DSA-493 xchat - buffer overflow

Bulletin has no description...

CVE-2004-0409

Removed by vendor...

CVE-2004-0409

Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code...

CVE-2004-0409

CVE-2004-0409 is a stack-based overflow in XChat’s Socks5 proxy code affecting versions 1.8.0 through 2.0.8 with Socks5 traversal enabled. The vulnerability allows a remote attacker to execute arbitrary code via a crafted SOCKSv5 proxy, as detailed in vendor advisories (Red Hat RHSA-2004:585, Deb...

CVE-2003-0927

Heap-based buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via the SOCKS dissector...

security flaw

Heap-based buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via the SOCKS dissector...

PT-2003-1953 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.15 and earlier Description: A heap-based buffer overflow issue allows remote attackers to cause a denial of service, potentially leading to a crash, and possibly execute arbitrary code. This is achieved via the SOCKS...

SOCKS Server Detection

The remote service is a SOCKS SOCKetS server, which allows client applications to operate transparently through a firewall. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @PREFERENCES@ include'deprecatednasllevel.inc'; include"compat.inc"; ifdescription scriptid11865; scriptversion"1.23";...

CVE-2003-0081

Format string vulnerability in packet-socks.c of the SOCKS dissector for Ethereal 0.8.7 through 0.9.9 allows remote attackers to execute arbitrary code via SOCKS packets containing format string specifiers...

PT-2003-1354 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.8.7 through 0.9.9 Description: A format string issue in the SOCKS dissector of Ethereal allows remote attackers to execute arbitrary code via SOCKS packets containing format string specifiers. Recommendations: For Ethereal...

Multiple bugs in Ethereal

Format string bug in SOCKS protocol handling, heap overflow on NTLMSSP code...

security flaw

Ethereal 0.9.4 and earlier allows remote attackers to cause a denial of service and possibly excecute arbitrary code via the 1 SOCKS, 2 RSVP, 3 AFS, or 4 LMP dissectors, which can be caused to core dump...

PT-2002-1842 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.4 and earlier Description: The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via the 1 SOCKS, 2 RSVP, 3 AFS, or 4 LMP dissectors, which can be caused to core dump...

CVE-1999-1435

Buffer overflow in libsocks5 library of Socks 5 socks5 1.0r5 allows local users to gain privileges via long environmental variables...

CVE-1999-1435

The CVE-1999-1435 entry concerns a buffer overflow in the libsocks5 library of Socks 5 (socks5) 1.0r5, enabling local users to gain privileges via long environmental variables. The provided connected documents confirm the affected component and the root cause (buffer overflow) and the local privi...

AnalogX Proxy 4.0 4 - Denial of Service

// source: https://www.securityfocus.com/bid/1504/info AnalogX Proxy is a simple proxy server that allows a user to connect a network of computers to the internet through the proxy gateway. Many of the services provided contain buffer overrun vulnerabilities that can allow an attacker to crash th...

AnalogX Proxy 4.0 4 - Denial of Service

AnalogX Proxy 4.0 4 - Denial of Service // source: https://www.securityfocus.com/bid/1504/info AnalogX Proxy is a simple proxy server that allows a user to connect a network of computers to the internet through the proxy gateway. Many of the services provided contain buffer overrun vulnerabilitie...

CVE-1999-1435

Buffer overflow in libsocks5 library of Socks 5 socks5 1.0r5 allows local users to gain privileges via long environmental variables...

PT-2001-2674 · Isc +3 · Inn2-Inews +8

Name of the Vulnerable Software and Affected Versions: OpenSSH versions prior to 2.3.0 ssh-1 versions prior to 1.2.31 Debian GNU/Linux affected versions not specified Description: The issue concerns multiple vulnerabilities in various packages of the Debian GNU/Linux operating system, including...