9936 matches found
CVE-2004-0143
Multiple vulnerabilities in Nokia 6310i Mobile phones allow remote attackers to cause a denial of service reset via malformed Bluetooth OBject EXchange OBEX messages, probably triggering buffer overflows...
CVE-2004-0006
Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and possibly execute arbitrary code via 1 cookies in a Yahoo web connection, 2 a long name parameter in the Yahoo login web page, 3 a long value parameter in the...
Multiple WFTPD bugs
Buffer overflows, DoS conditions...
uudeview buffer overflows
The authors of UUDeview report repairing two buffer overflows in their software...
[SECURITY] [DSA 451-1] New xboing packages fix buffer overflows
-------------------------------------------------------------------------- Debian Security Advisory DSA 451-1 [email protected] http://www.debian.org/security/ Matt Zimmerman February 27th, 2004 http://www.debian.org/security/faq -...
DSA-451 xboing - buffer overflows
Bulletin has no description...
Multiple Windows ASN.1 bugs
Heap corruptions, heap buffer overflows open possibilities for attack via different protocols and applications...
CVE-2003-0441
Multiple buffer overflows in Orville Write orville-write 2.53 and earlier allow local users to gain privileges...
CVE-2003-0441
Removed by vendor...
metamail format string bugs and buffer overflows
metamail format string bugs and buffer overflows PROGRAM: metamail VENDOR: Bell Communications Research, Inc. Bellcore DOWNLOAD URLs: ftp://thumper.bellcore.com/pub/nsb/ http://ftp.funet.fi/pub/unix/mail/metamail/ VULNERABLE VERSIONS: 2.2, 2.4, 2.5, 2.6, 2.7, possibly others IMMUNE VERSIONS: 2.7...
ASN.1 Multiple Integer Overflows (SMTP check)
The remote Windows host has an ASN.1 library with multiple integer overflow vulnerabilities. These issues could lead to a heap-based buffer overflow. A remote attacker could exploit these issues to execute arbitrary code. This particular check sent a malformed SMTP authorization packet and...
[slackware-security] metamail security update (SSA:2004-049-02)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 slackware-security metamail security update SSA:2004-049-02 Metamail is a set of utilities for processing MIME mail. New metamail packages are available for Slackware 8.1, 9.0, 9.1, and -current. These fix two format string bugs and two buffer overflo...
metamail format string bugs and buffer overflows
Ulf Härnhammar reported four bugs in metamail: two are format string bugs and two are buffer overflows. The bugs are in SaveSquirrelFile, PrintHeader, and ShareThisHeader. These vulnerabilities could be triggered by a maliciously formatted email message if metamail' or splitmail' is used to proce...
CVE-2004-0143
CVE-2004-0143 affects Nokia 6310(i) mobile phones. The issue arises in the handling of Bluetooth OBEX messages, with the description indicating a likely buffer overflow that can be exploited to cause a remote denial of service (reset). The available sources (NVD/CVE record) state multiple vulnera...
Important: Red Hat Security Advisory: XFree86 security update
Updated XFree86 packages that fix a privilege escalation vulnerability are now available. Update 16 February 2004 Erratum filelist has been modified for x8664 and s390x only so that the correct multi-lib packages are available. XFree86 is an implementation of the X Window System, providing the co...
Important: Red Hat Security Advisory: XFree86 security update
Updated XFree86 packages that fix a privilege escalation vulnerability are now available. XFree86 is an implementation of the X Window System, providing the core graphical user interface and video drivers. iDefense discovered two buffer overflows in the parsing of the 'font.alias' file. A local...
CVE-2003-0818
Multiple integer overflows exist in the Microsoft ASN.1 library (MSASN1.DLL ), affecting Windows NT 4.0, 2000, and XP . These vulnerabilities are present in components such as LSASS.EXE and CRYPT32.DLL . A remote attacker can execute arbitrary code by sending ASN.1 BER encodings with very large l...
EEYE: Microsoft ASN.1 Library Bit String Heap Corruption
Microsoft ASN.1 Library Bit String Heap Corruption Release Date: February 10, 2004 Date Reported: September 25, 2003 Severity: High Remote Code Execution Systems Affected: Microsoft Windows NT 4.0 Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Description: eEye Digital...
Buffer overflows in XFree86 servers
A number of buffer overflows were recently discovered in XFree86, prompted by initial discoveries by iDEFENSE. These buffer overflows are present in the font alias handling. An attacker with authenticated access to a running X server may exploit these vulnerabilities to obtain root privileges on...
CVE-2004-0006
Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and possibly execute arbitrary code via 1 cookies in a Yahoo web connection, 2 a long name parameter in the Yahoo login web page, 3 a long value parameter in the...