CVE-2012-4076

Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in a command that calls the system library function, aka Bug IDs CSCtf23559 and CSCtf27780...

WebSTAR FTP Server - USER Overflow (Metasploit)

$Id: webstarftpuser.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

CentOS Update for PyXML CESA-2010:0002 centos4 i386

Check for the Version of PyXML OpenVAS Vulnerability Test CentOS Update for PyXML CESA-2010:0002 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

RedHat Update for PyXML RHSA-2010:0002-01

Check for the Version of PyXML OpenVAS Vulnerability Test RedHat Update for PyXML RHSA-2010:0002-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Debian Security Advisory DSA 946-1 (sudo)

The remote host is missing an update to sudo announced via advisory DSA 946-1. It has been discovered that sudo, a privileged program, that provides limited super user privileges to specific users, passes several environment variables to the program that runs with elevated privileges. In the case...

Heap overflow

Heap-based buffer overflow in Microsoft Infotech Storage System Library itss.dll allows user-assisted attackers to execute arbitrary code via a crafted CHM / ITS file that triggers the overflow while decompiling...

CVE-2006-2297

The CVE-2006-2297 entry documents a heap-based buffer overflow in Microsoft Infotech Storage System Library (itss.dll) that can be triggered by a crafted CHM/ITS file during decompiling, enabling user-assisted arbitrary code execution. Connected advisories (e.g., CPAI-2006-195) describe the flaw ...

CVE-2006-2297: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Microsoft Infotech Storage System Library itss.dll allows user-assisted attackers to execute arbitrary code via a crafted CHM / ITS file that triggers the overflow while decompiling...

mysql -- mysql_real_connect buffer overflow vulnerability

The mysqlrealconnect function doesn't properly handle DNS replies by copying the IP address into a buffer without any length checking. A specially crafted DNS reply may therefore be used to cause a buffer overflow on affected systems. Note that whether this issue can be exploitable depends on the...