CVE-2001-1185

Some AIO operations in FreeBSD 4.4 may be delayed until after a call to execve, which could allow a local user to overwrite memory of the new process and gain privileges...

CVE-2001-1185: Undefined Security Weakness

Some AIO operations in FreeBSD 4.4 may be delayed until after a call to execve, which could allow a local user to overwrite memory of the new process and gain privileges...

Lumigent Log Explorer 3.0.1 - XP_LogAttach_SetPort Buffer Overflow

source: https://www.securityfocus.com/bid/5017/info A buffer overflow vulnerability in xplogattach.dll has been reported for Lumigent Log Explorer. Specifically, this affects the xplogattachsetport stored procedure. If this condition is successfully exploited, it is possible for locations in memo...

SLRNPull 0.9.6 - Spool Directory Command Line Parameter Buffer Overflow

source: https://www.securityfocus.com/bid/4569/info N is a freely available, open source news reading utility. It is developed and maintained by the SLRN project, and designed for use on various operating systems. This problem affects the UNIX and Linux implementation. Due to a boundary condition...

Microsoft Internet Information Server (IIS) 4.0, 5.0, and 5.1 buffer overflow in chunked encoding transfer mechanism for ASP

Overview A buffer overflow vulnerability in IIS 4.0, 5.0, and 5.1 could allow an intruder to execute arbitrary code on an IIS server with the privileges of the ASP ISAPI extension. Description Chunked encoding is a means to transfer variable-sized units of data called chunks from a web client to ...

CVE-2001-1009

Fetchmail aka fetchmail-ssl before 5.8.17 allows a remote malicious 1 IMAP server or 2 POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request...

CVE-2001-1009

CVE-2001-1009 affects fetchmail (fetchmail-ssl) prior to 5.8.17. Multiple OpenVAS/DSA/Nessus entries describe a memory corruption in the IMAP and POP3 code where unverified input and missing bounds checking can allow a remote attacker—by controlling the server the client connects to—to cause writ...

CVE-2001-1009: Undefined Security Weakness

Fetchmail aka fetchmail-ssl before 5.8.17 allows a remote malicious 1 IMAP server or 2 POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request...

Проблема с асинхронным вводом/выводом в FreeBSD (privelege escalation)

Результат отложенной процедуры после exec может переписать память suid-процесса...

AIO vulnerability

------------------------------------------------------------------------------ Soniq Security Advisory David Rufino [email protected] Dec 9, 2001 Race Condition in FreeBSD AIO implementation http://elysium.soniq.net/dr/tao/tao.html...

FreeBSD 4.4 - AIO Library Cross Process Memory Write

FreeBSD 4.4 - AIO Library Cross Process Memory Write // source: https://www.securityfocus.com/bid/3661/info aio.h is a library implementing the POSIX standard for asynchronous I/O. Support for AIO may be enabled in FreeBSD by compiling the kernel with the VFSAIO option. This option is not enabled...

Много дырок в ssh (ssh1, ssh2, openssh)

Проблемы с перезаписью памяти, проблемы с обменом ключей, позволяющие перехватить сеансовый ключ...

[NetGuard Security] NSI Rwhoisd another Remote Format String Vulnerability

NSI Rwhoisd another Remote Format String Vulnerability Release infomation ------------------ Release Date: 2001-11-22 Author: By NetGuard Security Team alert7 [email protected] Homepage: http://www.netguard.com.cn/ Description ----------- Rwhoisd is a publicly available RWHOIS server daemon...

NSI RWhoisd contains format string vulnerability in print_error()

Overview A remotely exploitable format string vulnerability exists in the Referral Whois server daemon RWhoisd. Description As the Internet has grown, the centralized whois database was not able to scale. In order to deal with scaling the whois system, Referral Whois was developed. Referral Whois...

CVE-2001-1009

Fetchmail aka fetchmail-ssl before 5.8.17 allows a remote malicious 1 IMAP server or 2 POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request...

Fetchmail 5.x - IMAP Reply Signed Integer Index

// source: https://www.securityfocus.com/bid/3166/info Fetchmail is a unix utility for downloading email from mail servers via POP3 and IMAP. Fetchmail contains a vulnerability that may allow for remote attackers to gain access to client systems. The vulnerability has to do with the use of a...

Fetchmail 5.x - POP3 Reply Signed Integer Index

Fetchmail 5.x - POP3 Reply Signed Integer Index // source: https://www.securityfocus.com/bid/3164/info Fetchmail is a unix utility for downloading email from mail servers via POP3. Fetchmail contains a vulnerability that may allow for remote attackers to gain access to client systems. The...

Fetchmail 5.x - IMAP Reply Signed Integer Index

Fetchmail 5.x - IMAP Reply Signed Integer Index // source: https://www.securityfocus.com/bid/3166/info Fetchmail is a unix utility for downloading email from mail servers via POP3 and IMAP. Fetchmail contains a vulnerability that may allow for remote attackers to gain access to client systems. Th...

Fetchmail 5.x - POP3 Reply Signed Integer Index

// source: https://www.securityfocus.com/bid/3164/info Fetchmail is a unix utility for downloading email from mail servers via POP3. Fetchmail contains a vulnerability that may allow for remote attackers to gain access to client systems. The vulnerability has to do with the use of a remotely...

CFINGERD remote vulnerability

Hi Following the recent habits, I break the advisory into 4 parts: OVERVIEW: --------- There is a critical bug in cfingerd daemon = 1.4.3, a classic format bug that makes possible to acquire full control over the remote machine if it runs the cfingerd program, the configurable and secure finger...