CVE-2009-3051

Multiple format string vulnerabilities in lib/silcclient/cliententry.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.10, and SILC Client before 1.1.8, allow remote attackers to execute arbitrary code via format string specifiers in a nickname field, related to the 1...

CVE-2009-3051

CVE-2009-3051 describes multiple format-string vulnerabilities in the SILC Toolkit and SILC Client. The flaws reside in lib/silcclient/client_entry.c, allowing remote attackers to execute arbitrary code via format string specifiers embedded in nicknames, tied to functions silc_client_add_client, ...

CVE-2009-3051

Multiple format string vulnerabilities in lib/silcclient/cliententry.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.10, and SILC Client before 1.1.8, allow remote attackers to execute arbitrary code via format string specifiers in a nickname field, related to the 1...

[SECURITY] Fedora 11 Update: libsilc-1.1.8-7.fc11

SILC Client Library libraries for clients to connect to SILC networks. SILC Secure Internet Live Conferencing is a protocol which provides secure conferencing services on the Internet over insecure channel...

[SECURITY] Fedora 10 Update: libsilc-1.1.8-7.fc10

SILC Client Library libraries for clients to connect to SILC networks. SILC Secure Internet Live Conferencing is a protocol which provides secure conferencing services on the Internet over insecure channel...

CVE-2008-7159: Use of Externally-Controlled Format String

The silcasn1encoder function in lib/silcasn1/silcasn1encode.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.8 allows remote attackers to overwrite a stack location and possibly execute arbitrary code via a crafted OID value, related to incorrect use of a %lu format string...

CVE-2009-3163: Use of Externally-Controlled Format String

Multiple format string vulnerabilities in lib/silcclient/command.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.10, and SILC Client 1.1.8 and earlier, allow remote attackers to execute arbitrary code via format string specifiers in a channel name, related to 1...

CVE-2009-3051: Use of Externally-Controlled Format String

Multiple format string vulnerabilities in lib/silcclient/cliententry.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.10, and SILC Client before 1.1.8, allow remote attackers to execute arbitrary code via format string specifiers in a nickname field, related to the 1...

CVE-2008-7160: Use of Externally-Controlled Format String

The silchttpserverparse function in lib/silchttp/silchttpserver.c in the internal HTTP server in silcd in Secure Internet Live Conferencing SILC Toolkit before 1.1.9 allows remote attackers to overwrite a stack location and possibly execute arbitrary code via a crafted Content-Length header,...

Debian Security Advisory DSA 1879-1 (silc-client/silc-toolkit)

The remote host is missing an update to silc-client/silc-toolkit announced via advisory DSA 1879-1. OpenVAS Vulnerability Test $Id: deb18791.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1879-1 silc-client/silc-toolkit Authors: Thomas Reinke Copyright:...

FreeBSD : silc-toolkit -- Format string vulnerabilities (24aa9970-9ccd-11de-af10-000c29a67389)

SILC Changlog reports : An unspecified format string vulnerability exists in silc-toolkit. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and...

Debian: Security Advisory (DSA-1879-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1879-1] New silc-client/silc-toolkit packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA-1879-1 [email protected] http://www.debian.org/security/ Nico Golde September 4th, 2009 http://www.debian.org/security/faq -...

DSA-1879-1 silc-client silc-toolkit - arbitrary code execution

Bulletin has no description...

[SECURITY] [DSA 1879-1] New silc-client/silc-toolkit packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-1879-1 [email protected] http://www.debian.org/security/ Nico Golde September 4th, 2009 http://www.debian.org/security/faq -...

SILC Toolkit 'command.c'格式串漏洞

Bugraq ID: 36193 SILC Toolkit是一款提供SILC协议实现的软件开发工具集。 SILC Toolkit 'command.c'文件存在格式串错误，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 目前没有详细漏洞细节提供。 SILC Toolkit 1.1.8 SILC Toolkit 1.1.6 SILC Toolkit 1.1.5 SILC Toolkit 1.1.4 SILC Toolkit 1.1.3 SILC Toolkit 1.1.2 SILC Toolkit 1.1.1 SILC Toolkit 1.1 厂商解决方案 用户可联系供应商升级到SIL...

SILC Toolkit HTTP服务程序格式串漏洞

Bugraq ID: 36194 SILC Toolkit是一款提供SILC协议实现的软件开发工具集。 SILC Toolkit HTTP服务程序存在格式串错误，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 目前没有详细漏洞细节提供。 SILC Toolkit 1.1.8 SILC Toolkit 1.1.6 SILC Toolkit 1.1.5 SILC Toolkit 1.1.4 SILC Toolkit 1.1.3 SILC Toolkit 1.1.2 SILC Toolkit 1.1.1 SILC Toolkit 1.1 用户可联系供应商升级到SILC Toolkit...

[SECURITY] Fedora 10 Update: pidgin-2.6.0-1.fc10

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

FreeBSD Ports: silc-client, silc-irssi-client

The remote host is missing an update to the system as announced in the referenced advisory. VID 4e306850-811f-11de-8a67-000c29a67389 OpenVAS Vulnerability Test $ Description: Auto generated from VID 4e306850-811f-11de-8a67-000c29a67389 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

FreeBSD Ports: silc-client, silc-irssi-client

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...