BSD-derived ftpd replydirname() in ftpd.c contains one-byte overflow

Overview There is a off-by-one vulnerability in several BSD-derived ftpd servers. Description The ftp server in several BSD distributions contains a defect which allows one byte of the program memory allocated within a stack frame to be overwritten with a NUL byte '\0'. The byte in question is...

unsetenv.txt

o unsetenv off-by-one error: The unsetenv function in glibc 2.1.1 suffers from a problem whereby when running through the environment variables, if the name of the variable being unset is present twice consecutively, the second is not destroyed. unsetenv is sometimes used by programs that depend ...

PT-1999-1794 · Ncftp · Ncftpd

Name of the Vulnerable Software and Affected Versions: NcFTPd versions prior to 2.4.1 Description: The issue is caused by an off-by-one error in the NcFTPd FTP server, allowing a remote attacker to cause a denial of service crash via a long PORT command. Recommendations: For versions prior to...

CVE-2023-52071

The CVE-2023-52071 entry is tied to curl/libcurl. The IBM bulletin notes a stack-based buffer overflow in tool_cb_wrt within libcurl, caused by improper bounds checking, which could let a remote attacker overflow a buffer and execute code or cause a denial of service. Affected IBM MaaS360 compone...

PT-2001-2681 · Red Hat +2 · Nfs-Utils +7

Name of the Vulnerable Software and Affected Versions: Debian GNU/Linux kernel-image-2.2.19-amiga version 2.2.19 Debian GNU/Linux kernel-image-2.2.19-atari version 2.2.19 Debian GNU/Linux kernel-image-2.2.19-bvme6000 version 2.2.19 Debian GNU/Linux kernel-image-2.2.19-chrp version 2.2.19 Debian...