CVE-2002-1177

Multiple buffer overflows in Winamp 3.0, when displaying an MP3 in the Media Library window, allows remote attackers to execute arbitrary code via an MP3 file containing a long 1 Artist or 2 Album ID3v2 tag...

CUPS multiple bugs

Integer overflows, symbolic links, unautyhorized access, DoS, переполнения буфера...

CVE-2002-1383

CVE-2002-1383 corresponds to multiple integer overflows in the Common Unix Printing System (CUPS) versions 1.1.14–1.1.17. The issue allows a remote attacker to execute arbitrary code via the CUPSd HTTP interface or via the image handling code in CUPS filters. Connected advisories (e.g., Debian DS...

iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 12.19.02: http://www.idefense.com/advisory/12.19.02.txt Multiple Security Vulnerabilities in Common Unix Printing System CUPS December 19, 2002 I. BACKGROUND Easy Software Products' Common Unix Printing System CUPS is a...

Foundstone Research Labs Advisory - Multiple Exploitable Buffer Overflows in Winamp (fwd)

---------------------------------------------------------------------- Foundstone Research Labs Advisory - FS2002-10 Advisory Name: Multiple Exploitable Buffer Overflows in Winamp Release Date: December 18, 2002 Application: Winamp 3.0 and Winamp 2.81 Platforms: Windows NT/2000/XP Severity: Remot...

CVE-2002-1347

Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via 1 long inputs during user name canonicalization, 2 characters that need to be escaped during LDAP authentication using saslauthd, or 3 an...

Multiple bugs in Macromedia flash plugin

Buffer overflows, local file reading...

Multiple vendors' SSH transport layer protocol implementations contain vulnerabilities in key exchange and initialization

Overview Secure shell SSH transport layer protocol implementations from different vendors contain multiple vulnerabilities in code that handles key exchange and initialization. Both SSH servers and clients are affected. A remote attacker could execute arbitrary code with the privileges of the SSH...

Buffer overflows in fetchmail

Buffer overflows on addresses parsing...

CVE-2002-1347

CVE-2002-1347 describes multiple buffer overflows in Cyrus SASL library versions 2.1.9 and earlier. The flaws allow remote attackers to cause a denial of service and, potentially, arbitrary code execution. Specifically, exploitation paths include (1) long inputs during user name canonicalization,...

CVE-2002-1347

Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via 1 long inputs during user name canonicalization, 2 characters that need to be escaped during LDAP authentication using saslauthd, or 3 an...

Buffer overflows in OpenLDAP2

Few serious buffer overflows...

Multipel bugs in Webster Web Server

Buffer overflows, crossite scripting, directory traversal...

CVE-2002-1279

Multiple buffer overflows in conf.c for Masqmail 0.1.x before 0.1.17, and 0.2.x before 0.2.15, allow local users to gain privileges via certain entries in the configuration file -C option...

CVE-2002-1321

The CVE-2002-1321 entry concerns RealNetworks products RealOne and RealPlayer, where multiple buffer overflows can allow remote code execution. The root causes are: (1) a SMIL file with an excessively long parameter, (2) a long filename in an rtsp:// request (e.g., from a .m3u file), and (3) cert...

BadBlue XSS/Information Disclosure Vulnerabilities

BadBlue is a P2P/Web server offered for Microsoft Windows operating systems by Working Resources. It has a bad security record -- file disclosure, remote administration, denials of service, buffer overflows, directory traversals, and more cross-site scripting flaws than I care to count. We can ad...

RealPlayer/RealOne buffer overflows

Buffer overflows during URL and files processing...

CVE-2002-0029

CVE-2002-0029 concerns buffer overflows in the DNS stub resolver library used by ISC BIND (versions 4.9.2–4.9.10) and in derived libraries such as BSD libc and GNU glibc. The overflow occurs when processing certain DNS server responses that trigger the getnetbyname or getnetbyaddr code paths, all...

Multiple bugs in bind

Multiple vulnerabilities: DoS, buffer overflows...

[SECURITY] [DSA 195-1] New Apache-Perl packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 195-1 [email protected] http://www.debian.org/security/ Martin Schulze November 13th, 2002 http://www.debian.org/security/faq -...