CVE-2003-0689

The getgrouplist function in GNU libc glibc 2.2.4 and earlier allows attackers to cause a denial of service segmentation fault and execute arbitrary code when a user is a member of a large number of groups, which can cause a buffer overflow...

CVE-2003-0689

The getgrouplist function in GNU libc glibc 2.2.4 and earlier allows attackers to cause a denial of service segmentation fault and execute arbitrary code when a user is a member of a large number of groups, which can cause a buffer overflow...

[SECURITY] [DSA-364-3] New man-db packages fix segmentation fault

-------------------------------------------------------------------------- Debian Security Advisory DSA 364-3 [email protected] http://www.debian.org/security/ Matt Zimmerman August 18th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-364-2] New man-db packages fix problem with DSA-364-1

-------------------------------------------------------------------------- Debian Security Advisory DSA 364-2 [email protected] http://www.debian.org/security/ Matt Zimmerman August 8th, 2003 http://www.debian.org/security/faq -...

ManDB Utility 2.32.4 - Local Buffer Overflow

ManDB Utility 2.32.4 - Local Buffer Overflow source: https://www.securityfocus.com/bid/8303/info The mandb utility has been reported to be affected by multiple local buffer overflow vulnerabilities. These issues present themselves due to insufficient bounds checking performed on user-supplied dat...

ManDB Utility 2.3/2.4 - Local Buffer Overflow

source: https://www.securityfocus.com/bid/8303/info The mandb utility has been reported to be affected by multiple local buffer overflow vulnerabilities. These issues present themselves due to insufficient bounds checking performed on user-supplied data before it is copied into reserved buffers i...

IBM U2 UniVerse 10.0.0.9 - UVADMSH Buffer Overflow

IBM U2 UniVerse 10.0.0.9 - UVADMSH Buffer Overflow source: https://www.securityfocus.com/bid/8209/info Under certain configurations, UniVerse allows the 'uvadm' user to perform certain administration tasks for the software. It has been reported that the uvadmsh binary does not perform bounds...

[Full-Disclosure] Bahamut IRCd <= 1.4.35 and several derived daemons

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ========================================================================== 0xbadc0ded Advisory 01 - 2003/06/26 - Bahamut IRCd = 1.4.35 and others ========================================================================== Reference...

MyServer 0.4.1 - Remote Denial of Service

source: https://www.securityfocus.com/bid/8010/info MyServer HTTP server has been reported prone to a remote denial of service attack. The issue presents itself, likely due to a lack of sufficient bounds checking, performed on arguments that are supplied via malicious HTTP GET requests. It has be...

MyServer 0.4.1 - Remote Denial of Service

MyServer 0.4.1 - Remote Denial of Service source: https://www.securityfocus.com/bid/8010/info MyServer HTTP server has been reported prone to a remote denial of service attack. The issue presents itself, likely due to a lack of sufficient bounds checking, performed on arguments that are supplied...

CVE-2002-1565

CVE-2002-1565: GNU Wget 1.8.1 contains a buffer overflow in the url_filename function that can cause a segmentation fault and may allow arbitrary code execution via a very long URL. Debian and Red Hat advisories confirm fixes (upgraded wget packages) to mitigate the issue; Conectiva also issued u...

possible remote buffer overflow in atftpd

Hello, There is possible remote buffer overflow in atftpd. It has to do with length of filename which client sends to atftpd server. If you send filename over 253 bytes, it crashes with segfault. When I attach to process with gdb I can see it trying to run instruction from EIP 0x41414141. That ca...

HP-UX 11.0 /usr/lbin/rwrite

Hi! There is a vulnerability in /usr/lbin/rwrite on HP-UX 11.0 other versions might be vulnerable too. /usr/lbin/rwrite is installed setuid to root by default. $ /usr/lbin/rwrite something perl -e 'print "A" x 14628' something Segmentation fault Solution : remove setuid bit until patch is...

Sendmail 8.12.8 (BSD) - 'Prescan()' Remote Command Execution

/ Sendmail 8.12.8 prescan PROOF OF CONCEPT exploit by bysin This is to prove that the bug in sendmail 8.12.8 and below is vulnerable. On sucessful POC exploitation the program should crash with the following: Program received signal SIGSEGV, Segmentation fault. 0x5c5c5c5c in ?? / include include...

Sendmail <= 8.12.8 prescan() BSD Remote Root Exploit

Exploit for linux platform in category remote exploits ==================================================== Sendmail include include include include include include include include int maxarch=1; struct arch char os; // The OS int pos; // The position of ebp in the stack, with the last byte being...

Sendmail 8.12.8 (BSD) - Prescan() Remote Command Execution

Sendmail 8.12.8 BSD - Prescan Remote Command Execution / Sendmail 8.12.8 prescan PROOF OF CONCEPT exploit by bysin This is to prove that the bug in sendmail 8.12.8 and below is vulnerable. On sucessful POC exploitation the program should crash with the following: Program received signal SIGSEGV,...

@&#40;#&#41;Mordred Labs advisory - Integer overflow in PHP socket_iovec_alloc&#40;&#41; function

//@ Mordred Security Labs advisory Release date: March 25, 2003 Name: Integer overflow in PHP socketiovecalloc function Versions affected: 4.3.2 Conditions: PHP must be compiled with --enable-sockets option, which is turned off by default Risk: average Author: Sir Mordred [email protected] I...

XFree86 4.2 - 'XLOCALEDIR' Local Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/7002/info Several XFree86 utilities may be prone to a buffer overflow condition. The vulnerability exists due to insufficient boundary checks performed by these utilities when referencing the XLOCALEDIR environment variable. A local attacker can exploi...

[argv] BitchX-353 Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Mon Feb 17 15:26:06 EST 2003 1. Topic: BitchX IRC Client 2. Relevant versions: Vulnerable: BitchX-75p3 BitchX-1.0c16 BitchX-1.0c19 BitchX-1.0c20cvs Not Vulnerable: BitchX-1.0c18 3. Problem description: A denial of service vulnerability exists in BitchX. Sending ...

HPUX Wall Buffer Overflow

Hi all, after looking to check if this had been reported before I couldn't find anything, so here's my two cents: HPUX /usr/sbin/wall Buffer Overflow. bash-2.04$ ls -las /usr/sbin/wall 40 -r-xr-sr-x 1 bin tty 20480 Nov 7 1997 /usr/sbin/wall Wall on HPUX works in the following way: echo "Something...