CVE-2001-1391

CVE-2001-1391 is an off-by-one vulnerability in the CPIA driver of the Linux kernel prior to 2.2.19 that allows a local user to write into kernel memory. The issue is documented in multiple advisories (Mandrake MDKSA-2001:037, Debian DSA-047-1) and is described as a problem in the CPIA driver’s b...

CVE-2002-0844

CVE-2002-0844 describes an off-by-one overflow in the CVS PreservePermissions code path within rcs.c for CVSD before 1.11.2, enabling local users to execute arbitrary code. Affected software is CVSD CVS prior to version 1.11.2; remediation is to upgrade to 1.11.2 or later (as indicated by multipl...

NSD packet.c Off-By-One Buffer Overflow

Binary data 5040.prm...

Apache mod_ssl < 2.8.10 Off-by-one Overflow

Binary data 1512.prm...

SUSE-SA:2003:031: nfs-utils

The remote host is missing the patch for the advisory SUSE-SA:2003:031 nfs-utils. The nfs-utils package contains various programs to offer and manage certain RPC services such as the rpc.mountd. iSEC Security Research has reported an off-by-one bug in the xlog function used by the rpc.mountd. It ...

Fedora Core 1 : kernel-2.4.22-1.2129.nptl (2003-026)

The kernel shipped with Fedora Core 1 was vulnerable to a bug in the error return on a concurrent fork with threaded exit which could be exploited by a user level program to crash the kernel. In addition to this bug fix, the changelog below details various other non-security fixes that have been...

CVE-2004-0342

WFTPD Pro Server 3.21 Release 1, with the XeroxDocutech option enabled, allows local users to cause a denial of service crash via a 1 MKD or 2 XMKD command that causes an absolute path of 260 characters to be used, which overwrites a cookie with a null character, possibly due to an off-by-one err...

ModSecurity for Apache 2.x remote off-by-one overflow

When the directive "SecFilterScanPost" is enabled, the Apache 2.x version of ModSecurity is vulnerable to an off-by-one overflow...

Low: Red Hat Security Advisory: cvs security update

Updated cvs packages closing a vulnerability that could allow cvs to attempt to create files and directories in the root file system are now available. CVS is a version control system frequently used to manage source code repositories. A flaw was found in versions of CVS prior to 1.11.10 where a...

security flaw

Off-by-one overflow in the CVS PreservePermissions of rcs.c for CVSD before 1.11.2 allows local users to execute arbitrary code...

Switch Off Multiple Vulnerabilities

Switch Off Multiple Vulnerabilities Credit: Author : Peter Winter-Smith Software: Packages : Switch Off Version : 2.3 and prior Vendor : YaSoft Vendor Url : http://yasoft.km.ru/eng/switchoff/ Vulnerability: Bug Type : Denial of Service; Stack-based Buffer Overflow Severity : Less Critical 1...

YaSoft Switch Off 2.3 - Large Packet Remote Denial of Service

YaSoft Switch Off 2.3 - Large Packet Remote Denial of Service source: https://www.securityfocus.com/bid/9339/info A problem has been identified in the YaSoft Switch Off software package when handling large packets via the service management port 8000/TCP. This may make it possible for a remote us...

YaSoft Switch Off 2.3 - swnet.dll Remote Buffer Overflow

YaSoft Switch Off 2.3 - swnet.dll Remote Buffer Overflow // source: https://www.securityfocus.com/bid/9340/info A vulnerability has been identified in the YaSoft Switch Off software package when handling message requests. The buffer overrun condition exists in the 'swnet.dll' module of the softwa...

YaSoft Switch Off 2.3 - Large Packet Remote Denial of Service

source: https://www.securityfocus.com/bid/9339/info A problem has been identified in the YaSoft Switch Off software package when handling large packets via the service management port 8000/TCP. This may make it possible for a remote user to deny service to legitimate users of the service. perl -e...

YaSoft Switch Off 2.3 - 'swnet.dll' Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/9340/info A vulnerability has been identified in the YaSoft Switch Off software package when handling message requests. The buffer overrun condition exists in the 'swnet.dll' module of the software due to insufficient bounds checking performed by the...

Bug in libXcursor , is it exploitable?

INTRO: ------------------------------------------------------------------ off-by-one bug in libXcursor that shows up when $HOME does not start with a '/'. THE QUESTION: ------------------------------------------------------------------ Could this bug compromise a system? In what cases? TEST:...

exim buffer overflow

Buffer overflow with static string can be exploited as off-by-one...

CVE-2003-0625

Off-by-one error in certain versions of xfstt allows remote attackers to read potentially sensitive memory via a malformed client request in the connection handshake, which leaks the memory in the server's response...

CVE-2003-0466

Off-by-one error in the fbrealpath function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow, including 1 STOR, 2 RETR,...

DEBIAN-CVE-2003-0625

Off-by-one error in certain versions of xfstt allows remote attackers to read potentially sensitive memory via a malformed client request in the connection handshake, which leaks the memory in the server's response...