Gentoo Security Advisory GLSA 200804-27 (silc-toolkit silc-client silc-server)

The remote host is missing updates announced in advisory GLSA 200804-27. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200804-27 (silc-toolkit silc-client silc-server)

The remote host is missing updates announced in advisory GLSA 200804-27. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GLSA-200804-27 : SILC: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200804-27 SILC: Multiple vulnerabilities Nathan G. Grennan reported a boundary error in SILC Toolkit within the silcfingerprint function in the file lib/silcutil/silcutil.c when passing overly long data, resulting in a stack-based...

openSUSE 10 Security Update : silc-toolkit (silc-toolkit-5143)

A flaw in processing PKCS1-Messages could lead to a buffer overflow. Remote attackers could exploit that to crash the server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update silc-toolkit-5143...

CVE-2008-1552

The silcpkcs1decode function in the silccrypt library silcpkcs1.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.7, SILC Client before 1.1.4, and SILC Server before 1.1.2 allows remote attackers to execute arbitrary code via a crafted PKCS1 message, which triggers an integer...

CVE-2008-1552

The CVE-2008-1552 issue affects the SILC Toolkit family: the silc_pkcs1_decode function in silccrypt (silcpkcs1.c) enables remote code execution via a crafted PKCS#1 message. Affected products/versions are SILC Toolkit before 1.1.7, SILC Client before 1.1.4, and SILC Server before 1.1.2, indicati...

openSUSE 10 Security Update : silc-toolkit (silc-toolkit-5094)

This update of silc-toolkit fixes a stack-based buffer overflow in the silcfingerprint function which can possibly exploited to execute arbitrary code remotely. CVE-2008-1227 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

Stack overflow

Stack-based buffer overflow in the silcfingerprint function in lib/silcutil/silcutil.c in Secure Internet Live Conferencing SILC Toolkit 1.1.5, and unspecified earlier versions, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via long input data. NOTE...

CVE-2008-1227

Stack-based buffer overflow in the silcfingerprint function in lib/silcutil/silcutil.c in Secure Internet Live Conferencing SILC Toolkit 1.1.5, and unspecified earlier versions, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via long input data. NOTE...

CVE-2008-1227

Stack-based buffer overflow in the silcfingerprint function in lib/silcutil/silcutil.c in Secure Internet Live Conferencing SILC Toolkit 1.1.5, and unspecified earlier versions, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via long input data. NOTE...

CVE-2008-1227

Stack-based buffer overflow in the silcfingerprint function in lib/silcutil/silcutil.c in Secure Internet Live Conferencing SILC Toolkit 1.1.5, and unspecified earlier versions, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via long input data. NOTE...

CVE-2008-1227

CVE-2008-1227 concerns a stack-based buffer overflow in the silc_fingerprint() function of SILC Toolkit 1.1.5 and earlier. The vulnerability occurs via long input data, enabling a remote attacker to cause a crash or potentially execute arbitrary code. Public references across multiple advisories ...

CVE-2007-3728

Buffer overflow in lib/silcclient/clientnotify.c of SILC Client and SILC Toolkit before 1.1.2 allows remote attackers to cause a denial of service via "NICKCHANGE" notifications...

CVE-2007-3728

CVE-2007-3728 affects SILC Client and SILC Toolkit via a buffer overflow in lib/silcclient/client_notify.c, exploitable by remote attackers sending NICK_CHANGE notifications. The issue exists in versions before 1.1.2 and can cause a denial of service. Mitigation: upgrade to SILC Toolkit 1.1.2 or ...