FreeBSD : vim -- vulnerabilities in modeline handling (bd9fc2bf-5ffe-11d9-a11a-000a95bc6fae)

Ciaran McCreesh discovered news ways in which a VIM modeline can be used to trojan a text file. The patch by Bram Moolenaar reads : Problem: Unusual characters in an option value may cause unexpected behavior, especially for a modeline. Ciaran McCreesh Solution: Don't allow setting termcap option...

Progress TERM (protermcap) overflows and PROMSGS overflows

A malformed termcaps and promsgs can overwrite memory on progress versions 8 and 9 These are two seperate issues but the below examples show they can be used simultaneously in some cases. These have been patched to my knowledge however I do not know the patch numbers. Put a few thousand chars on...

Ошибки форматной строки в screen (format string)

Ошибка форматной строки при работе с TERMCAP И другие проблемы...

CVE-2000-1184

telnetd in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service by specifying an arbitrary large file in the TERMCAP environmental variable, which consumes resources as the server processes the file...

CVE-2000-1184

telnetd in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service by specifying an arbitrary large file in the TERMCAP environmental variable, which consumes resources as the server processes the file...

Security Advisory: FreeBSD-SA-00:69.telnetd

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:69 Security Advisory FreeBSD, Inc. Topic: telnetd allows remote system resource consumption. Category: core Module: telnetd Announced: 2000-11-14 Credits: Jouko Pynnonen...

Переполнение буфера в ncurses

Переполнение буфера в библиотеке ncurses при разборе переменной среды TERMCAP...

CVE-2000-0388

FreeBSD libmytinfo buffer overflow (CVE-2000-0388) allows local users to execute commands by supplying a long TERMCAP environment variable. The PT-1990-1010 entry confirms this issue in FreeBSD libmytinfo; however, the connected PTSecurity note does not specify affected versions or a fixed versio...

CVE-2000-0388

Buffer overflow in FreeBSD libmytinfo library allows local users to execute commands via a long TERMCAP environmental variable...

Дырка в ncurses под FreeBSD 3

Переполнение буфера в библиотеке libmytinfo при разборе TERMCAP...

CVE-1999-0192

Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmental variable...

[SECURITY] New versions of termcap-compat fixes buffer overflow

We have received a report that former versions of libtermcap contained an exploitable buffer overflow. Debian itself is not exploitable by this bug since termcap was abandoned in favour of terminfo long ago. However, if you have compiled your own programs using termcap or have installed third par...

[SECURITY] New versions of termcap-compat fixes buffer overflow

We have received a report that former versions of libtermcap contained an exploitable buffer overflow. Debian itself is not exploitable by this bug since termcap was abandoned in favour of terminfo long ago. However, if you have compiled your own programs using termcap or have installed third par...

CVE-1999-0192

Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmental variable...

CVE-2000-0388

Buffer overflow in FreeBSD libmytinfo library allows local users to execute commands via a long TERMCAP environmental variable...

PT-1990-1010 · Freebsd · Freebsd

Name of the Vulnerable Software and Affected Versions: FreeBSD affected versions not specified Description: A buffer overflow issue exists in the libmytinfo library of FreeBSD, allowing local users to execute commands by setting a long TERMCAP environmental variable. Recommendations: At the momen...