5264 matches found
[Full-disclosure] iDEFENSE Security Advisory 09.09.05: GNU Mailutils 0.6 imap4d 'search' Format String Vulnerability
GNU Mailutils 0.6 imap4d 'search' Format String Vulnerability iDEFENSE Security Advisory 09.09.05 www.idefense.com/application/poi/display?id=303&type=vulnerabilities September 09, 2005 I. BACKGROUND The GNU mailutils package is a collection of mail-related utilities, including local and remote...
[Full-disclosure] Operator Shell (osh) Stack-based Buffer Overflow
!/usr/bin/perl OSH 1.7 Exploit 2 Gonna bang away at this until it's removed ;- EDUCATIONAL purposes only.... :- by Charles Stevenson core [email protected] Description: The Operator Shell Osh is a setuid root, security enhanced, restricted shell. It allows the administrator to carefully limit the...
[Full-disclosure] VERITAS NETBACKUP 5.1 'TIME_STAMP' VULNERABILITY
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Update: Contact as finally been ok thanx secfocus and hotfix probably coming soon. VERITAS NETBACKUP 5.1 'TIMESTAMP' VULNERABILITY Date: 07/2005 Risk: Low/Medium Soft: NetBackup 5.1 OS : All supported win32 Fix : coming soon I. VULNERABILITY NETBACKUP...
security flaw
The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of t...
MS Windows Color Management Module Overflow Exploit (MS05-036)
Exploit for unknown platform in category dos / poc ============================================================== MS Windows Color Management Module Overflow Exploit MS05-036 ============================================================== / Author: snooq http://www.redpuffer.net/snooq/web/ Date: 2...
CVE-2005-2263
The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of t...
CVE-2005-2263
The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of t...
CVE-2005-2263
The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of t...
CVE-2005-2263
CVE-2005-2263 affects Firefox (before 1.0.5) and Mozilla (before 1.7.9). The issue arises in InstallTrigger.install: forcing a page navigation after the install method is called causes a callback to be executed in the context of the new page, resulting in a same-origin violation. This means a rem...
FreeBSD : gnu-radius -- SNMP-related denial-of-service (e6f0edd8-0b40-11d9-8a8a-000c41e2cdad)
An iDEFENSE security advisory reports : Remote exploitation of an input validation error in version 1.2 of GNU radiusd could allow a denial of service. The vulnerability specifically exists within the asndecodestring function defined in snmplib/asn1.c. When a very large unsigned number is supplie...
Exploitable crash in InstallVersion.compareTo — Mozilla
When InstallVersion.compareTo is passed an object rather than a string it assumed the object was another InstallVersion without verifying it. When passed a different kind of object the browser would generally crash with an access violation...
Same-origin violation with InstallTrigger callback — Mozilla
The InstallTrigger.install method for launching an install accepts a callback function that will be called with the final success or error status. By forcing a page navigation immediately after calling the install method this callback function can end up running in the context of the new page...
Same origin violation: frame calling top.focus() — Mozilla
A child frame can call top.focus even if the framing page comes from a different origin and has overridden the focus routine. The call is made in the context of the child frame. The attacker would look for a target site with a framed page that makes this call but doesn't verify that its parent...
CVE-2002-1973
The CVE-2002-1973 entry describes a buffer overflow in CHttpServer::OnParseError of the ISAPI extension (Isapi.cpp) when built with MFC static libraries in Visual C++ 5.0 and 6.0 before SP3. This flaw, present in multiple products (including BadBlue), can be triggered by a long query string that ...
Buffer-overflow and crash in Terminator 3: War of the Machines 1.16
Luigi Auriemma Application: Terminator 3: War of the Machines http://www.atari.com/us/games/terminator3war/pc Versions: = 1.16 Platforms: Windows Bugs: A cd-key hash buffer-overflow B big nickname access violation Exploitation: remote, versus server Date: 26 May 2005 Author: Luigi Auriemma e-mail...
Mozilla fails to properly prevent "JavaScript:" URIs containing "eval()" from being executed in the context of other URIs in the history list
Overview Mozilla fails to properly restrict the execution of javascript: URIs. The impact is similar to that of a cross-site scripting vulnerability, which allows an attacker to access data in other sites. Description Mozilla uses a same origin security model to maintain separation between browse...
CVE-2005-0312
WarFTPd (WarFTPD) 1.82 RC9/RC11 contains a denial-of-service vulnerability exploitable by a crafted CWD path consisting of a long string of "%s" sequences, potentially indicating a format-string issue. The flaw affects remote authenticated users (NT service context noted for RC9). Public referenc...
CVE-2002-1588
Mailtool for OpenWindows 3.6, 3.6.1, and 3.6.2 allows remote attackers to cause a denial of service mailtool segmentation violation and crash via a malformed mail attachment...
WarFTPD 1.82 RC9 DoS
Hello, due to an access violation, specialy crafted CWD-Commands will exit the FTP server when running as a NT service. User needs to be logged on. Vendor's report can be found at http://support.jgaa.com/index.php?cmd=ShowReport&ID=02643 Solution: deny anonymous or untrusted logins or use patched...
