CVE-2004-2131

CVE-2004-2131 affects IBM Informix Dynamic Server (IDS) 9.40.xC3 and earlier. The flaw is a stack-based buffer overflow in ontape triggered by a long ONCONFIG environment variable, allowing local users with DSA privileges to execute arbitrary code. Affected component is ontape; root cause is unch...

CVE-2005-1679

Stack-based buffer overflow in the error directive in picasm 1.12b and earlier allows attackers to execute arbitrary code via a long error message...

CVE-2005-1256

Stack-based buffer overflow in the IMAP daemon IMAPD32.EXE in IMail 8.13 in Ipswitch Collaboration Suite ICS, and other versions before IMail Server 8.2 Hotfix 2, allows remote authenticated users to execute arbitrary code via a STATUS command with a long mailbox name...

iDEFENSE Security Advisory 05.24.05: Ipswitch IMail IMAP SELECT Command DoS Vulnerability

Ipswitch IMail IMAP SELECT Command DoS Vulnerability iDEFENSE Security Advisory 05.24.05 www.idefense.com/application/poi/display?id=241&type=vulnerabilities May 24, 2005 I. BACKGROUND Ipswitch IMail server is a Windows based messaging solution with a customer base of over 53 million users. More...

CVE-2005-1679

Stack-based buffer overflow in the error directive in picasm 1.12b and earlier allows attackers to execute arbitrary code via a long error message...

CVE-2005-1679

Stack-based buffer overflow in the error directive in picasm 1.12b and earlier allows attackers to execute arbitrary code via a long error message...

CVE-2004-2086

Stack-based buffer overflow in results.stm for Sambar Server before the 6.0 production release allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an HTTP POST request with a long query parameter...

CVE-2005-1544

CVE-2005-1544 describes a stack-based buffer overflow in libTIFF prior to 3.7.2, triggered while processing a TIFF file with a malformed BitsPerSample tag. This allows remote attackers to execute arbitrary code. The OpenVAS and distro advisories (e.g., Debian DSA-755-1, Ubuntu USN-130-1, Mandrake...

CVE-2005-1261

CVE-2005-1261 is a stack-based buffer overflow in Gaim's URL parsing that affects versions before 1.3.0. A remote attacker could trigger arbitrary code execution by sending an IM containing a very large URL. Public disclosures and advisories (SUSE, OpenVAS/Gentoo, Mandrake/CentOS/Ubuntu/Nessus co...

RHEL 2.1 : gaim (RHSA-2005:432)

An updated gaim package that fixes security issues is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. A stack based buffer overfl...

libTIFF: Buffer overflow

Background libTIFF provides support for reading and manipulating TIFF Tag Image File Format images. Description Tavis Ormandy of the Gentoo Linux Security Audit Team discovered a stack based buffer overflow in the libTIFF library when reading a TIFF image with a malformed BitsPerSample tag. Impac...

CVE-2005-0187

Stack-based buffer overflow in the SetSkin function in AtHoc toolbar allows remote attackers to execute arbitrary code via a long skin name...

CVE-2005-0551

Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System CSRSS process of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application that provides console window information with a long...

CVE-2005-0716

Stack-based buffer overflow in the Core Foundation Library in Mac OS X 10.3.5 and 10.3.6, and possibly earlier versions, allows local users to execute arbitrary code via a long CFCHARSETPATH environment variable...

HP-UX PHSS_30056 : s700_800 11.04 Virtualvault 4.7 OWS update

s700800 11.04 Virtualvault 4.7 OWS update : The remote HP-UX host is affected by multiple vulnerabilities : - Potential Apache HTTP server vulnerabilities have been reported: CVE-2003-0545 CVE-2003-0543 CVE-2003-0544 CERT VU935264 CERT VU255484 CERT VU255484 CERT VU686224 CERT VU732952 CERT...

CVE-2005-0162

Openswan pluto vulnerability (CVE-2005-0162): stack-based buffer overflow in get_internal_addresses in Openswan 1.x prior to 1.0.9 and 2.x prior to 2.3.0 when built with XAUTH and PAM. Remote authenticated attackers could execute arbitrary code. Affects the pluto component; exploitation context m...

CVE-2004-1372

CVE-2004-1372 affects IBM DB2 7.x and 8.1. multiple stack-based buffer overflows allow local users to execute arbitrary code via (1) a long third argument to rec2xml, or (2) a long filename argument to generate_distfile. Root cause is stack-based overflow in these input paths; impact is local cod...

CVE-2004-1371

CVE-2004-1371 describes a stack-based buffer overflow in Oracle 9i/10g that allows remote attackers to execute arbitrary code by sending a long token in the text of a wrapped procedure. The vulnerability affects Oracle’s database/server components and can enable remote code execution with the att...

CVE-2004-1332

Stack-based buffer overflow in the FTP daemon in HP-UX 11.11i, with the -v debug option enabled, allows remote attackers to execute arbitrary code via a long command request...

CVE-2004-2269

Stack-based buffer overflow in pads.c in Passive Asset Detection System Pads might allow local users to execute arbitrary code via a long report file name argument. NOTE: since Pads is not normally installed setuid, this may not be a vulnerability...