91 matches found
DEBIAN-CVE-2013-1988
Multiple integer overflows in X.org libXRes 1.0.6 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the 1 XResQueryClients and 2 XResQueryClientResources functions...
PHP 5.3.7之前版本空指针引用拒绝服务漏洞
Bugtraq ID: 49249 PHP是一款流行的编程语言。 php 5.3.6存在多个空指针应用错误,如果用户更改malloc大小,可导致空指针引用而使应用程序崩溃。 要演示这些缺陷,可使用OpenBSD中默认512MB的默认内存限制。我们可以分配类似510MB的大内存剩余2MB,如果某些字符串超过2MB如4MB,PHP尝试使用malloc/strlen等拷贝这个字符串,malloc就会返回空。之后程序会引发空指针引用或缓冲区溢出。 PHP 5.3.7 厂商解决方案 PHP 5.3.7已经修复此漏洞,建议用户下载使用: http://www.php.net/ 127 ulimit ...
HPUX dtmailpr buffer overflow vulnerability
======================================================= HPUX dtmailpr buffer overflow vulnerability ======================================================= Davide Del Vecchio Adv8 Discovered in: 14/07/2003 Date: 19/11/2003 Tested on HP-UX B.11.00 Description: The dtmailpr program reads a...
HPUX dtprintinfo buffer overflow vulnerability
======================================================= HPUX dtprintinfo buffer overflow vulnerability ======================================================= Davide Del Vecchio Adv7 Discovered in: 14/07/2003 Date: 08/10/2003 Tested on HP-UX B.11.00 Description: The Print Viewer program provides ...
madcr: QnX 4.25 - multiples bof in suid/no suid files
/bin/sample ----------------//------------------------------ cd /bin ls -l sample -rwsrwxr-x 1 root root 20639 Jan 19 1996 sample sample perl -e 'print "A" x 280' Profile based upon 2000 samples/second. //1/bin/sample terminated SIGSEGV at 0005:00000041 1 672 Memory fault sample $perl -e 'print "...
TRU64 /usr/sbin/quot overflow
again ... in light of the non-exec stack talks I am releasing some info I have been sitting on... alpha.snosoft.com uname -a OSF1 alpha.snosoft.com V5.1 732 alpha alpha.snosoft.com id uid=201dotslash gid=15users groups=0system alpha.snosoft.com ls -al /usr/sbin/quot -rwx--s--x 1 bin mem 32832 Aug...
TRU64 /usr/bin/passwd overflow
In light of the recent conversations on the non-executable stack I have decided to release some of the information I have been sitting on. alpha.snosoft.com uname -a OSF1 alpha.snosoft.com V5.1 732 alpha alpha.snosoft.com id uid=201dotslash gid=15users groups=0system alpha.snosoft.com ls -al...
SCO 5.0.6 issues (lpadmin)
====================================================================== Strategic Reconnisiance Team Security AdvisorySRT2001-07 Topic: SCO 5.0.6 issues lpadmin Vendor: SCO Release Date: 03/27/01 ====================================================================== .: Description SCO OpenServer...
SCO 5.0.6 issues (recon)
====================================================================== Strategic Reconnaissance Team Security AdvisorySRT2001-02 Topic: SCO 5.0.6 issues recon Vendor: SCO Release Date: 03/27/01 ====================================================================== .: Description SCO OpenServer...
hp-ux.cu.overflow.txt
======================================================= HPUX cu -l option buffer overflow vulnerability ======================================================= Date: 02/11/2000 Tested on HP-UX B.11.00 $ ls -la which cu -r-sr-xr-x 1 bin 40960 9 avr 1998 /bin/cu Using '-l' with a long option string...
HPUX cu -l option buffer overflow vulnerabilit
======================================================= HPUX cu -l option buffer overflow vulnerability ======================================================= Date: 02/11/2000 Tested on HP-UX B.11.00 $ ls -la which cu -r-sr-xr-x 1 bin 40960 9 avr 1998 /bin/cu Using '-l' with a long option string...