lantronixRoot.txt

/ $ An open security advisory 11 - Lantronix SCS Local Root Exploits 1: Bug Researcher: c0ntex - c0ntexbatgmail.com || [email protected] 2: Bug Released: August 05 2005 3: Bug Impact Rate: Hi 4: Bug Scope Rate: Local $ This advisory and/or proof of concept code must not be used for...

CVE-2005-2472

Multiple buffer overflows in BusinessMail 4.60.00 allow remote attackers to cause a denial of service application crash via a long string to SMTP 1 HELO or 2 MAIL FROM commands...

CVE-2002-2120

Multiple buffer overflows in QNX RTOS 4.25 may allow attackers to execute arbitrary code via long filename arguments to 1 Watcom or 2 int10...

CVE-2005-2472

Multiple buffer overflows in BusinessMail 4.60.00 allow remote attackers to cause a denial of service application crash via a long string to SMTP 1 HELO or 2 MAIL FROM commands...

CVE-2005-2450

Multiple integer overflows in the 1 TNEF, 2 CHM, or 3 FSG file format processors in libclamav for Clam AntiVirus ClamAV 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message...

CVE-2005-2450

CVE-2005-2450 affects ClamAV up to version 0.86.1, with multiple integer overflows in the TNEF, CHM, and FSG file format processors within libclamav. The vulnerability allows a remote attacker to gain privileges by sending a crafted e-mail message, as stated by multiple advisories. The dependency...

CVE-2005-2450

Multiple integer overflows in the 1 TNEF, 2 CHM, or 3 FSG file format processors in libclamav for Clam AntiVirus ClamAV 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message...

BusinessMail SMTP < 4.7 Multiple Command Remote Overflows

Binary data 3155.prm...

FreeBSD : jabberd -- 3 buffer overflows (55041d37-ff62-11d9-a9a5-000ae4641456)

There are 3 buffer overflows in jid.c that are triggered during parsing of JID strings when components user, host or resource are too long. - jid.c, line 103: overflow in str' buffer through strcpy when 'user' part is too long. - jid.c, line 115: overflow in str' buffer through strcpy when 'host'...

FreeBSD : clamav -- multiple remote buffer overflows (1db7ecf5-fd24-11d9-b4d6-0007e900f87b)

An Secunia Advisory reports : Neel Mehta and Alex Wheeler have reported some vulnerabilities in Clam AntiVirus, which can be exploited by malicious people to cause a DoS Denial of Service or compromise a vulnerable system. - Two integer overflow errors in 'libclamav/tnef.c' when processing TNEF...

Debian DSA-767-1 : ekg - integer overflows

Marcin Slusarz discovered two integer overflow vulnerabilities in libgadu, a library provided and used by ekg, a console Gadu Gadu client, an instant messaging program, that could lead to the execution of arbitrary code. The library is also used by other packages such as kopete, which should be...

GLSA-200507-25 : Clam AntiVirus: Integer overflows

The remote host is affected by the vulnerability described in GLSA-200507-25 Clam AntiVirus: Integer overflows Neel Mehta and Alex Wheeler discovered that Clam AntiVirus is vulnerable to integer overflows when handling the TNEF, CHM and FSG file formats. Impact : By sending a specially crafted fi...

CVE-2005-2387

Multiple stack-based buffer overflows in GoodTech SMTP server 5.16 allow remote attackers to execute arbitrary code via 1 a RCPT TO command with a long DNS name, or 2 a large number of RCPT TO commands with a long e-mail name arugment in the last command...

CVE-2005-1852

Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packages, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an incoming message...

CVE-2005-1852

Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packages, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an incoming message...

CVE-2005-1852

Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packages, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an incoming message...

Clam AntiVirus: Integer overflows

Background Clam AntiVirus is a GPL anti-virus toolkit, designed for integration with mail servers to perform attachment scanning. Clam AntiVirus also provides a command line scanner and a tool for fetching updates of the virus database. Description Neel Mehta and Alex Wheeler discovered that Clam...

ClamAV < 0.86.2 Content-parsing Multiple Overflows (deprecated)

Binary data 3108.prm...

Multiple ClamAV antivirus integer overflows

Integer overflows on multiple file formats TNEF, CHM, FSG parsing lead to heap corruption...

security flaw

Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packages, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an incoming message...