CVE-2008-1429

Secure Internet Live Conferencing SILC Server before 1.1.1 allows remote attackers to cause a denial of service daemon crash via a NEWCLIENT packet without a nickname...

CVE-2008-1429

CVE-2008-1429 affects SILC Server prior to 1.1.1 and is triggered by handling of NEW_CLIENT packets that do not contain a nickname, leading to daemon crash (Denial of Service). Public reports confirm impact as a remote DoS and recommend upgrading the SILC Server to a fixed version (1.1.1+; e.g., ...

CVE-2008-1429: Undefined Security Weakness

Secure Internet Live Conferencing SILC Server before 1.1.1 allows remote attackers to cause a denial of service daemon crash via a NEWCLIENT packet without a nickname...

openSUSE 10 Security Update : silc-toolkit (silc-toolkit-5094)

This update of silc-toolkit fixes a stack-based buffer overflow in the silcfingerprint function which can possibly exploited to execute arbitrary code remotely. CVE-2008-1227 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

CVE-2008-1227

Stack-based buffer overflow in the silcfingerprint function in lib/silcutil/silcutil.c in Secure Internet Live Conferencing SILC Toolkit 1.1.5, and unspecified earlier versions, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via long input data. NOTE...

Stack overflow

Stack-based buffer overflow in the silcfingerprint function in lib/silcutil/silcutil.c in Secure Internet Live Conferencing SILC Toolkit 1.1.5, and unspecified earlier versions, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via long input data. NOTE...

CVE-2008-1227

Stack-based buffer overflow in the silcfingerprint function in lib/silcutil/silcutil.c in Secure Internet Live Conferencing SILC Toolkit 1.1.5, and unspecified earlier versions, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via long input data. NOTE...

CVE-2008-1227

CVE-2008-1227 concerns a stack-based buffer overflow in the silc_fingerprint() function of SILC Toolkit 1.1.5 and earlier. The vulnerability occurs via long input data, enabling a remote attacker to cause a crash or potentially execute arbitrary code. Public references across multiple advisories ...

CVE-2008-1227

Stack-based buffer overflow in the silcfingerprint function in lib/silcutil/silcutil.c in Secure Internet Live Conferencing SILC Toolkit 1.1.5, and unspecified earlier versions, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via long input data. NOTE...

CVE-2008-1227: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the silcfingerprint function in lib/silcutil/silcutil.c in Secure Internet Live Conferencing SILC Toolkit 1.1.5, and unspecified earlier versions, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via long input data. NOTE...

SILC工具包silcutil.c文件栈溢出漏洞

BUGTRAQ ID: 28101 SILC工具包是用于实现SILC（Secure Internet Live Conferencing）协议的软件开发工具包。 SILC工具包的lib/silcutil/silcutil.c文件中的silcfingerprint函数存在栈溢出漏洞，如果远程攻击者向该函数提交了超长数据的话，就可能触发这个溢出，导致执行任意指令。 SILC Toolkit 1.1.6 SILC ---- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://silcnet.org/software/download/toolkit/...

CVE-2003-1439

Secure Internet Live Conferencing (SILC) 0.9.11 and 0.9.12 are affected, with passwords and sessions stored in plaintext in memory. The root cause is in-memory plaintext storage, enabling local users to obtain sensitive information. The available documents do not provide further details on affect...

CVE-2003-1439

Secure Internet Live Conferencing SILC 0.9.11 and 0.9.12 stores passwords and sessions in plaintext in memory, which could allow local users to obtain sensitive information...

CVE-2003-1439: Undefined Security Weakness

Secure Internet Live Conferencing SILC 0.9.11 and 0.9.12 stores passwords and sessions in plaintext in memory, which could allow local users to obtain sensitive information...

Buffer overflow

Buffer overflow in lib/silcclient/clientnotify.c of SILC Client and SILC Toolkit before 1.1.2 allows remote attackers to cause a denial of service via "NICKCHANGE" notifications...

CVE-2007-3728

Buffer overflow in lib/silcclient/clientnotify.c of SILC Client and SILC Toolkit before 1.1.2 allows remote attackers to cause a denial of service via "NICKCHANGE" notifications...

CVE-2007-3728

Buffer overflow in lib/silcclient/clientnotify.c of SILC Client and SILC Toolkit before 1.1.2 allows remote attackers to cause a denial of service via "NICKCHANGE" notifications...

CVE-2007-3728

Buffer overflow in lib/silcclient/clientnotify.c of SILC Client and SILC Toolkit before 1.1.2 allows remote attackers to cause a denial of service via "NICKCHANGE" notifications...

CVE-2007-3728

CVE-2007-3728 affects SILC Client and SILC Toolkit via a buffer overflow in lib/silcclient/client_notify.c, exploitable by remote attackers sending NICK_CHANGE notifications. The issue exists in versions before 1.1.2 and can cause a denial of service. Mitigation: upgrade to SILC Toolkit 1.1.2 or ...

CVE-2007-3728: Undefined Security Weakness

Buffer overflow in lib/silcclient/clientnotify.c of SILC Client and SILC Toolkit before 1.1.2 allows remote attackers to cause a denial of service via "NICKCHANGE" notifications...