6187 matches found
Samba Multiple Unspecified Remote Buffer Overflow Vulnerabilities
Description Multiple remote buffer overflow vulnerabilities have been reported for Samba and Samba-TNG. Although unspecified, it is likely that these issues are exploitable by an attacker to execute arbitrary code. All code executed in this manner would be run with the privileges of Samba,...
Microsoft Windows 2000NT 4 - RPC Locator Service Remote Overflow
Microsoft Windows 2000NT 4 - RPC Locator Service Remote Overflow / rpcexp.c RPC LOCATOR Exploit Autor: Marcin Wolak mail: [email protected] Last update: 30 march 2003 / / About Compilation: What You need to compile rpcexp.c ? 1. MS Platform SDK August SDK is sufficient. 2. Compilator f.e. MS Visual...
Microsoft Windows 2000/NT 4 - RPC Locator Service Remote Overflow
/ rpcexp.c RPC LOCATOR Exploit Autor: Marcin Wolak mail: [email protected] Last update: 30 march 2003 / / About Compilation: What You need to compile rpcexp.c ? 1. MS Platform SDK August SDK is sufficient. 2. Compilator f.e. MS Visual C++ 6.0. rpcns4.lib is needed for linking. / / Usage You want to...
mkpasswd uses weak random number generator
Overview Mkpasswd generates passwords that are insufficiently random. Description Mkpasswd is a password generation utility included with Red Hat Linux and possibly other Linux distributions. Mkpasswd generates passwords that are not sufficiently random, which may allow an attacker to predict...
CVE-2002-0250: Undefined Security Weakness
Web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A.03.07 and earlier, allows unauthorized users to bypass authentication via a direct HTTP request to the webaccess.html file, which allows the user to change the switch's configuration and modify the...
Moderate: Red Hat Security Advisory: : : : Updated file packages fix vulnerability
Updated file packages are available to close a buffer overflow vulnerability. Updated 16 April 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries systems. The file command is used to identify a particular file according to the type of data contained in the file. The file utility...
File 3.x - Utility Local Memory Allocation
File 3.x - Utility Local Memory Allocation // source: https://www.securityfocus.com/bid/7009/info It has been reported that a memory allocation issue exists the file program. Although details of this issue are currently unavailable, it is likely that this issue could be exploited to cause a denia...
HP-UX 10.x - stmkfont Alternate Typeface Library Buffer Overflow (1)
// source: https://www.securityfocus.com/bid/6836/info A buffer overflow vulnerability has been reported in the stmkfont utility shipped with HP-UX systems. The problem occurs due to insufficient bounds checking on user-suplied data to the alternate typeface library command-line option. A local...
CVE-2002-1692
Buffer overflow in backup utility of Microsoft Windows 95 allows attackers to execute arbitrary code by causing a filename with a long extension to be placed in a folder to be backed up...
[RAZOR] Problems with mkstemp()
Common use of 'tmpwatch' utility and its counterparts triggers race conditions in many applications Michal Zalewski [email protected], 12/05/2002 Copyright C 2002 by Bindview Corporation 1 Scope and exposure info -------------------------- A common practice of installing 'tmpwatch' utili...
Trend Micro PC-cillin 200020022003 - Mail Scanner Buffer Overflow
Trend Micro PC-cillin 200020022003 - Mail Scanner Buffer Overflow source: https://www.securityfocus.com/bid/6350/info A buffer overflow vulnerability has been reported for PC-cillin's mail scanning utility. An attacker can exploit this vulnerability by connecting to a vulnerable pop3trap.exe...
Rational ClearCase 4.1 - Portscan Denial of Service
source: https://www.securityfocus.com/bid/6228/info Rational ClearCase has been reported to be prone to a denial of service condition. It is possible to cause this condition by portscanning a system running the vulnerable version of ClearCase. This issue was demonstrated using the nmap portscanni...
Rational ClearCase 4.1 - Portscan Denial of Service
Rational ClearCase 4.1 - Portscan Denial of Service source: https://www.securityfocus.com/bid/6228/info Rational ClearCase has been reported to be prone to a denial of service condition. It is possible to cause this condition by portscanning a system running the vulnerable version of ClearCase...
HP CIFS/9000 Server A.01.05/A.01.06 - Local Buffer Overflow
// source: https://www.securityfocus.com/bid/5088/info A vulnerability has been reported in the /opt/cifsclient/bin/cifslogin utility distributed with CIFS/9000. The utility is prone to several buffer overflow conditions and may lead to root compromise. The vulnerability occurs due to the lack of...
dvips uses system() function insecurely thereby allowing arbitrary command execution
Overview A vulnerability in the dvips utility can allow a remote attacker to execute arbitrary code on a vulnerable system. Description The dvips utility is used to convert DVI files to PostScriptTM. Typically the output is sent to the printer.RHSA-2002:194-18 states the vulnerability occurs...
CVE-2002-1128
Buffer overflow in inc mail utility for Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long MH environment variable...
Multiple OS /bin/login Remote Overflow
The remote implementation of the /bin/login utility, used when authenticating a user via telnet or rsh contains an overflow which allows an attacker to gain a shell on this host, without even sending a shell code. An attacker may use this flaw to log in as any user except root on the remote host....
GV 2.x3.x - .PDF.PS File Buffer Overflow (2)
GV 2.x3.x - .PDF.PS File Buffer Overflow 2 // source: https://www.securityfocus.com/bid/5808/info gv is a freely available, open source Portable Document Format PDF and PostScript PS viewing utility. It is available for Unix and Linux operating systems. It has been reported that an insecure sscan...
GV 2.x/3.x - '.PDF'/'.PS' File Buffer Overflow (1)
// source: https://www.securityfocus.com/bid/5808/info gv is a freely available, open source Portable Document Format PDF and PostScript PS viewing utility. It is available for Unix and Linux operating systems. It has been reported that an insecure sscanf function exists in gv. Due to this...
