CVE-2005-1979

Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service MSDTC service exception and exit via an "unexpected protocol command during the reconnection request," which is not properly handled by the Transaction Internet Protocol TIP functionality...

DEBIAN-CVE-2005-3150

Format string vulnerability in the LogFlush function in Weex 2.6.1.5, 2.6.1, and possibly other versions allows remote FTP servers to execute arbitrary code via format strings in filenames...

GLSA-200508-12 : Evolution: Format string vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200508-12 Evolution: Format string vulnerabilities Ulf Harnhammar discovered that Evolution is vulnerable to format string bugs when viewing attached vCards and when displaying contact information from remote LDAP servers or task...

CVE-2005-2549

Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 full vCard data, 2 contact data from remote LDAP servers, or 3 task list data from remote servers...

evolution -- remote format string vulnerabilities

A SITIC Vulnerability Advisory reports: Evolution suffers from several format string bugs when handling data from remote sources. These bugs lead to crashes or the execution of arbitrary assembly language code. The first format string bug occurs when viewing the full vCard data attached to an...

CVE-2005-2455

Greasemonkey before 0.3.5 is affected. The vulnerability allows a remote server to (1) read arbitrary files via a file:// URL in GM_xmlhttpRequest, (2) list installed scripts using GM_scripts, and (3) obtain sensitive information via GM_setValue/GM_getValue. The root causes are described in the C...

security flaw

Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENVUSERVAR command...

security flaw

Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992...

security flaw

Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992...

CVE-2005-0875

Multiple buffer overflows in the Yahoo plug-in for Trillian 2.0, 3.0, and 3.1 allow remote web servers to cause a denial of service application crash via a long string in an HTTP 1.1 response header...

CVE-2004-1077

CVE-2004-1077 affects Citrix Program Neighborhood Agent for Win32 (v8.00.24737 and earlier) and MetaFrame Presentation Server client for WinCE before 8.33. The root cause is a design/implementation flaw in the AppInStartmenu directive that lets a remote server supply a full UNC path, enabling arb...

CVE-2004-1077

Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and MetaFrame Presentation Server client for WinCE before 8.33 allows remote servers to create arbitrary shortcuts on the client via a full UNC path in the AppInStartmenu directive...

CVE-2004-0883

Multiple vulnerabilities in the samba filesystem smbfs in Linux kernel 2.4 and 2.6 allow remote samba servers to cause a denial of service crash or gain sensitive information from kernel memory via a samba server 1 returning more data than requested to the smbprocread function, 2 returning a data...

CVE-2004-2622

AClient.exe in Altiris Deployment Solution 6.x and 5.x does not require authentication from the first Deployment Server that it connects to, which allows remote malicious servers to gain administrator access...

CVE-2004-1277

CVE-2004-1277 concerns IglooFTP 0.6.1 where the download_selection_recursive() function in ftplist.c is vulnerable. A remote FTP server can cause arbitrary files to be overwritten via filenames containing a forward slash ('/'), indicating a path traversal-like flaw within the file listing/selecti...

CVE-2004-0980

The CVE-2004-0980 entry concerns a format string vulnerability in ez-ipupdate.c affecting ez-ipupdate 3.0.10 through 3.0.11b8. When running in daemon mode with certain service types, a remote attacker could cause arbitrary code execution. The provided documents consistently reference vulnerable v...

VulnCheck KEV: CVE-2004-0727

Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the same name, as...

Proxytunnel: Format string vulnerability

Background Proxytunnel is a program that tunnels connections to a remote server through a standard HTTPS proxy. Description Florian Schilhabel of the Gentoo Linux Security Audit project found a format string vulnerability in Proxytunnel. When the program is started in daemon mode -a port, it...

Samba <= 3.0.4 SWAT Authorization Buffer Overflow Exploit

Exploit for linux platform in category remote exploits ========================================================= Samba new Proto = "tcp", PeerAddr = $host, PeerPort = "901" ; unless $remote die "cannot connect to http daemon on $host" print "connected\n"; $remote-autoflush1; my $http = "GET /...

CVE-2004-0175

CVE-2004-0175 is a directory traversal via scp in OpenSSH prior to 3.4p1, enabling a remote server to overwrite arbitrary files on the client. Root cause is improper path handling in scp. Affected product: OpenSSH (scp component). Impact: allows remote file overwrites. Mitigation: upgrade to Open...