159 matches found
CVE-2008-4575: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in the DoCommand function in jhead before 2.84 might allow context-dependent attackers to cause a denial of service crash via 1 a long -cmd argument and 2 unspecified vectors related to "a bunch of potential string overflows."...
Ubuntu 5.10 / 6.06 LTS / 6.10 : samba vulnerabilities (USN-419-1)
A flaw was discovered in Samba's file opening code, which in certain situations could lead to an endless loop, resulting in a denial of service. CVE-2007-0452 A format string overflow was discovered in Samba's ACL handling on AFS shares. Remote users with access to an AFS share could create craft...
CVE-2002-2253
Multiple buffer overflows in Cyrus Sieve / libSieve 2.1.2 and earlier allow remote attackers to execute arbitrary code via 1 a long header name, 2 a long IMAP flag, or 3 a script that generates a large number of errors that overflow the resulting error string...
USN-419-1: Samba vulnerabilities
A flaw was discovered in Samba's file opening code, which in certain situations could lead to an endless loop, resulting in a denial of service. CVE-2007-0452 A format string overflow was discovered in Samba's ACL handling on AFS shares. Remote users with access to an AFS share could create craft...
Symantec Security Advisory, SYM06-005
Symantec Security Advisory SYM06-005 17 March 2006 Veritas Backup Exec for Windows Servers: Media Server BENGINE Service Job log Format String Overflow Revision History None Severity Low network/system authorization and specific configuration required Remote Access Yes Local Access No...
[Full-disclosure] [ACSSEC-2005-11-25-0x6] FTGate 4.4 [Build 4.4.000 Oct 26 2005] Fo rmat String Overflow
-=+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++=- ACS Security Assessment Advisory - Format String Overflow ID: ACSSEC-2005-11-25 - 0x6 Class: Format String Overflow Package: FTGate 4.4 Build 4.4.000 Oct 26 2005 IMAPd Service Build: Windows NT/2k/XP/2k3 Notified: Dec 01, 2005...
[Full-disclosure] [ACSSEC-2005-11-25-0x5] FTGate 4.4 [Build 4.4.000 Oct 26 2005] Fo rmat String Overflow
-=+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++=- ACS Security Assessment Advisory - Format String Overflow ID: ACSSEC-2005-11-25 - 0x5 Class: Format String Overflow Package: FTGate 4.4 Build 4.4.000 Oct 26 2005 POP3 Service Build: Windows NT/2k/XP/2k3 Notified: Dec 01, 2005 Release...
DEBIAN-CVE-2005-3962
Integer overflow in the format string functionality Perlsvvcatpvfn in Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap and leads to a buffer overflow, as...
FreeBSD : ethereal -- multiple protocol dissectors vulnerabilities (5d51d245-00ca-11da-bc08-0001020eed82)
An Ethreal Security Advisories reports : Our testing program has turned up several more security issues : - The LDAP dissector could free static memory and crash. - The AgentX dissector could crash. - The 802.3 dissector could go into an infinite loop. - The PER dissector could abort. - The DHCP...
ethereal -- multiple protocol dissectors vulnerabilities
An Ethreal Security Advisories reports: Our testing program has turned up several more security issues: The LDAP dissector could free static memory and crash. The AgentX dissector could crash. The 802.3 dissector could go into an infinite loop. The PER dissector could abort. The DHCP dissector...
MailEnable < 1.8.1 mailto Remote Format String Overflow
Binary data 2717.prm...
Debian DSA-259-1 : qpopper - mail user privilege escalation
Florian Heinz posted to the Bugtraq mailing list an exploit for qpopper based on a bug in the included vsnprintf implementation. The sample exploit requires a valid user account and password, and overflows a string in the popmsg function to give the user 'mail' group privileges and a shell on the...
XSA-2004-4: multiple string overflows
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 xine security announcement ========================== Announcement-ID: XSA-2004-4 Summary: Several string overflows on the stack have been fixed in xine-lib, some of them can be used for remote buffer overflow exploits leading to the execution of...
bftpd < 1.0.13 Format String Overflow
Binary data 1829.prm...
APSIS Pound Load Balancer Format String Overflow
The remote server is vulnerable to a remote format string bug which can allow remote attackers to gain access to confidential data. Pound versions less than 1.6 are vulnerable to this issue. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid12007; scriptversion "1.14";...
BolinTech Dream FTP Server 1.02 Format String
This module exploits a format string overflow in the BolinTech Dream FTP Server version 1.02. Based on the exploit by SkyLined. Module Options msf use exploit/windows/ftp/dreamftp/format msf undefinedformat show actions ...actions... msf undefinedformat set ACTION msf undefinedformat show options...
GLSA: ethereal (200303-10)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - --------------------------------------------------------------------- GENTOO LINUX SECURITY ANNOUNCEMENT 200303-10 - - --------------------------------------------------------------------- PACKAGE : ethereal SUMMARY : arbitrary code execution DATE...
DSA-259 qpopper - mail user privilege escalation
Bulletin has no description...
Mysql 3.22.x/3.23.x - Local Buffer Overflow
// source: https://www.securityfocus.com/bid/2262/info MySQL is a widely used Open Source database tool. Versions of MySQL up to and including 3.23.30 are vulnerable to a buffer overflow attack. By supplying an excessively long string as an argument for a SELECT statement, it is possible for a...