SonicWALL Global VPN Client 4.0.782 - Remote Format String

SonicWALL Global VPN Client 4.0.782 - Remote Format String source: https://www.securityfocus.com/bid/26689/info SonicWALL Global VPN Client is prone to a remote format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a...

CVE-2007-6183

Format string vulnerability in the mdiaginitialize function in gtk/src/rbgtkmessagedialog.c in Ruby-GNOME 2 aka Ruby/Gnome2 0.16.0, and SVN versions before 20071127, allows context-dependent attackers to execute arbitrary code via format string specifiers in the message parameter...

CVE-2007-6183

Format string vulnerability in the mdiaginitialize function in gtk/src/rbgtkmessagedialog.c in Ruby-GNOME 2 aka Ruby/Gnome2 0.16.0, and SVN versions before 20071127, allows context-dependent attackers to execute arbitrary code via format string specifiers in the message parameter...

CVE-2007-6183

CVE-2007-6183: A format-string vulnerability in Ruby-GNOME 2 (Ruby-GNOME2) 0.16.0 and SVN builds before 20071127 affects the mdiag_initialize function in gtk/src/rbgtkmessagedialog.c. The message parameter’s format specifiers can allow context-dependent attackers to execute arbitrary code. The is...

Ruby/Gnome2 0.16.0 Format String Vulnerability

RubyGnome2 0.16.0 Format String Vulnerability In Gtk::MessageDialog http://em386.blogspot.com Ruby Gnome2 is a project to provide GTK2 bindings to ruby scripts so you can write GUI code in less time. There is a format string vulnerability in Gtk::MessageDialog. This design flaw does not allow for...

CVE-2007-3880

Format string vulnerability in srsexec in Sun Remote Services SRS Net Connect 3.2.3 and 3.2.4, as distributed in the SRS Proxy Core SUNWsrspx package, allows local users to gain privileges via format string specifiers in unspecified input that is logged through syslog...

CVE-2007-3880

CVE-2007-3880 is a format-string vulnerability in the srsexec binary of Sun Remote Services Net Connect (SUNWsrspx), affecting Solaris 8/9/10 via NetConnect 3.2.3/3.2.4. An attacker with local access to a set-UID root srsexec can trigger syslog handling of crafted input containing format specifie...

DTSA-84-1 perdition - format string vulnerability

Bulletin has no description...

Ubuntu 5.10 / 6.06 LTS / 6.10 : php5 regression (USN-424-2)

USN-424-1 fixed vulnerabilities in PHP. However, some upstream changes were not included, which caused errors in the stream filters. This update fixes the problem. We apologize for the inconvenience. Multiple buffer overflows have been discovered in various PHP modules. If a PHP application...

CVE-2007-5396

Miranda IM 0.7.1 is affected by a format-string vulnerability in the ext_yahoo_contact_added function (yahoo.c) that allows remote code execution via a Y7 Buddy Authorization packet containing format specifiers in the contact Yahoo! handle (who). This CVE-2007-5396 issue is triggered by crafted i...

Ubuntu 5.10 / 6.06 LTS / 6.10 : ekiga, gnomemeeting vulnerability (USN-434-1)

It was discovered that Ekiga had format string vulnerabilities beyond those fixed in USN-426-1. If a user was running Ekiga and listening for incoming calls, a remote attacker could send a crafted call request, and execute arbitrary code with the user's privileges. Note that Tenable Network...

CVE-2003-1531

Cross-site scripting XSS vulnerability in testcgi.exe in Lilikoi Software Ceilidh 2.70 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string...

Fedora 7 : sylpheed-2.3.1-5 (2007-1841)

Ulf Harnhammar Secunia Research has discovered a format string vulnerability in sylpheed and claws-mail in incputerror function in src/inc.c when displaying POP3 error reply. Problem can be exploited by malicious POP3 server via specially crafted POP3 server replies containing format specifiers...

CVE-2007-5825

Format string vulnerability in the wsaddarg function in webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to execute arbitrary code via a stats method action to /xml-rpc with format string specifiers in the 1 username or 2 password portion of base64-encoded...

CVE-2007-5825

Format string vulnerability in the wsaddarg function in webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to execute arbitrary code via a stats method action to /xml-rpc with format string specifiers in the 1 username or 2 password portion of base64-encoded...

CVE-2007-5825

CVE-2007-5825 is a format-string vulnerability in the mt-daapd Firefly Media Server (ws_addarg in webserver.c) that can be triggered via the Authorization: Basic header (base64 username/password) in XML-RPC requests, allowing remote code execution. The issue affects Firefly MT‑DAAPD up to version...

uph0703.py.txt

!C:\python25\python25.exe """ Advisory : UPH-07-03 mt-dappd/Firefly media server remote format string vulnerability Discovered by nnp http://www.unprotectedhex.com """ import sys import socket import base64 if lensys.argv != 3: sys.exit-1 fmtstr = base64.b64encode"%n"16 + ":" + "password" killmsg...

Perdition IMAPD IMAP Tag Remote Format String Arbitrary Code Execution

The remote IMAP service is actually a Perdition IMAP proxy. The version of Perdition installed on the remote host appears to be affected by a format string vulnerability in which it copies the IMAP tag into a character buffer without first validating it and then passes it to 'vsnprintf' as a form...

Perdition 1.17 - IMAPD __STR_VWRITE Remote Format String

source: https://www.securityfocus.com/bid/26270/info Perdition IMAP proxy server is prone to a remote format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. An attacker can exploit this issu...

[Full-disclosure] SEC Consult SA-20071031-0 :: Perdition IMAP Proxy Format String Vulnerability

SEC Consult Security Advisory 20071031-0 ==================================================================================== title: Perdition IMAP proxy strvwrite format string vulnerability program: Perdition Mail Retrieval Proxy vulnerable version: =1.17 homepage: http://www.vergenet.net/ foun...