[SECURITY] [DSA 703-1] New krb5 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 703-1 [email protected] http://www.debian.org/security/ Martin Schulze April 1st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 703-1] New krb5 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 703-1 [email protected] http://www.debian.org/security/ Martin Schulze April 1st, 2005 http://www.debian.org/security/faq -...

CVE-2005-0478

Multiple buffer overflows in TrackerCam 5.12 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via 1 an HTTP request with a long User-Agent header or 2 a long argument to an arbitrary PHP script...

CVE-2002-1643

CVE-2002-1643 affects RealNetworks Helix Universal Server 9.0 (9.0.2.768). The vulnerability consists of multiple buffer overflows that enable remote code execution via: (1) a long Transport field in a SETUP RTSP request, (2) a DESCRIBE RTSP request with a long URL argument, or (3) two simultaneo...

CVE-2002-1643

Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 9.0.2.768 allow remote attackers to execute arbitrary code via 1 a long Transport field in a SETUP RTSP request, 2 a DESCRIBE RTSP request with a long URL argument, or 3 two simultaneous HTTP GET requests with long arguments...

CVE-2002-1641

Oracle Web Cache in Oracle 9i Application Server (9iAS) has multiple buffer overflows that allow remote attackers to execute arbitrary code via unknown vectors. The connected records confirm the affected product and the root cause (buffer overflows) with remote code execution as impact, but do no...

FreeBSD-SA-05:01.telnet

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:01.telnet Security Advisory The FreeBSD Project Topic: telnet client buffer overflows Category: contrib Module: contrib/telnet Announced: 2005-03-28 Credits:...

CVE-2005-0874

Multiple buffer overflows in the 1 AIM, 2 MSN, 3 RSS, and other plug-ins for Trillian 2.0 allow remote web servers to cause a denial of service application crash via a long string in an HTTP 1.1 response header...

CVE-2005-0875

Multiple buffer overflows in the Yahoo plug-in for Trillian 2.0, 3.0, and 3.1 allow remote web servers to cause a denial of service application crash via a long string in an HTTP 1.1 response header...

CVE-2002-1633

Multiple buffer overflows in QNX 4.25 may allow local users to execute arbitrary code via long command line arguments to 1 sample, 2 ex, 3 du, 4 find, 5 lex, 6 mkdir, 7 rm, 8 serserv, 9 tcpserv, 10 termdef, 11 time, 12 unzip, 13 use, 14 wcc, 15 wcc386, 16 wd, 17 wdisasm, 18 which, 19 wlib, 20...

CVE-2002-1604

Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to 1 csh, 2 dtsession, 3 dxsysinfo, 4 imapd, 5 inc, 6 uucp, 7 uux, 8 rdist, or 9 deliver...

CVE-2002-1606

Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain privileges via 1 lpc, 2 lpd, 3 lpq, 4 lpr, or 5 lprm...

CVE-2002-1615

Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to execute arbitrary code via 1 msgchk or 2 .upd..loader...

CVE-2002-1616

Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges via 1 su, 2 chsh, 3 passwd, 4 chfn, 5 dxchpwd, and 6 libc...

CVE-2002-1617

Multiple buffer overflows in HP Tru64 UNIX 5.x allow local users to execute arbitrary code via 1 a long -contextDir argument to dtaction, 2 a long -p argument to dtprintinfo, 3 a long -customization argument to dxterm, or 4 a long DISPLAY environment variable to dtterm...

CVE-2005-0861

Multiple buffer overflows in DeleGate before 8.11.1 may allow attackers to cause a denial of service or execute arbitrary code, possibly due to "overflows on arrays."...

CVE-2005-0861

CVE-2005-0861 affects DeleGate prior to 8.11.1. The issue is multiple buffer overflows in DeleGate likely caused by unsafe string handling (e.g., scanning/copying long strings), enabling either a denial of service or arbitrary code execution under the privileges of the running user. Several conne...

Trillian Multiple HTTP Responses Buffer Overflow Vulnerabilities

The remote host has the Trillian program installed. Trillian is a Peer2Peer client that allows users to chat and share files with other users across the world. The remote version of this software is vulnerable to several buffer overflows when processing malformed responses. An attacker could...

CVE-2005-0838

Multiple buffer overflows in the XSL parser for IceCast 2.20 may allow attackers to cause a denial of service and possibly execute arbitrary code via 1 a long test value in an xsl:when tag, 2 a long test value in an xsl:if tag, or 3 a long select value in an xsl:value-of tag...

CVE-2005-0830

Multiple buffer overflows in Xzabite DYNDNSUpdate 0.6.15 and earlier, including the ipcheck function in dyndnsupdate.c, allow remote attackers who spoof a dyndns.org server to execute arbitrary code via unknown vectors...