11 matches found
EUVD-2007-5863
Malware in sbrugna...
CVE-2012-10055
CVE-2012-10055 affects ComSndFTP FTP Server v1.3.7 Beta. The vulnerability is a format-string flaw in the handling of the USER command that can overwrite a hardcoded function pointer (WSACleanup from Ws2_32.dll) in memory, enabling an attacker to redirect control flow and bypass DEP via a ROP cha...
CVE-2012-10055 ComSndFTP v1.3.7 Beta USER Format String RCE
ComSndFTP FTP Server version 1.3.7 Beta contains a format string vulnerability in its handling of the USER command. By sending a specially crafted username containing format specifiers, a remote attacker can overwrite a hardcoded function pointer in memory specifically WSACleanup from Ws232.dll...
CVE-2023-35632
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability...
SUSE CVE-2020-7041
An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because an X509checkhost negative error code is interpreted as a successful return value...
Juniper Junos Sockets Library Buffer Overflow Privilege Escalation (JSA10792)
According to its self-reported version number, the remote Juniper Junos device is affected by a privilege escalation vulnerability in the sockets library due to a buffer overflow condition. A local attacker can exploit this to cause a denial of service kernel panic or the execution of arbitrary...
CVE-2017-2344 Junos: Buffer overflow in sockets library
A routine within an internal Junos OS sockets library is vulnerable to a buffer overflow. Malicious exploitation of this issue may lead to a denial of service kernel panic or be leveraged as a privilege escalation through local code execution. The routines are only accessible via programs running...
Juniper Networks Junos OS Sockets Library Buffer Overflow Vulnerability
Junos OS is prone to a buffer overflow vulnerability in the sockets library. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2007-5893
HTTPSocket.cpp in the C++ Sockets Library before 2.2.5 allows remote attackers to cause a denial of service crash via an HTTP request with a missing protocol version number, which triggers an exception. NOTE: some of these details were obtained from third party information...
Design/Logic Flaw
HTTPSocket.cpp in the C++ Sockets Library before 2.2.5 allows remote attackers to cause a denial of service crash via an HTTP request with a missing protocol version number, which triggers an exception. NOTE: some of these details were obtained from third party information...
CVE-2007-5893
CVE-2007-5893 affects the C++ Sockets Library (HTTPSocket.cpp) prior to version 2.2.5. A crafted HTTP request with a missing protocol version number triggers an exception, allowing remote attackers to cause a denial of service (crash). No exploitation details or patch status are provided beyond t...