Amavis 0.1.6 - Header Parsing Mail Relaying

source: https://www.securityfocus.com/bid/7306/info It has been reported that some versions of Amavis-ng do not properly interact with Postfix. Because of this, an attacker may be able to circumvent relay restrictions. telnet somemx.domain.tld 25 220 somemx.example.com ESMTP Postfix helo amavis-n...

CVE-2002-1386

Buffer overflow in traceroute-nanog aka traceroute-ng may allow local users to execute arbitrary code via a long hostname argument...

CVE-2002-1387

The spray mode in traceroute-nanog aka traceroute-ng may allow local users to overwrite arbitrary memory locations via an array index overflow using the nprobes number of probes argument...

CVE-2002-1386

Buffer overflow in traceroute-nanog aka traceroute-ng may allow local users to execute arbitrary code via a long hostname argument...

CVE-2002-1387

The spray mode in traceroute-nanog aka traceroute-ng may allow local users to overwrite arbitrary memory locations via an array index overflow using the nprobes number of probes argument...

CVE-2002-1386

CVE-2002-1386 affects traceroute-nanog (aka traceroute-ng). The vulnerability is a buffer overflow that could allow local users to execute arbitrary code via a long hostname argument. Debian security advisories (DSA-254-1) document this issue and provide fixed packages; affected releases needed u...

CVE-2002-1386: Undefined Security Weakness

Buffer overflow in traceroute-nanog aka traceroute-ng may allow local users to execute arbitrary code via a long hostname argument...

syslog-ng buffer overflow

Buffer overflow in parsing $HOST variable in configuration file...

[ESA-20021029-028] syslog-ng: buffer overflow in macro handling code (UPDATED)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 +------------------------------------------------------------------------+ | EnGarde Secure Linux Security Advisory October 29, 2002 | | http://www.engardelinux.org/ ESA-20021029-028 | | | | Package: syslog-ng | | Summary: buffer overflow in macro...

CVE-2002-1200

Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when using template filenames or output, does not properly track the size of a buffer when constant characters are encountered during macro expansion, which allows remote attackers to cause a denial of service and possibly execute...

CVE-2002-1200

Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when using template filenames or output, does not properly track the size of a buffer when constant characters are encountered during macro expansion, which allows remote attackers to cause a denial of service and possibly execute...

DEBIAN-CVE-2002-1200

Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when using template filenames or output, does not properly track the size of a buffer when constant characters are encountered during macro expansion, which allows remote attackers to cause a denial of service and possibly execute...

[SECURITY] [DSA 175-1] New syslog-ng packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 175-1 [email protected] http://www.debian.org/security/ Martin Schulze October 15th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 175-1] New syslog-ng packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 175-1 [email protected] http://www.debian.org/security/ Martin Schulze October 15th, 2002 http://www.debian.org/security/faq -...

DSA-175 syslog-ng - buffer overflow

Bulletin has no description...

syslog-ng buffer overflow

---------------------------------------------------------------------------- PACKAGE : syslog-ng VERSION : -1.4.15 stable and -1.5.20 development SUMMARY : buffer overflow TYPE : remote exploit VULNERABLE: : exploitable not in default configuration ZORP-OS SPECIFIC : No ZSA-AUTHOR : Balazs...

CVE-2000-1165

Balabit syslog-ng is affected by CVE-2000-1165 due to a parsing error in messages that lack a closing > in the priority specifier, allowing remote attackers to cause an application crash (DoS). The available records identify the affected software as Balabit syslog-ng and describe the issue as ...

CVE-2000-1165: Undefined Security Weakness

Balabit syslog-ng allows remote attackers to cause a denial of service application crash via a malformed log message that does not have a closing in the priority specifier...

FreeBSD-SA-01:02.syslog-ng

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:02 Security Advisory FreeBSD, Inc. Topic: syslog-ng remote denial-of-service Category: ports Module: syslog-ng Announced: 2001-01-15 Credits: Balazs Scheidler Affects:...

DoS possibility in syslog-ng

BalaBit security advisory Advisory ID: BB-2000/01 Package: syslog-ng Versions affected: versions prior to and including 1.4.8 Problem type: remote DoS attack Date: 2000-11-22 1 Background syslog-ng is a portable syslog implementation. Its highlights include regexp based log selection, TCP transpo...