Firebird process_packet() Remote Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Firebird SQL server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the database service fbserver.exe, which binds to TCP port 3050. When processing a...

Format string in The Dawn of Time 1.69s beta4

Luigi Auriemma Application: The Dawn of Time http://www.dawnoftime.org Versions: = 1.69s beta4 and 1.69r too Platforms: nix and Windows Bug: format string in web server authorization Exploitation: remote Date: 05 Oct 2007 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...

EMC Legato Networker Remote Exec Service Stack Overflow Vulnerabilities

These vulnerabilities allow remote attackers to execute arbitrary code on vulnerable installations of EMC Networker. Authentication is not required to exploit this vulnerability. The specific flaws exist in the Networker Remote Exec Service, nsrexecd.exe. The location of this service is available...

Stack overflow

Stack-based buffer overflow in the giomgr process in ESRI ArcSDE service 9.2, as used with ArcGIS, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large number that requires more than 8 bytes to represent in ASCII, which triggers the overflow i...

CVE-2007-4278

Stack-based buffer overflow in the giomgr process in ESRI ArcSDE service 9.2, as used with ArcGIS, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large number that requires more than 8 bytes to represent in ASCII, which triggers the overflow i...

PT-2007-5469 · Esri · Esri Arcsde

Name of the Vulnerable Software and Affected Versions: ESRI ArcSDE service version 9.2 Description: The issue allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large number that requires more than 8 bytes to represent in ASCII. This triggers the...

Buffer overflow

Multiple unspecified vulnerabilities in Free-SA before 1.2.2 allow remote attackers to execute arbitrary code via unspecified vectors involving certain 1 sprintf and 2 vsprintf calls in a rindex.c, b rreports.c, c rtopsites.c, d rtopuser.c, e rtypical.c, f ruserdatetime.c, and g rusers.c in...

webdesproxy 0.0.1 - exec-shield GET Remote Code Execution

webdesproxy 0.0.1 - exec-shield GET Remote Code Execution / Fedora Core 6 exec-shield based Webdesproxy webdesproxy-0.0.1.tgz remote root exploit reverse connect-back method by Xpl017Elz Advanced exploitation in exec-shield Fedora Core case study URL:...

CVE-2007-2652: Undefined Security Weakness

Multiple unspecified vulnerabilities in Free-SA before 1.2.2 allow remote attackers to execute arbitrary code via unspecified vectors involving certain 1 sprintf and 2 vsprintf calls in a rindex.c, b rreports.c, c rtopsites.c, d rtopuser.c, e rtypical.c, f ruserdatetime.c, and g rusers.c in...

WarFTP 1.65 (USER) Remote Buffer Overlow Exploit (multiple targets)

No description provided by source. include stdio.h include string.h include winsock.h define VULNSERVER "WAR-FTPD 1.65" define VULNCMD "x55x53x45x52x20" define ZERO 'x00' define NOP 'x90' define VULNBUFF 485...

WarFTP 1.65 - 'USER' Remote Buffer Overflow

include include include define VULNSERVER "WAR-FTPD 1.65" define VULNCMD "\x55\x53\x45\x52\x20" define ZERO '\x00' define NOP '\x90' define VULNBUFF 485 define BUFFREAD 128 define PORT 21 define LENJMPESP 4 / WARFTP - VERSION 1.65 WarFTP Username Stack-Based Buffer-Overflow Vulnerability...

QFTP (LIBFtp 3.1-1) (command line) sprintf() local buffer overflow

http://nbpfaus.net/pfau/ftplib/ qftp is a utility that performs file transfers using ftplib based on instructions presented on the command line. Description buffer overflow in sprintf, setumask don't check sizelen of passed argument. Source error in main: 337: case 'm' : setumaskoptarg; break;...

Mercury32 Mail Server 4.01b - check Buffer Overflow (PoC)

Mercury32 Mail Server 4.01b - check Buffer Overflow PoC !/usr/bin/perl mercurypown-v1.pl Mercury/32 Connected\n"; $buf = "1 LOGIN"." "x$LEN-$BUFLEN."\255\n"; sendSOCKET, $buf, 0; sleep$senddelay; print"- Sending payload\n"; $buf = $NOP x 255; sendSOCKET, $buf, 0; sleep$senddelay; print"- Sending...

Mercury/32 Mail Server <= 4.01b (check) Buffer Overflow Exploit PoC

No description provided by source. !/usr/bin/perl mercurypown-v1.pl Mercury/32 v4.01b win32 remote exploit by mu-b - 28 Nov 2006 - Tested on: Mercury/32 v4.01a win32 Mercury/32 v4.01b win32 Stack-based buffer overflow caused by Mercury/32 concatenating continuation data into a fixed sized buffer...

Buffer overflow

Buffer overflow in the t2pwritepdfstring function in tiff2pdf in libtiff 3.8.2 and earlier allows attackers to cause a denial of service crash and possibly execute arbitrary code via a TIFF file with a DocumentName tag that contains UTF-8 characters, which triggers the overflow when a character i...

CVE-2006-2193

Buffer overflow in the t2pwritepdfstring function in tiff2pdf in libtiff 3.8.2 and earlier allows attackers to cause a denial of service crash and possibly execute arbitrary code via a TIFF file with a DocumentName tag that contains UTF-8 characters, which triggers the overflow when a character i...

CVE-2006-2193

Buffer overflow in the t2pwritepdfstring function in tiff2pdf in libtiff 3.8.2 and earlier allows attackers to cause a denial of service crash and possibly execute arbitrary code via a TIFF file with a DocumentName tag that contains UTF-8 characters, which triggers the overflow when a character i...

CVE-2006-2193

Buffer overflow in the t2pwritepdfstring function in tiff2pdf in libtiff 3.8.2 and earlier allows attackers to cause a denial of service crash and possibly execute arbitrary code via a TIFF file with a DocumentName tag that contains UTF-8 characters, which triggers the overflow when a character i...

CVE-2005-4713

Unspecified vulnerability in the SQL logging facility in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service segmentation fault via unspecified vectors, probably involving the pammysqlsqllog function when being used in vsftpd, which does not...

CVE-2005-4713

Unspecified vulnerability in the SQL logging facility in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service segmentation fault via unspecified vectors, probably involving the pammysqlsqllog function when being used in vsftpd, which does not...