Re: Linux /bin/mail Carbon Copy Field Buffer Overrun Vulnerability

Damage Hacking Group security advisory www.dhgroup.org Linux /bin/mail Carbon Copy Field Buffer Overrun Vulnerability http://www.securityfocus.com/bid/7760 It was noted that vulnerable Linux distribs are RedHat and Slackware. I checked it on my Linux Mandrake 8.2 and it's work: satan@localhost my...

Microsoft Security Bulletin MS03-020: Cumulative Patch for Internet Explorer (818529)

-----BEGIN PGP SIGNED MESSAGE----- - - ------------------------------------------------------------------ Title: Cumulative Patch for Internet Explorer 818529 Date: 04 June 2003 Software: Microsoftr Microsoft Internet Explorerr 5.01 Microsoft Internet Explorer 5.5 Microsoft Internet Explorer 6.0...

Microsoft Internet Explorer 5 - OBJECT Tag Buffer Overflow

source: https://www.securityfocus.com/bid/7806/info Microsoft Internet Explorer is prone to a boundary condition error when handling OBJECT tags in web pages. When a web page containing an OBJECT tag using a parameter containing excessive data is encountered by a vulnerable client, a internal...

RedHat 9.0 Slackware 8.1 - binmail Carbon Copy Field Buffer Overrun

RedHat 9.0 Slackware 8.1 - binmail Carbon Copy Field Buffer Overrun source: https://www.securityfocus.com/bid/7760/info A vulnerability has been discovered in the Linux /bin/mail utility. The problem occurs when processing excessive data within the carbon copy field. Due to insufficient bounds...

RedHat 9.0 / Slackware 8.1 - '/bin/mail' Carbon Copy Field Buffer Overrun

source: https://www.securityfocus.com/bid/7760/info A vulnerability has been discovered in the Linux /bin/mail utility. The problem occurs when processing excessive data within the carbon copy field. Due to insufficient bounds checking while parsing this information it may be possible to trigger ...

Microsoft SQL Server 7.02000 JET Database Engine 4.0 - Buffer Overrun

Microsoft SQL Server 7.02000 JET Database Engine 4.0 - Buffer Overrun source: https://www.securityfocus.com/bid/7541/info Microsoft SQL Server is prone to an exploitable buffer overrun vulnerability via the Jet Database Engine. This can occur while the JET 4.0 OLE DB data provider is querying dat...

Microsoft SQL Server 7.0/2000 JET Database Engine 4.0 - Buffer Overrun

source: https://www.securityfocus.com/bid/7541/info Microsoft SQL Server is prone to an exploitable buffer overrun vulnerability via the Jet Database Engine. This can occur while the JET 4.0 OLE DB data provider is querying data supplied via a remote source and is due to insufficient bounds...

Microsoft Security Bulletin MS03-016: Cumulative Patch for BizTalk Server (815206)

-----BEGIN PGP SIGNED MESSAGE----- - -------------------------------------------------------------------- Title: Cumulative Patch for BizTalk Server 815206 Date: 30 April 2003 Software: Microsoft BizTalk Server 2000 & BizTalk Server 2002 Impact: Two vulnerabilities, the most serious of which coul...

[Opera 7/6] Long File Extension Heap Buffer Overrun Vulnerability in Download.

Greetings. We, :: Operash :: here release the information about vulnerability of Opera. --------------------------------------------------------------------------------- SUMMARY : Opera 7/6 Long File Extension Heap Buffer Overrun Vulnerability in Download. PRODUCT : Opera for Windows VERSIONS :...

HP-UX 10.x11.x - RExec Remote Username Flag Local Buffer Overrun

HP-UX 10.x11.x - RExec Remote Username Flag Local Buffer Overrun source: https://www.securityfocus.com/bid/7459/info It has been reported that a problem in the rexec program included with some versions of HP-UX may be vulnerable to a boundary condition error. It may be possible for a local user t...

HP-UX 10.x/11.x - RExec Remote 'Username' Flag Local Buffer Overrun

source: https://www.securityfocus.com/bid/7459/info It has been reported that a problem in the rexec program included with some versions of HP-UX may be vulnerable to a boundary condition error. It may be possible for a local user to exploit this vulnerability to gain elevated privileges on the...

Multiple Vulnerabilities in BSD LPR Subsystem on IRIX update

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Multiple Vulnerabilities in BSD LPR Subsystem Number : 20030406-02-P Date : April 25, 2003 Reference: CERT VU39001 Reference: CERT VU30308 Reference: CERT VU293305 Reference: CVE CAN-2003-0144 Reference: SGI Security Advisory...

Microsoft Security Bulletin MS03-015: Cumulative Patch for Internet Explorer (813489)

-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------- Title: Cumulative Patch for Internet Explorer 813489 Date: 23 April 2003 Software: Microsoft c Internet Explorer Impact: Run code of the attacker's choice on a user's machine. Max Risk: Critic...

Microsoft Security Bulletin MS03-013: Buffer Overrun in Windows Kernel Message Handling could Lead to Elevated Privileges (811493)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Buffer Overrun in Windows Kernel Message Handling could Lead to Elevated Privileges 811493 Date: 16 April 2003 Software: Microsoft Windows NT 4.0, Windows 2000, and Windows XP Impact...

MS03-013: Buffer Overrun in Windows Kernel Message Handling could Lead to Elevated Privileges (811493)

The remote version of Windows has a flaw in the way the kernel passes error messages to a debugger. An attacker could exploit it to gain elevated privileges on this host. To successfully exploit this vulnerability, an attacker would need a local account on this host. C Tenable Network Security,...

DEBIAN-CVE-2003-0072

The Key Distribution Center KDC in Kerberos 5 krb5 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service crash on KDCs within the same realm using a certain protocol request that causes an out-of-bounds read of an array aka "array overrun"...

CVE-2003-0072

The Key Distribution Center KDC in Kerberos 5 krb5 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service crash on KDCs within the same realm using a certain protocol request that causes an out-of-bounds read of an array aka "array overrun"...

CVE-2003-0072

The Key Distribution Center KDC in Kerberos 5 krb5 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service crash on KDCs within the same realm using a certain protocol request that causes an out-of-bounds read of an array aka "array overrun"...

CesarFTP 0.99 g - Remote Username Buffer Overrun

CesarFTP 0.99 g - Remote Username Buffer Overrun source: https://www.securityfocus.com/bid/7946/info A buffer overrun vulnerability has been reported for CesarFTP. The problem is said to occur when multiple 'USER' commands are processed within a single session. When the issue is triggered, it may...

CesarFTP 0.99 g - Remote 'Username' Buffer Overrun

source: https://www.securityfocus.com/bid/7946/info A buffer overrun vulnerability has been reported for CesarFTP. The problem is said to occur when multiple 'USER' commands are processed within a single session. When the issue is triggered, it may be possible to overwrite sensitive locations in...