42 matches found
CVE-2005-1738
The provided CVE-2005-1738 data describes a format-string vulnerability in the logPrintBadfile function of delbadfiles.c in Iron Bars SHell (ibsh) prior to version 0.3d. The flaw, triggered by certain inputs not properly handled in a syslog call, allows access to files outside the home directory ...
CVE-2005-1246
Format string vulnerability in the snmppdlog function in snmppdutil.c for snmppd 0.4.5 and earlier may allow remote attackers to cause a denial of service or execute arbitrary code via format string specifiers that are not properly handled in a syslog call...
CVE-2005-1246
Format string vulnerability in the snmppdlog function in snmppdutil.c for snmppd 0.4.5 and earlier may allow remote attackers to cause a denial of service or execute arbitrary code via format string specifiers that are not properly handled in a syslog call...
mtftpd FTP server format string bug
Format string bug on syslog call...
Citadel/UX format string bug
Formatr stirng bug on syslog call...
DHCP format tring bug
Format string bug via DNS name on syslog call...
Speedtouch USB driver for linux format string bugs
Format string bug on syslog call...
Cherokee formatstring bug
Format string bug on syslog call and gile logging in NCSA format, cherokeeloggerncsawritestring...
SUS (extended su) format string bug
Format string bug on syslog call...
GNATS format string bugs
Format string bug in syslog call...
sup format string bug
Format string bug on syslog call...
Format string bug in super
Format string bug on syslog call...
zkfingerd format string bug
Format string on syslog call...
FakeBO format satring bug
Format string bug during syslog call with remote host name...
AOL Server proxy API format string bug
Format string bug on syslog call...
CVE-2002-0916
Format string vulnerability in the allowuser code for the Stellar-X msntauth authentication module, as distributed in Squid 2.4.STABLE6 and earlier, allows remote attackers to execute arbitrary code via format strings in the user name, which are not properly handled in a syslog call...
CVE-2002-0916
This CVE (CVE-2002-0916) affects Squid 2.4.STABLE6 and earlier, in the Stellar-X msntauth authentication module. The issue is a format string vulnerability in the allowuser code that handles the user name, where untrusted input is used in a syslog call, enabling remote code execution. Documents c...
DEBIAN-CVE-2002-0916
Format string vulnerability in the allowuser code for the Stellar-X msntauth authentication module, as distributed in Squid 2.4.STABLE6 and earlier, allows remote attackers to execute arbitrary code via format strings in the user name, which are not properly handled in a syslog call...
CVE-2000-1208
Format string vulnerability in startprinting function of printjob.c in BSD-based lpr lpd package may allow local users to gain privileges via an improper syslog call that uses format strings from the checkremote call...