29 matches found
GMime GMIME_UUENCODE_LEN宏缓冲区溢出漏洞
BUGTRAQ ID: 38078 GMime是一个C/C++库,用于创建和解析MIME消息。 GMime的GMIMEUUENCODELEN宏错误的计算了uuencode操作所生成的最大输出字节数,当使用GMime库的应用在 uuencode特制输入数据的时候可能溢出两个字节的缓冲区,导致执行任意代码。 GNOME GMime 2.4.14 厂商补丁: GNOME ----- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: http://ftp.gnome.org/pub/GNOME/sources/gmime/2.4/gmime-2.4.15.changes...
Apache 2.8.17 mod_ssl SSL-Util-UUEncode-Binary栈缓冲区溢出漏洞
No description provided by source...
ClamAV antivirus multiple security vulnerabilities
Protection bypass with UUEncode, race conditions on temporary files creation...
SpeedProject multiple archiver buffer overflow
Buffer overflows on ZIP, ACE and UUEncode formats parsing...
CVE-2004-0051: Undefined Security Weakness
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard but frequently supported Content-Transfer-Encoding values such as 1 uuencode, 2 mac-binhex40, and 3 yenc, which may be interpreted differently by...
mod_ssl ssl_util_uuencode_binary CA issue
Stack-based buffer overflow in the sslutiluuencodebinary function in sslutil.c for Apache modssl, when modssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN...
PT-2004-1606 · Apache · Apache Mod Ssl +1
Name of the Vulnerable Software and Affected Versions: Apache mod ssl affected versions not specified Description: The issue is related to a stack-based buffer overflow in the ssl util uuencode binary function. This occurs when mod ssl is configured to trust the issuing CA and a client certificat...
clamav integer overflow
Integer overflow on UUENCODE parsing...
CVE-1999-1263
CVE-1999-1263 affects Metamail prior to 2.7-7.2. A remote attacker can overwrite arbitrary files via an e-mail with a uuencoded attachment that specifies a full pathname, processed by Metamail scripts such as sun-audio-file. Root cause is the handling of uuencode in Metamail scripts, enabling arb...