Format string

Format string vulnerability in the mdiaginitialize function in gtk/src/rbgtkmessagedialog.c in Ruby-GNOME 2 aka Ruby/Gnome2 0.16.0, and SVN versions before 20071127, allows context-dependent attackers to execute arbitrary code via format string specifiers in the message parameter...

Ruby多个库SSL多个不安全证书验证漏洞

BUGTRAQ ID: 26421 CVE ID:CVE-2007-5770 CNCVE ID:CNCVE-20075770 Yukihiro Matsumoto Ruby是一种解释型的方便快捷的面向对象脚本语言。 Ruby包含的多个库在对X.509证书验证存在问题，远程攻击者可以利用漏洞进行中间人攻击，获得敏感信息。 多个Ruby Net模块处理SSL证书验证存在问题，库没有对SSL服务器证书中的common name CN的请求的主机名进行检查，可导致中间人攻击。攻击者借此可嗅探到敏感信息。 Yukihiro Matsumoto Ruby 1.8.6 Yukihiro Matsumo...

SEC Consult SA-20071012-0 :: Madwifi xrates element remote DOS

SEC Consult Security Advisory 20071012-0 =================================================================================== title: Madwifi xrates element remote DOS program: Madwifi linux wlan driver for atheros chipsets vulnerable version: Madwifi = 0.9.3.2 homepage: www.madwifi.org found: July...

CVE-2007-4883

Cross-site scripting XSS vulnerability in the BotQuery extension in MediaWiki 1.7.x and earlier before SVN 20070910 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a similar issue to CVE-2007-4828...

[Full-disclosure] Secunia Research: KVIrc irc:// URI Handler Command Execution Vulnerability

====================================================================== Secunia Research 26/06/2007 - KVIrc irc:// URI Handler Command Execution Vulnerability - ====================================================================== Table of Contents Affected...

Fixed in Apache Tomcat 5.5.18, 5.0.SVN

Moderate: Cross-site scripting CVE-2006-7195 The implicit-objects.jsp in the examples webapp displayed a number of unfiltered header values. This enabled a XSS attack. These values are now filtered. Affects: 5.0.0-5.0.30, 5.5.0-5.5.17...

Update: ViewCVS and ViewVC 'checkout view' content type fixation issue

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi! Moritz Naumann wrote: This does not impact how much the rest of my report applies. My findings are now being discussed on the ViewVC developers mailing list 1. They apparently also impact ViewVC. Whether and to which degree what I am reporting c...

[SA23826] Django Two Vulnerabilities

TITLE: Django Two Vulnerabilities SECUNIA ADVISORY ID: SA23826 VERIFY ADVISORY: http://secunia.com/advisories/23826/ CRITICAL: Moderately critical IMPACT: Security Bypass, System access WHERE: From remote SOFTWARE: Django 0.x http://secunia.com/product/13287/ DESCRIPTION: Some vulnerabilities hav...

FreeBSD : mplayer -- buffer overflow in the code for RealMedia RTSP streams. (b2ff68b2-9f29-11db-a4e4-0211d87675b7)

A potential buffer overflow was found in the code used to handle RealMedia RTSP streams. When checking for matching asm rules, the code stores the results in a fixed-size array, but no boundary checks are performed. This may lead to a buffer overflow if the user is tricked into connecting to a...

mplayer -- buffer overflow in the code for RealMedia RTSP streams.

A potential buffer overflow was found in the code used to handle RealMedia RTSP streams. When checking for matching asm rules, the code stores the results in a fixed-size array, but no boundary checks are performed. This may lead to a buffer overflow if the user is tricked into connecting to a...

Two crash vulnerabilities in Freeciv 2.1.0-beta1 (SVN 15 Jul 2006)

Luigi Auriemma Application: Freeciv http://www.freeciv.org Versions: = 2.1.0-beta1 and SVN = 15 Jul 2006 Platforms: Windows, nix, BSD, MacOS and more Bugs: A memcpy crash in generichandleplayerattributechunk B invalid memory access in handleunitorders Exploitation: remote, versus server Date: 23...

Buffer-overflow in recvTextMessage and NETrecvFile in Warzone Resurrection 2.0.3 (SVN 127)

Luigi Auriemma Application: Warzone Resurrection http://home.gna.org/warzone/ Warzone 2100 http://www.strategyplanet.com/warzone2100/ Versions: = 2.0.3 and SVN = 127 Platforms: Windows, nix, BSD and others Bug: A buffer-overflow in recvTextMessage B buffer-overflow in NETrecvFile Exploitation: A...

CVE-2006-3788

Multiple buffer overflows in multiplay.cpp in UFO2000 svn 1057 allow remote attackers to execute arbitrary code via 1 a long unit name in Net::recvaddunit,; 2 large values to Net::recvrules, Net::recvselectunit, Net::recvoptions, and Net::recvunitdata; and 3 a large mapdata GEODATA structure in...

Format string

Format string vulnerability in the raydiumlog function in console.c in Raydium before SVN revision 310 allows local users to execute arbitrary code via format string specifiers in the format parameter, which are not properly handled in a call to raydiumconsolelineadd...

CVE-2006-2410

raydiumnetworknetcallexec function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to cause a denial of service application crash via a packet of type 0xFF, which causes a null dereference...

CVE-2006-2408

Raydium is affected by multiple buffer overflows prior to SVN revision 310. The vulnerability allows remote attackers to execute arbitrary code by sending a large packet, exploiting two code paths: raydium_log in log.c and raydium_console_line_add in console.c, potentially triggered by a long pla...

CVE-2006-2409

CVE-2006-2409 affects Raydium prior to SVN revision 310, where a format string vulnerability in the raydium_log function (console.c) can allow local users to execute arbitrary code through format specifiers in the format parameter, not properly handled in a call to raydium_console_line_add. Affec...

CVE-2006-2410

raydiumnetworknetcallexec function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to cause a denial of service application crash via a packet of type 0xFF, which causes a null dereference...

Raydium <= SVN 309 Multiple Remote Vulnerabilities Exploit

Exploit for unknown platform in category dos / poc ========================================================== Raydium = SVN 309 Multiple Remote Vulnerabilities Exploit ========================================================== http://www.inj3ct0r.com/sploits/6147.zip 0day.today 2018-04-12...

raydium svn 309 - Multiple Vulnerabilities

raydium svn 309 - Multiple Vulnerabilities Raydium = SVN 309 Multiple Remote Vulnerabilities Exploit https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/1784.zip 05132006-raydiumx.zip...