Format string

Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv96, when the -o option is omitted, allow remote attackers to execute arbitrary code via format string specifiers in an SMB packet...

CVE-2008-0965

Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv96, when the -o option is omitted, allow remote attackers to execute arbitrary code via format string specifiers in an SMB packet...

Stack overflow

Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv96, when the -o option is omitted, allow remote attackers to execute arbitrary code via a crafted SMB packet...

CVE-2008-0964

The CVE-2008-0964 issue affects SunOS/Solaris snoop for several Solaris releases. The root cause is a stack-based buffer overflow in snoop when handling SMB traffic with the -o option omitted, enabling remote code execution. Concrete fixes are available via Solaris patch updates: 108964-11 (Solar...

CVE-2008-0964

Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv96, when the -o option is omitted, allow remote attackers to execute arbitrary code via a crafted SMB packet...

CVE-2008-0965

Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv96, when the -o option is omitted, allow remote attackers to execute arbitrary code via format string specifiers in an SMB packet...

CVE-2008-0965

CVE-2008-0965 describes multiple format-string vulnerabilities in Solaris snoop in SunOS/Solaris 8–10 (OpenSolaris before snv_96). The connected Nessus/OpenVAS data identify affected components as snoop in SunOS/Solaris and reference specific patches: 138083-01 (Solaris 10 SPARC) and 138084-01 (S...

Sun Solaris 'snoop(1M)'工具远程命令执行漏洞

BUGTRAQ ID: 30556 CVE ID：CVE-2008-0964 CVE-2008-0965 CNCVE ID：CNCVE-20080964 CNCVE-20080965 Sun Solaris是一款商业性质的操作系统。 snoop1M网络工具相关的SMB通信显示存在安全问题，远程攻击者可以利用漏洞以'nobody'权限或其他本地用户权限执行任意命令。 目前没有详细漏洞细节提供。 如下平台受此漏洞影响： Solaris 10 Solaris 9 Solaris 8 OpenSolaris builds snv01 to snv95 Sun Solaris 9x86 Sun...

Code injection

The Filesys::SmbClientParser module 2.7 and earlier for Perl allows remote SMB servers to execute arbitrary code via a folder name containing shell metacharacters...

CVE-2008-3285

The Filesys::SmbClientParser module 2.7 and earlier for Perl allows remote SMB servers to execute arbitrary code via a folder name containing shell metacharacters...

CVE-2008-3285

The Filesys::SmbClientParser module 2.7 and earlier for Perl allows remote SMB servers to execute arbitrary code via a folder name containing shell metacharacters...

CVE-2008-3285

The vulnerability affects the Perl module Filesys::SmbClientParser (versions up to 2.7). The root cause is that folder names containing shell metacharacters enable a remote SMB server to run arbitrary code, as described in CVE-2008-3285. The impact is remote code execution with high risk. No reme...

Integer overflow

Integer underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine MSDE 2000 SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine WMSDE; Microsoft Data Engine MSDE 1.0 SP4; and Internal Database WYukon SP2 allows remote authenticated users to execute arbitrary code...

CVE-2008-0107

Integer underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine MSDE 2000 SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine WMSDE; Microsoft Data Engine MSDE 1.0 SP4; and Internal Database WYukon SP2 allows remote authenticated users to execute arbitrary code...

CVE-2008-0107

CVE-2008-0107 is a memory corruption vulnerability in multiple SQL Server lineage components (SQL Server 7.0, SQL Server 2000/2005, MSDE/WYukon) triggered by a crafted on-disk file path supplied via SMB or WebDAV, leading to a heap-based buffer overflow. The flaw permits remote authenticated user...

samba security update

CentOS Errata and Security Advisory CESA-2008:0290 Updated samba packages that fix a security issue and two bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Samba is a suite of programs used...

Lotus Expeditor cai URI handler command injection

Added: 06/20/2008 CVE: CVE-2008-1965 BID: 28926 OSVDB: 44868 Background Lotus Expeditor is a desktop integration framework used by Lotus products including Lotus Symphony. Problem Lotus Expeditor registers a handler for cai: URIs which passes arbitrary arguments to rcplauncher.exe. This allows...

Lotus Expeditor cai URI handler command injection

Added: 06/20/2008 CVE: CVE-2008-1965 BID: 28926 OSVDB: 44868 Background Lotus Expeditor is a desktop integration framework used by Lotus products including Lotus Symphony. Problem Lotus Expeditor registers a handler for cai: URIs which passes arbitrary arguments to rcplauncher.exe. This allows...

USN-617-1: Samba vulnerabilities

Samba developers discovered that nmbd could be made to overrun a buffer during the processing of GETDC logon server requests. When samba is configured as a Primary or Backup Domain Controller, a remote attacker could send malicious logon requests and possibly cause a denial of service...

CA-ArcServe

CA ArcServe is prone to a remote buffer overflow because it fails to perform adequate boundary-checks on user-supplied data. Successfully exploiting will allow an attacker to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a...