359 matches found
qt security update
CentOS Errata and Security Advisory CESA-2007:0721 Updated qt packages that correct an integer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Qt is a software toolkit that simplifies the task of writing and...
CVE-2007-1251
Format string vulnerability in the newwarning function in ntserv/warning.c for Netrek Vanilla Server 2.12.0, when EVENTLOG is enabled, allows remote attackers to cause a denial of service crash or execute arbitrary code via format string specifiers in the message handling...
Kaillera 0.86 - Message Buffer Overflow
// source: https://www.securityfocus.com/bid/18871/info Kaillera is prone to a buffer-overflow vulnerability because it fails to properly bounds-check messages before copying them to an insufficiently sized memory buffer. Successful exploits can allow remote attackers to execute arbitrary machine...
error_log() Safe Mode Bypass PHP 5.1.4 and 4.4.2
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 errorlog Safe Mode Bypass PHP 5.1.4 and 4.4.2 Author: Maksymilian Arciemowicz cXIb8O3 Date: - -Written: 10.6.2006 - -Public: 26.06.2006 from SECURITYREASON.COM CVE-2006-3011 - --- 0.Description --- PHP is an HTML-embedded scripting language. Much of i...
Sendmail < 8.13.7 Multi-part MIME Message Handling DoS
Binary data 3653.prm...
Game-Panel <= 2.1.6 XSS
ORIGIONAL SOURCE: http://notlegal.ws/gamepanel.txt summary software: Game-Panel vendors website: http://game-panel.com versions: = 2.6.1 class: remote status: unpatched exploit: available solution: not available discovered by: sycko risk level: medium description game-panel uses a global variable...
eStara SoftPhone 3.0.1 - SIP SDP Message Handling Format String Denial of Service
eStara SoftPhone 3.0.1 - SIP SDP Message Handling Format String Denial of Service source: https://www.securityfocus.com/bid/16629/info eStara Smartphone is prone to multiple denial-of-service vulnerabilities when processing malformed VOIP headers. Successful exploitation will cause the device to...
eStara SoftPhone 3.0.1 - SIP SDP Message Handling Format String Denial of Service
source: https://www.securityfocus.com/bid/16629/info eStara Smartphone is prone to multiple denial-of-service vulnerabilities when processing malformed VOIP headers. Successful exploitation will cause the device to crash. INVITE sip:[email protected] SIP/2.0 Via: SIP/2.0/UDP...
CVE-2004-0045
Buffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote attackers to execute arbitrary code...
AOL Instant Messenger aim:goaway URI Handler goaway Function Away Message Handling Remote Overflow
Binary data 1274.prm...
Pegasus Mail <= 3.11 Binary Message Handling Remote Overflow
Binary data 1301.prm...
CVE-2004-0045
Buffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote attackers to execute arbitrary code...
[SECURITY] INN: Buffer overflow in control message handling
A buffer overflow has been discovered in a portion of the control message handling code introduced in INN 2.4.0. It is fairly likely that this overflow could be remotely exploited to gain access to the user innd runs as. INN 2.3.x and earlier are not affected. The INN CURRENT tree is affected. So...
Microsoft Windows XP2000 - PostThreadMessage() Arbitrary Process Killing
Microsoft Windows XP2000 - PostThreadMessage Arbitrary Process Killing // source: https://www.securityfocus.com/bid/8747/info A vulnerability has been discovered in the Microsoft Windows operating system. The flaw lies in the way that processes handle messages sent from another process via the...
MS02-071: WM_TIMER Message Handler Privilege Elevation (328310)
The remote version of Windows contains a flaw in the handling of WMTIMER messages for interactive processes that could allow a local user to execute arbitrary code on the remote host with the SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11191;...
askSam 4.0 Web Publisher - Cross-Site Scripting
source: https://www.securityfocus.com/bid/4670/info askSam is a database system. An optional component, askSam Web Publisher versions 1 and 4, is reportedly vulnerable to cross site scripting vulnerability in the asweb.exe or asweb4.exe component. This is due to a failure to strip script and HTML...
Malformed SNMP Message-Handling Vulnerabilities
...
DG/UX 4.20 lpsched - 'Error Message' Local Buffer Overflow
// source: https://www.securityfocus.com/bid/2509/info DGUX is the Data General revision of UNIX. It is designed as a solution for Intel systems produced by Data General. A problem in the handling of error messages by the printer scheduler could allow arbitrary execution of code. By placing a...
InoculateIT AV Option for MS Exchange Server
The scenario is two EX Srvrs, two different organizations and different sites, both have CA's "InoculateIT AV Option for MS Exchange Server". MS IMC the EX SMTP gateway will be used to send messages between the EX Srvrs. Where the Agent fails: 1. If a message is sent from one EX to another using...