CVE-2006-6750

XM Easy Personal FTP Server is affected by a format string vulnerability in the PORT handling which can cause a denial of service (crash). The issue is documented for version 5.0.1, with related notes mentioning 5.3.0 in consolidated records. Root cause is improper handling of format specifiers i...

CVE-2006-6692

CVE-2006-6692 affects Zabbix before 20061006, where format string vulnerabilities in logging paths (zabbix_log and zabbix_syslog) can trigger a denial of service (application crash) and potentially allow arbitrary code execution. The root cause is improper handling of format string specifiers in ...

CVE-2006-6664

Format string vulnerability in Marathon Aleph One before 0.17.1 and 2006-12-17 might allow remote attackers to cause a denial of service application crash or execute arbitrary code via format string specifiers in the TopLevelLogger::logMessageV function in Misc/Logging.cpp. NOTE: some details wer...

CVE-2006-6664

The CVE-2006-6664 issue affects Marathon Aleph One prior to 0.17.1 and on 2006-12-17, where a format string vulnerability in TopLevelLogger::logMessageV in Misc/Logging.cpp could allow remote attackers to cause an application crash (DoS) or execute arbitrary code. This risk is supported by the NV...

CVE-2006-6664

Format string vulnerability in Marathon Aleph One before 0.17.1 and 2006-12-17 might allow remote attackers to cause a denial of service application crash or execute arbitrary code via format string specifiers in the TopLevelLogger::logMessageV function in Misc/Logging.cpp. NOTE: some details wer...

GLSA-200612-17 : GNU Radius: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200612-17 GNU Radius: Format string vulnerability A format string vulnerability was found in the sqllog function from the SQL accounting code for radiusd. That function is only used if one or more of the 'postgresql', 'mysql' or...

CVE-2006-6105

Format string vulnerability in the host chooser window gdmchooser in GNOME Foundation Display Manager gdm allows local users to execute arbitrary code via format string specifiers in a hostname, which are used in an error dialog...

CVE-2006-6105

The CVE-2006-6105 issue affects the GNOME Display Manager (gdm), specifically the host chooser window (gdmchooser). The vulnerability arises from format string handling in a hostname used in an error dialog, allowing a local attacker to execute arbitrary code via crafted input. Reports across mul...

CVE-2006-6105

Format string vulnerability in the host chooser window gdmchooser in GNOME Foundation Display Manager gdm allows local users to execute arbitrary code via format string specifiers in a hostname, which are used in an error dialog...

USN-396-1: gdm vulnerability

A format string vulnerability was discovered in the gdmchooser component of the GNOME Display Manager. By typing a specially crafted host name, local users could gain gdm user privileges, which could lead to further account information exposure...

CVE-2006-6495

Stack-based buffer overflow in ld.so.1 in Sun Solaris 8, 9, and 10 allows local users to execute arbitrary code via large precision padding values in a format string specifier in the format parameter of the doprf function. NOTE: this issue normally does not cross privilege boundaries, except in...

CVE-2006-6306

Format string vulnerability in Novell Modular Authentication Services NMAS in the Novell Client 4.91 SP2 and SP3 allows users with physical access to read stack and memory contents via format string specifiers in the Username field of the logon window...

CVE-2006-6306

Format string vulnerability in Novell Modular Authentication Services NMAS in the Novell Client 4.91 SP2 and SP3 allows users with physical access to read stack and memory contents via format string specifiers in the Username field of the logon window...

CVE-2006-6306

The CVE-2006-6306 entry documents a local format-string vulnerability in NMAS within the Novell Client 4.91 SP2/SP3. The flaw affects the Username field of the logon window, allowing users with physical access to read stack and memory contents via format specifiers. The connected documents do not...

CVE-2006-6250

Format string vulnerability in Songbird Media Player 0.2 and earlier allows remote attackers to cause a denial of service crash via an M3U Playlist file containing extended ASCII, which causes the Unicode converter to be invoked...

CVE-2006-6250

Format string vulnerability in Songbird Media Player 0.2 and earlier allows remote attackers to cause a denial of service crash via an M3U Playlist file containing extended ASCII, which causes the Unicode converter to be invoked...

CVE-2006-6250

CVE-2006-6250 : Format string vulnerability in Songbird Media Player 0.2 and earlier allows a remote attacker to cause a denial of service (crash) by supplying an M3U playlist with extended ASCII, which invokes the Unicode converter. No further exploitation details are provided in the connected d...

CVE-2006-6250: Undefined Security Weakness

Format string vulnerability in Songbird Media Player 0.2 and earlier allows remote attackers to cause a denial of service crash via an M3U Playlist file containing extended ASCII, which causes the Unicode converter to be invoked...

CVE-2006-6226

Multiple format string vulnerabilities in NeoEngine 0.8.2 and earlier, and CVS 3422, allow remote attackers to cause a denial of service and possibly execute arbitrary code via 1 Console::Render in neoengine/console.cpp and 2 TextArea::Render in neowtk/textarea.cpp...

[Full-disclosure] Layered Defense Advisory: Novell Client 4.91 Format String Vulnerability

================================================== Layered Defense Advisory 1 December 2006 ================================================== 1 Affected Software Novell Client 4.91 SP2 Novell Client 4.91 SP2 Patch Kit Novell Client 4.91 SP3 Earlier versions may also be vulnerable...