Mandrake Linux Security Advisory : ethereal (MDKSA-2003:070)

A number of string handling bugs were found in the packet dissectors in ethereal that can be exploited using specially crafted packets to cause ethereal to consume excessive amounts of memory, crash, or even execute arbitrary code. These vulnerabilities have been fixed upsteam in ethereal 0.9.13...

sysklogd update

New sysklogd packages are available for Slackware 8.1, 9.0, 9.1, and -current to fix a security issue where a user could cause syslogd to crash. Thanks to Steve Grubb who researched the issue. Here are the details from the Slackware 9.1 ChangeLog: Sun May 2 17:16:41 PDT 2004...

[Full-Disclosure] Indigoperl Perledit 1.08

re: http://lists.insecure.org/lists/bugtraq/2003/Jun/0189.html still has unresolved issues with the "new" version 1.08 of Indigoperl's Perledit perledit binds to 0.0.0.0:1956 exploit c: telnet perledithost 1956 READY terminate telnet The instruction at "0x00405430" referenced memory at...

[SECURITY] [DSA-324-1] New ethereal packages fix multiple vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 324-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 18th, 2003 http://www.debian.org/security/faq -...

CVE-2002-1765

Evolution 1.0.3 and 1.0.4 allows remote attackers to cause a denial of service memory consumption and crash via an email with a malformed MIME header...

TransSoft Broker FTP Server 3.0 x4.0 - User Name Buffer Overflow

TransSoft Broker FTP Server 3.0 x4.0 - User Name Buffer Overflow source: https://www.securityfocus.com/bid/783/info If an unusually long user name is passed to the Broker FTP server software, the program will crash. If the program is running as a service, the service will consume all available...