7391 matches found
CVE-1999-1568: Off-by-one Error
Off-by-one error in NcFTPd FTP server before 2.4.1 allows a remote attacker to cause a denial of service crash via a long PORT command...
CVE-2002-0844: Off-by-one Error
Off-by-one overflow in the CVS PreservePermissions of rcs.c for CVSD before 1.11.2 allows local users to execute arbitrary code...
NSD packet.c Off-By-One Buffer Overflow
Binary data 5040.prm...
Apache mod_ssl < 2.8.10 Off-by-one Overflow
Binary data 1512.prm...
SUSE-SA:2003:031: nfs-utils
The remote host is missing the patch for the advisory SUSE-SA:2003:031 nfs-utils. The nfs-utils package contains various programs to offer and manage certain RPC services such as the rpc.mountd. iSEC Security Research has reported an off-by-one bug in the xlog function used by the rpc.mountd. It ...
Fedora Core 1 : kernel-2.4.22-1.2129.nptl (2003-026)
The kernel shipped with Fedora Core 1 was vulnerable to a bug in the error return on a concurrent fork with threaded exit which could be exploited by a user level program to crash the kernel. In addition to this bug fix, the changelog below details various other non-security fixes that have been...
CVE-2004-0666: Undefined Security Weakness
Off-by-one error in the POP3readmsg function in popclient 3.0b6 allows remote attackers to cause a denial of service application crash via an e-mail message with a certain line length, which leads to a buffer overflow...
CVE-2004-0342
WFTPD Pro Server 3.21 Release 1, with the XeroxDocutech option enabled, allows local users to cause a denial of service crash via a 1 MKD or 2 XMKD command that causes an absolute path of 260 characters to be used, which overwrites a cookie with a null character, possibly due to an off-by-one err...
CVE-2004-0342: Off-by-one Error
WFTPD Pro Server 3.21 Release 1, with the XeroxDocutech option enabled, allows local users to cause a denial of service crash via a 1 MKD or 2 XMKD command that causes an absolute path of 260 characters to be used, which overwrites a cookie with a null character, possibly due to an off-by-one err...
CVE-2004-0346: Off-by-one Error
Off-by-one buffer overflow in xlateasciiwrite in ProFTPD 1.2.7 through 1.2.9rc2p allows local users to gain privileges via a 1024 byte RETR command...
ModSecurity for Apache 2.x remote off-by-one overflow
When the directive "SecFilterScanPost" is enabled, the Apache 2.x version of ModSecurity is vulnerable to an off-by-one overflow...
security flaw
Off-by-one overflow in the CVS PreservePermissions of rcs.c for CVSD before 1.11.2 allows local users to execute arbitrary code...
Low: Red Hat Security Advisory: cvs security update
Updated cvs packages closing a vulnerability that could allow cvs to attempt to create files and directories in the root file system are now available. CVS is a version control system frequently used to manage source code repositories. A flaw was found in versions of CVS prior to 1.11.10 where a...
Switch Off Multiple Vulnerabilities
Switch Off Multiple Vulnerabilities Credit: Author : Peter Winter-Smith Software: Packages : Switch Off Version : 2.3 and prior Vendor : YaSoft Vendor Url : http://yasoft.km.ru/eng/switchoff/ Vulnerability: Bug Type : Denial of Service; Stack-based Buffer Overflow Severity : Less Critical 1...
YaSoft Switch Off 2.3 - swnet.dll Remote Buffer Overflow
YaSoft Switch Off 2.3 - swnet.dll Remote Buffer Overflow // source: https://www.securityfocus.com/bid/9340/info A vulnerability has been identified in the YaSoft Switch Off software package when handling message requests. The buffer overrun condition exists in the 'swnet.dll' module of the softwa...
YaSoft Switch Off 2.3 - Large Packet Remote Denial of Service
YaSoft Switch Off 2.3 - Large Packet Remote Denial of Service source: https://www.securityfocus.com/bid/9339/info A problem has been identified in the YaSoft Switch Off software package when handling large packets via the service management port 8000/TCP. This may make it possible for a remote us...
YaSoft Switch Off 2.3 - 'swnet.dll' Remote Buffer Overflow
// source: https://www.securityfocus.com/bid/9340/info A vulnerability has been identified in the YaSoft Switch Off software package when handling message requests. The buffer overrun condition exists in the 'swnet.dll' module of the software due to insufficient bounds checking performed by the...
YaSoft Switch Off 2.3 - Large Packet Remote Denial of Service
source: https://www.securityfocus.com/bid/9339/info A problem has been identified in the YaSoft Switch Off software package when handling large packets via the service management port 8000/TCP. This may make it possible for a remote user to deny service to legitimate users of the service. perl -e...
Bug in libXcursor , is it exploitable?
INTRO: ------------------------------------------------------------------ off-by-one bug in libXcursor that shows up when $HOME does not start with a '/'. THE QUESTION: ------------------------------------------------------------------ Could this bug compromise a system? In what cases? TEST:...