 12:0 a.m.95 views

MiMMS媒体流处理远程栈溢出漏洞

MiMMS是一款使用MMS协议下载并保存流媒体的程序。 MiMMS在处理畸形的数据时,远程攻击者可能利用此漏洞在用用户机器上执行任意指令。 MiMMS的getheader和getmediapacket函数在从服务器读取数据时存在栈溢出漏洞。如果用户受骗连接到了恶意的服务器的话,就会触发这个漏洞,导致执行任意代码。 xine xine-lib 1.1.0 xine xine-lib 1.0.1 xine xine-lib 1.0 MiMMS MiMMS 0.0.9 厂商补丁: Gentoo ------ Gentoo已经为此发布了一个安全公告(GLSA-200607-07)以及相应补丁:...

7.2AI score
SaveExploits0
seebug.org
seebug.org
added 2006/11/03 12:0 a.m.69 views

Fetchmail POP3客户端缓冲区溢出漏洞

BUGTRAQ ID: 14349 CVECAN ID: CVE-2005-2335 fetchmail是免费的软件包,可以从远程POP2、POP3、IMAP、ETRN或ODMR服务器检索邮件并将其转发给本地SMTP、LMTP服务器或消息传送代理。 fetchmail的POP3客户端在处理服务器回应时存在缓冲区溢出漏洞,恶意服务器可能利用此漏洞在客户端上执行任意指令。...

5CVSS0.1AI score0.05882EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2006/10/25 12:0 a.m.21 views

GLSA-200610-09 : libmusicbrainz: Multiple buffer overflows

The remote host is affected by the vulnerability described in GLSA-200610-09 libmusicbrainz: Multiple buffer overflows Luigi Auriemma reported a possible buffer overflow in the MBHttp::Download function of lib/http.cpp as well as several possible buffer overflows in lib/rdfparse.c. Impact : A...

7.5CVSS6.5AI score0.14457EPSS
SaveExploits2References2
Gentoo Linux
Gentoo Linux
added 2006/09/06 12:0 a.m.45 views

Streamripper: Multiple remote buffer overflows

Background Streamripper extracts and records individual MP3 file tracks from SHOUTcast streams. Description Ulf Harnhammar, from the Debian Security Audit Project, has found that Streamripper is vulnerable to multiple stack based buffer overflows caused by improper bounds checking when processing...

7.5CVSS7.3AI score0.19771EPSS
SaveExploits2
securityvulns
securityvulns
added 2006/09/04 12:0 a.m.40 views

Multiple tor security vulnerabilities

Maliscious server can cause DoS condition for client or may force client to route traffic to tor network...

2AI score
SaveExploits0References2Affected Software2
Rows per page
Query Builder