DEBIAN-CVE-2006-3913

Buffer overflow in Freeciv 2.1.0-beta1 and earlier, and SVN 15 Jul 2006 and earlier, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a 1 negative chunklength or a 2 large chunk-offset value in a PACKETPLAYERATTRIBUTECHUNK packet in the...

CVE-2006-3913

Buffer overflow in Freeciv 2.1.0-beta1 and earlier, and SVN 15 Jul 2006 and earlier, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a 1 negative chunklength or a 2 large chunk-offset value in a PACKETPLAYERATTRIBUTECHUNK packet in the...

CVE-2006-3913

Buffer overflow in Freeciv 2.1.0-beta1 and earlier, and SVN 15 Jul 2006 and earlier, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a 1 negative chunklength or a 2 large chunk-offset value in a PACKETPLAYERATTRIBUTECHUNK packet in the...

security flaw

sqlparse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to obtain sensitive information via a COMTABLEDUMP request with an incorrect packet length, which includes portions of memory in an error message...

CVE-2006-1517

sqlparse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to obtain sensitive information via a COMTABLEDUMP request with an incorrect packet length, which includes portions of memory in an error message...

Mandrake Linux Security Advisory : mplayer (MDKSA-2006:048)

Multiple integer overflows in 1 the newdemuxpacket function in demuxer.h and 2 the demuxasfreadpacket function in demuxasf.c in MPlayer 1.0pre7try2 and earlier allow remote attackers to execute arbitrary code via an ASF file with a large packet length value. The updated packages have been patched...

Integer overflow

Multiple integer overflows in Shareaza 2.2.1.0 allow remote attackers to execute arbitrary code via 1 a large packet length field, which causes an overflow in the ReadBuffer function in a BTPacket.cpp and b EDPacket.cpp, or 2 a large packet, which causes a heap-based overflow in the Write functio...

security flaw

The Orinoco driver orinoco.c in Linux kernel 2.6.13 and earlier does not properly clear memory from a previously used packet whose length is increased, which allows remote attackers to obtain sensitive information...

security flaw

Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and Helix Player 10.0.0 allows remote attackers to execute arbitrary code via an .rm movie file with a large value in the length field of the first data packet, which leads to a stack-based buffer overflow, a...

CVE-2001-1398

The CVE-2001-1398 issue affects the Linux kernel prior to 2.2.19, arising from the masquerading code where packet length checks were lax, potentially enabling kernel memory writes via the CPIA driver off-by-one bug. Confirmed in multiple advisories (Mandrake MDKSA-2001:037 and Debian/Debian DSA-0...

CVE-2001-1398: Undefined Security Weakness

Masquerading code for Linux kernel before 2.2.19 does not fully check packet lengths in certain cases, which may lead to a vulnerability...

CVE-2001-1398

Masquerading code for Linux kernel before 2.2.19 does not fully check packet lengths in certain cases, which may lead to a vulnerability...

Be BeOS 4.04.55.0 - IP Packet Length Field

Be BeOS 4.04.55.0 - IP Packet Length Field source: https://www.securityfocus.com/bid/1100/info The networking process in BeOS can crash if certain malformed packets are transmitted to it. If the length field is set to a number less than the total length of the IP and protocol TCP or UDP headers...

Be BeOS 4.0/4.5/5.0 - IP Packet Length Field

source: https://www.securityfocus.com/bid/1100/info The networking process in BeOS can crash if certain malformed packets are transmitted to it. If the length field is set to a number less than the total length of the IP and protocol TCP or UDP headers alone, the process will halt and require...

Linux Kernel 2.0.x (Debian 2.1 / RedHat 5.2) - Packet Length with Options

/ source: https://www.securityfocus.com/bid/870/info Debian 2.1,Linux kernel 2.0.34/2.0.35/2.0.36/2.0.37/2.0.38,RedHat 5.2 i386 Packet Length with Options Vulnerability A vulnerability in the Linux kernel's TCP/IP allows local users to crash, hang or corrupt the system. A local user can crash, ha...