CVE-2008-7159

CVE-2008-7159 affects SILC Toolkit (and SILC Client) prior to versions 1.1.8/1.1.8+. The root cause is an incorrect format string in the ASN.1 OID encoder, allowing a remote attacker to overflow a stack location on 64-bit systems and potentially execute arbitrary code. Affected components: silcas...

CVE-2009-3163

Multiple format string vulnerabilities in lib/silcclient/command.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.10, and SILC Client 1.1.8 and earlier, allow remote attackers to execute arbitrary code via format string specifiers in a channel name, related to 1...

CVE-2008-7160

The CVE-2008-7160 issue affects the SILC Toolkit/SILC server (silcd HTTP server) prior to version 1.1.9, where an incorrect format string handling in a sscanf() call for Content-Length headers could overwrite a stack location and potentially allow code execution. Public documentation in Debian DS...

CVE-2008-7160

The silchttpserverparse function in lib/silchttp/silchttpserver.c in the internal HTTP server in silcd in Secure Internet Live Conferencing SILC Toolkit before 1.1.9 allows remote attackers to overwrite a stack location and possibly execute arbitrary code via a crafted Content-Length header,...

CVE-2009-3163

CVE-2009-3163 is a vulnerability in the SILC Toolkit and SILC Client. Reports describe multiple format-string vulnerabilities in lib/silcclient/command.c that allow remote code execution via crafted channel names, affecting SILC Toolkit versions before 1.1.10 and SILC Client up to 1.1.8. The issu...

CVE-2009-3051

Multiple format string vulnerabilities in lib/silcclient/cliententry.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.10, and SILC Client before 1.1.8, allow remote attackers to execute arbitrary code via format string specifiers in a nickname field, related to the 1...

Format string

Multiple format string vulnerabilities in lib/silcclient/cliententry.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.10, and SILC Client before 1.1.8, allow remote attackers to execute arbitrary code via format string specifiers in a nickname field, related to the 1...

CVE-2009-3051

Multiple format string vulnerabilities in lib/silcclient/cliententry.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.10, and SILC Client before 1.1.8, allow remote attackers to execute arbitrary code via format string specifiers in a nickname field, related to the 1...

CVE-2009-3051

CVE-2009-3051 describes multiple format-string vulnerabilities in the SILC Toolkit and SILC Client. The flaws reside in lib/silcclient/client_entry.c, allowing remote attackers to execute arbitrary code via format string specifiers embedded in nicknames, tied to functions silc_client_add_client, ...

CVE-2009-3051

Multiple format string vulnerabilities in lib/silcclient/cliententry.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.10, and SILC Client before 1.1.8, allow remote attackers to execute arbitrary code via format string specifiers in a nickname field, related to the 1...

Debian: Security Advisory (DSA-1879-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : silc-toolkit -- Format string vulnerabilities (24aa9970-9ccd-11de-af10-000c29a67389)

SILC Changlog reports : An unspecified format string vulnerability exists in silc-toolkit. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and...

Debian Security Advisory DSA 1879-1 (silc-client/silc-toolkit)

The remote host is missing an update to silc-client/silc-toolkit announced via advisory DSA 1879-1. OpenVAS Vulnerability Test $Id: deb18791.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1879-1 silc-client/silc-toolkit Authors: Thomas Reinke Copyright:...

SILC Toolkit 'command.c'格式串漏洞

Bugraq ID: 36193 SILC Toolkit是一款提供SILC协议实现的软件开发工具集。 SILC Toolkit 'command.c'文件存在格式串错误，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 目前没有详细漏洞细节提供。 SILC Toolkit 1.1.8 SILC Toolkit 1.1.6 SILC Toolkit 1.1.5 SILC Toolkit 1.1.4 SILC Toolkit 1.1.3 SILC Toolkit 1.1.2 SILC Toolkit 1.1.1 SILC Toolkit 1.1 厂商解决方案 用户可联系供应商升级到SIL...

SILC Toolkit HTTP服务程序格式串漏洞

Bugraq ID: 36194 SILC Toolkit是一款提供SILC协议实现的软件开发工具集。 SILC Toolkit HTTP服务程序存在格式串错误，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 目前没有详细漏洞细节提供。 SILC Toolkit 1.1.8 SILC Toolkit 1.1.6 SILC Toolkit 1.1.5 SILC Toolkit 1.1.4 SILC Toolkit 1.1.3 SILC Toolkit 1.1.2 SILC Toolkit 1.1.1 SILC Toolkit 1.1 用户可联系供应商升级到SILC Toolkit...

Mandriva Linux Security Advisory : silc-toolkit (MDVSA-2008:158)

A vulnerability was found in the SILC toolkit before version 1.1.5 that allowed a remote attacker to cause a denial of service crash, or possibly execute arbitrary code via long input data CVE-2008-1227. A vulnerability was found in the SILC toolkit before version 1.1.7 that allowed a remote...

Mandriva Update for silc-toolkit MDVSA-2008:158 (silc-toolkit)

Check for the Version of silc-toolkit OpenVAS Vulnerability Test Mandriva Update for silc-toolkit MDVSA-2008:158 silc-toolkit Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for silc-toolkit MDVA-2008:051 (silc-toolkit)

Check for the Version of silc-toolkit OpenVAS Vulnerability Test Mandriva Update for silc-toolkit MDVA-2008:051 silc-toolkit Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for silc-toolkit MDVSA-2008:158 (silc-toolkit)

Check for the Version of silc-toolkit OpenVAS Vulnerability Test Mandriva Update for silc-toolkit MDVSA-2008:158 silc-toolkit Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for silc-toolkit MDVA-2008:051 (silc-toolkit)

Check for the Version of silc-toolkit OpenVAS Vulnerability Test Mandriva Update for silc-toolkit MDVA-2008:051 silc-toolkit Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...