GNU CFEngine 2.0.x2.1 - AuthenticationDialogue Remote Heap Buffer Overrun (1)

GNU CFEngine 2.0.x2.1 - AuthenticationDialogue Remote Heap Buffer Overrun 1 source: https://www.securityfocus.com/bid/10899/info GNU cfengine cfservd is reported prone to a remote heap-based buffer overrun vulnerability. The vulnerability presents itself in the cfengine cfservd...

GNU CFEngine 2.0.x/2.1 - AuthenticationDialogue Remote Heap Buffer Overrun (2)

// source: https://www.securityfocus.com/bid/10899/info GNU cfengine cfservd is reported prone to a remote heap-based buffer overrun vulnerability. The vulnerability presents itself in the cfengine cfservd AuthenticationDialogue function. The issue exists due to a lack of sufficient boundary chec...

GNU CFEngine 2.0.x/2.1 - AuthenticationDialogue Remote Heap Buffer Overrun (1)

source: https://www.securityfocus.com/bid/10899/info GNU cfengine cfservd is reported prone to a remote heap-based buffer overrun vulnerability. The vulnerability presents itself in the cfengine cfservd AuthenticationDialogue function. The issue exists due to a lack of sufficient boundary checks...

GNU CFEngine 2.0.x2.1 - AuthenticationDialogue Remote Heap Buffer Overrun (2)

GNU CFEngine 2.0.x2.1 - AuthenticationDialogue Remote Heap Buffer Overrun 2 // source: https://www.securityfocus.com/bid/10899/info GNU cfengine cfservd is reported prone to a remote heap-based buffer overrun vulnerability. The vulnerability presents itself in the cfengine cfservd...

GNU Info 4.7 - Follow XRef Buffer Overrun

GNU Info 4.7 - Follow XRef Buffer Overrun source: https://www.securityfocus.com/bid/10882/info GNU Info is reported prone to a buffer overrun vulnerability. The vulnerability is reported to present itself due to a lack of boundary checks performed on argument data for the f follow xref Info...

GNU Info 4.7 - Follow XRef Buffer Overrun

source: https://www.securityfocus.com/bid/10882/info GNU Info is reported prone to a buffer overrun vulnerability. The vulnerability is reported to present itself due to a lack of boundary checks performed on argument data for the f follow xref Info command. An attacker may exploit this...

Mandrake Linux Security Advisory : samba (MDKSA-2002:081)

A vulnerability in samba versions 2.2.2 through 2.2.6 was discovered by the Debian samba maintainers. A bug in the length checking for encrypted password change requests from clients could be exploited using a buffer overrun attack on the smbd stack. This attack would have to crafted in such a wa...

Mandrake Linux Security Advisory : gdm (MDKSA-2001:070)

A buffer overrun exists in the XDMCP handling code used in gdm. By sending a properly crafted XDMCP message, it is possible for a remote attacker to execute arbitrary commands as root on the susceptible machine. By default, XDMCP is disabled in gdm.conf on Mandrake Linux. %NASLMINLEVEL 70300 C...

Mandrake Linux Security Advisory : samba (MDKSA-2004:071)

A vulnerability was discovered in SWAT, the Samba Web Administration Tool. The routine used to decode the base64 data during HTTP basic authentication is subject to a buffer overrun caused by an invalid base64 character. This same code is also used to internally decode the sambaMungedDial attribu...

Fedora Core 1 : kernel-2.4.22-1.2188.nptl (2004-111)

A memory leak was fixed in an error path in the dofork routine. This was unlikely to have caused problems in real world situations. The information leak fixed in the previous errata was also found to affect XFS and JFS. The Common Vulnerabilities and Exposures project cve.mitre.org assigned the...

Potential Buffer Overrun in SWAT

Description The internal routine used by the Samba Web Administration Tool SWAT v3.0.2 and later to decode the base64 data during HTTP basic authentication is subject to a buffer overrun caused by an invalid base64 character. It is recommended that all Samba v3.0.2 or later installations running...

Potential Buffer Overrun in smbd

Description A buffer overrun has been located in the code used to support the 'mangling method = hash' smb.conf option. Please be aware that the default setting for this parameter is 'mangling method = hash2' and therefore not vulnerable. Affected Samba 3 installations can avoid this possible...

Microsoft Windows Program Group Converter Filename Local Buffer Overrun Vulnerability

Description Microsoft Windows Program Group Converter grpconv.exe is reported prone to a buffer overrun vulnerability. The issue is reported to exist due to a lack of sufficient validation performed on filename data. An attacker may craft a malicious file and present it to a victim in order to...

RHEL 2.1 : wget (RHSA-2003:372)

Updated wget packages that correct a buffer overrun are now available. GNU Wget is a file-retrieval utility that uses the HTTP and FTP protocols. A buffer overflow in the urlfilename function for wget 1.8.1 allows attackers to cause a segmentation fault via a long URL. Red Hat does not believe th...

[security bulletin] SSRT4741 rev.0 DCE for HP Tru64 UNIX Potential RPC Buffer Overrun Attack

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBTU01051 REVISION: 0 SSRT4741 rev.0 DCE for HP Tru64 UNIX Potential RPC Buffer Overrun Attack -------------------------------------------------------------- NOTICE: There are no restrictions for distribution of this Bulletin...

WinAgents TFTP Server 3.0 - Remote Buffer Overrun

WinAgents TFTP Server 3.0 - Remote Buffer Overrun source: https://www.securityfocus.com/bid/10526/info WinAgents TFTP Server is reported prone to a remote off-by-one buffer overrun vulnerability. The issue is reported to exist due to a lack of sufficient boundary checks performed on filenames whe...

WinAgents TFTP Server 3.0 - Remote Buffer Overrun

source: https://www.securityfocus.com/bid/10526/info WinAgents TFTP Server is reported prone to a remote off-by-one buffer overrun vulnerability. The issue is reported to exist due to a lack of sufficient boundary checks performed on filenames when a request is made for a file. A remote attacker...

Firebird 1.0 - Remote Database Name Buffer Overrun

Firebird 1.0 - Remote Database Name Buffer Overrun source: https://www.securityfocus.com/bid/10446/info Firebird is reported prone to a remote buffer-overrun vulnerability. The issue occurs because the application fails to perform sufficient boundary checks when the database server is handling...

Firebird 1.0 - Remote Database Name Buffer Overrun

source: https://www.securityfocus.com/bid/10446/info Firebird is reported prone to a remote buffer-overrun vulnerability. The issue occurs because the application fails to perform sufficient boundary checks when the database server is handling database names. A remote attacker may exploit this...

Qualcomm Eudora 5.2.16.x - Embedded Hyperlink Buffer Overrun

Qualcomm Eudora 5.2.16.x - Embedded Hyperlink Buffer Overrun source: https://www.securityfocus.com/bid/10298/info Qualcomm Eudora is reported to be prone to a remotely exploitable buffer overrun vulnerability. The issue is exposed when an excessively long hyperlink to a file resource is embedded ...