Mandrake Linux Security Advisory : utempter (MDKSA-2004:031-1)

Steve Grubb discovered two potential issues in the utempter program : 1 If the path to the device contained /../ or /./ or //, the program was not exiting as it should. It would be possible to use something like /dev/../tmp/tty0, and then if /tmp/tty0 were deleted and symlinked to another importa...

Mandrake Linux Security Advisory : php (MDKSA-2004:068)

"Stefan Esser discovered a remotely exploitable vulnerability in PHP where a remote attacker could trigger a memorylimit request termination in places where an interruption is unsafe. This could be used to execute arbitrary code. As well, Stefan Esser also found a vulnerability in the handling of...

CVS 1.11.x - Multiple Vulnerabilities

CVS 1.11.x - Multiple Vulnerabilities // source: https://www.securityfocus.com/bid/10499/info CVS is prone to multiple vulnerabilities. The issues include a double free vulnerability, format string vulnerabilities, and integer overflows. There is also a null termination issue in the security patc...

CVS 1.11.x - Multiple Vulnerabilities

// source: https://www.securityfocus.com/bid/10499/info CVS is prone to multiple vulnerabilities. The issues include a double free vulnerability, format string vulnerabilities, and integer overflows. There is also a null termination issue in the security patch for BID 10384, potentially leading t...

MDKSA-2004:031 - Updated utempter packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrakelinux Security Update Advisory Package name: utempter Advisory ID: MDKSA-2004:031 Date: April 19th, 2004 Affected versions: 10.0, 9.1, 9.2, Corporate Server 2.1, Multi Network Firewall 8.2 Problem Description: Steve Grubb discovered two...

[Full-Disclosure] Listbox And Combobox Control Buffer Overflow

======================================================================== = Listbox And Combobox Control Buffer Overflow = = MS Bulletin posted: October 15, 2003 = http://www.microsoft.com/technet/security/bulletin/MS03-045.asp = = Affected Software: = Microsoft Windows NT 4.0 = Microsoft Windows...

Microsoft Windows XP2000 - PostThreadMessage() Arbitrary Process Killing

Microsoft Windows XP2000 - PostThreadMessage Arbitrary Process Killing // source: https://www.securityfocus.com/bid/8747/info A vulnerability has been discovered in the Microsoft Windows operating system. The flaw lies in the way that processes handle messages sent from another process via the...

prockill.txt

========================================================================= = Process Killing - Playing with PostThreadMessage = = [email protected] = http://www.security-assessment.com = = Originally posted: October 02, 2003...

Microsoft Windows XP/2000 - PostThreadMessage() Arbitrary Process Killing

// source: https://www.securityfocus.com/bid/8747/info A vulnerability has been discovered in the Microsoft Windows operating system. The flaw lies in the way that processes handle messages sent from another process via the PostThreadMessage API call. Reports indicate that, if a running process h...

DEBIAN-CVE-2003-0777

saned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not properly handle dropped connections, which can prevent strings from being null terminated and cause a denial of service segmentation fault...

Gordano Messaging Suite 9.0 - 'WWW.exe' Denial of Service

source: https://www.securityfocus.com/bid/8576/info It has been reported that Gordano Messaging Suite may be prone to a denial of service issue allowing a remote attacker to send malformed HTTP GET requests to cause the WWW.exe process to crash. The problme may lead to the termination of services...

Real Server 7/8/9 Remote Root Exploit (Windows & Linux)

No description provided by source. / / THCREALbad 0.4 - Wind0wZ & Linux remote root exploit / Exploit by: Johnny Cyberpunk thehackerschoice / THC PUBLIC SOURCE MATERIALS / / http://www.service.real.com/help/faq/security/rootexploit082203.html / / After successful exploitation of a Linux box just...

[Opera 7] Five DoS codes on general web sites

--------------------------------------------------------------------------------- TITLE :Opera 7 Five DoS codes on general web sites -= Fastest browser on earth, Fastest crash on earth too =- PRODUCT : Opera for Windows VERSIONS : 7.11b build 2887 7.11 build 2880 7.10 build 2840 7.03 build 2670...

Opera 7 - Denial of Service

Opera 7 - Denial of Service source: https://www.securityfocus.com/bid/8066/info Opera has been reported to be prone to five denial of service vulnerabilities. These issues can be triggered when the browser attempts to interpret a document with malformed code. Exploitation could cause the browser ...

DSA-332 linux-kernel-2.4.17 - several vulnerabilities

Bulletin has no description...

CVE-2002-0429

CVE-2002-0429 affects Linux kernels 2.4.18 and earlier on x86, via the iBCS compatibility interface (the lcall path in arch/i386/kernel/traps.c). The vulnerability enables a local unprivileged user to kill arbitrary processes. Connected advisories confirm affected architectures and that patches e...

Qpopper 4.0.x - Remote Memory Corruption

// source: https://www.securityfocus.com/bid/7058/info A memory corruption vulnerability has been discovered in Qpopper version 4.0.4 and earlier. The vulnerability occurs when calling the 'mdef' command and a malicious macro name is supplied. By filling a target buffer with a malicious macro nam...

Qpopper 4.0.x - Remote Memory Corruption

Qpopper 4.0.x - Remote Memory Corruption // source: https://www.securityfocus.com/bid/7058/info A memory corruption vulnerability has been discovered in Qpopper version 4.0.4 and earlier. The vulnerability occurs when calling the 'mdef' command and a malicious macro name is supplied. By filling a...

3Ware 3DM denial of service attack

I've reported this to 3ware at least twice, and never received any response. Previously I didn't have a test case other than "run a nessus scan against the host". I've narrowed it down to a reproducible minimum test case now. If you connect to 3dm port 1080 on either linux or windows and send: GE...

PT-2002-2273 · Cyrus · Cyrus Sasl Library

Name of the Vulnerable Software and Affected Versions: Cyrus SASL library versions 2.1.9 and earlier Description: The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via multiple buffer overflows. These overflows can occur due to long inputs during...