[Full-Disclosure] SRT2003-07-08-1223 - IBM U2 UniVerse uvadm can take root via buffer overflows

Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...

CVE-2003-0561

CVE-2003-0561 concerns IglooFTP PRO 3.8, where multiple buffer overflows could allow a remote attacker to run arbitrary code. The vulnerability is triggered by oversized inputs in FTP banner responses and in specific commands (USER, PASS, ACCT) as well as possibly other commands. The NVD entry as...

gopherd multiple bugs

Multiple buffer overflows...

CVE-2003-0454

CVE-2003-0454 describes multiple buffer overflows in xgalaga (versions 2.0.34 and earlier) that allow a local user to gain privileges by supplying a long HOME environment variable. Debian’s DSA-334 notes the issue and references a security update for xgalaga; related Red Hat and OSV entries confi...

CVE-2003-0454

Multiple buffer overflows in xgalaga 2.0.34 and earlier allow local users to gain privileges via a long HOME environment variable...

CVE-2003-0451

Multiple buffer overflows in xbl before 1.0k allow local users to gain privileges via certain long command line arguments...

CVE-2003-0452

Buffer overflows in osh before 1.7-11 allow local users to execute arbitrary code and bypass shell restrictions via 1 long environment variables or 2 long "file redirections."...

CVE-2003-0452

The CVE-2003-0452 issue affects the Operator Shell (OSH) up to version 1.7-11. A buffer overflow in OSH can be triggered by long environment variables or lengthy file redirections, enabling a local attacker to execute arbitrary code and bypass the shell’s restrictions. Public sources (including D...

Multiple gnuts bugs

Multiple buffer overflows in different components...

Kerio Mail Server multiple bugs

Multiple buffer overflows in WebMail interface. Crossite scripting...

Multiple bugs in TracerouteNG

Buffer overflows, integer array index overflows...

[SECURITY] [DSA-326-1] New orville-write packages fix buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 326-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 19th, 2003 http://www.debian.org/security/faq -...

DSA-326 orville-write - buffer overflows

Bulletin has no description...

CVE-2003-0433

Multiple buffer overflows in gnocatan 0.6.1 and earlier allow attackers to execute arbitrary code...

CVE-2003-0433

Multiple buffer overflows in gnocatan 0.6.1 and earlier allow attackers to execute arbitrary code...

AIX utilities multiple bugs

Buffer overflows in errpt -T option parsing, lsmcode environment parsing. Symbolic link bug in diagrpt...

[SECURITY] [DSA-315-1] New gnocatan packages fix buffer overflows, denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 315-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 11th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-313-1] New ethereal packages fix buffer overflows, integer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 313-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 11th, 2003 http://www.debian.org/security/faq -...

DSA-313 ethereal - buffer overflows, integer overflows

Bulletin has no description...

CVE-2003-0390

Multiple buffer overflows in Options Parsing Tool OPT shared library 3.18 and earlier, when used in setuid programs, may allow local users to execute arbitrary code via long command line options that are fed into macros such as optwarn2, as used in functions such as optatoi...