115 matches found
IBM DB2 - db2start Command Line Argument Local Overflow
IBM DB2 - db2start Command Line Argument Local Overflow source: https://www.securityfocus.com/bid/8990/info IBM DB2 has been reported to be prone to multiple buffer overflow vulnerabilities that present themselves in binaries that are shipped with DB2. The vulnerabilities are likely caused due to...
IBM DB2 - db2stop Command Line Argument Local Overflow
IBM DB2 - db2stop Command Line Argument Local Overflow source: https://www.securityfocus.com/bid/8990/info IBM DB2 has been reported to be prone to multiple buffer overflow vulnerabilities that present themselves in binaries that are shipped with DB2. The vulnerabilities are likely caused due to ...
man-db[] multiple(4) vulnerabilities.
part 1: addtodirlist buffer overflow man-db contains a buffer overflow vulnerability do to the lack of bounds checking in multiple sscanf calls. which formats the user supplied file /.manpath. here is the functionsrc/manp.c: static void addtodirlist FILE config, int user char bp; char bufBUFSIZ;...
Winamp < 3.0b Multiple File Handling DoS
The remote host is using Winamp3, a popular media player which handles many files format mp3, wavs and more... This version suffers from multiple buffer overflow and denial of service issues that can be triggered by specially crafted b4s files. To perform an attack, the attack would have to send ...
ftp_banner.txt
Banner Buffer Overflows found in Multible FTP Clients Discovered by Dennis Rand www.Infowarfare.dk ------------------------------------------------------------------------ SUMMARY A client side vulnerability in the product allows remote servers to cause the client to crash by sending it a large...
[SECURITY] [DSA 224-1] New canna packages fix buffer overflow and denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 224-1 [email protected] http://www.debian.org/security/ Martin Schulze January 8th, 2002 http://www.debian.org/security/faq -...
[SECURITY] [DSA 224-1] New canna packages fix buffer overflow and denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 224-1 [email protected] http://www.debian.org/security/ Martin Schulze January 8th, 2002 http://www.debian.org/security/faq -...
CVE-2002-1378
Multiple buffer overflows in OpenLDAP2 OpenLDAP 2 2.2.0 and earlier allow remote attackers to execute arbitrary code via 1 long -t or -r parameters to slurpd, 2 a malicious ldapfilter.conf file that is not properly handled by getfilter functions, 3 a malicious ldaptemplates.conf that causes an...
[SECURITY] [DSA-209-1] two wget problems
------------------------------------------------------------------------ Debian Security Advisory DSA-209-1 [email protected] http://www.debian.org/security/ Wichert Akkerman December 12, 2002 - ------------------------------------------------------------------------ Package : wget Problem type...
OpenSSL contains multiple buffer overflows in buffers that are used to hold ASCII representations of integers
Overview OpenSSL is an open-source implementation of the Secure Sockets Layer SSL protocol. There is a buffer overflow on 64-bit platforms related to the ASCII representation of integers. Description OpenSSL clients and servers running on 64-bit platforms prior to version 0.9.6e and pre-release...
[SECURITY] [DSA 121-1] New xtell packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 121-1 [email protected] http://www.debian.org/security/ Martin Schulze March 11th, 2002 - -------------------------------------------------------------------------- Package : xtell...
More security problems in bftpd-1.0.12. Thanx ASYNCHRO ([email protected])
Subject : Potential security problem in bftpd Buffer Overflow and format bug Author : Christophe BAILLEUX [email protected] Greetings : Greetings to ASYNCHRO [email protected] for his first advisory Plateforms : nix Test version : bftpd-1.0.12 I. Introduction bftpd is a Linux FTP server with chroot...
[ Hackerslab bug_paper ] Linux ORACLE 8.1.5 vulnerability
================================================================================ Hackerslab bugpaper Linux ORACLE 8.1.5 vulnerability ================================================================================ File : Oracle 8.1.5 SYSTEM : LINUX Tested by RedHat Linux 6.2 INFO : There are two...
ISC BIND 8.2.2 / IRIX 6.5.17 / Solaris 7.0 - NXT Overflow / Denial of Service
// source: https://www.securityfocus.com/bid/788/info There are several vulnerabilities in recent BIND packages pre 8.2.2. The first is a buffer overflow condition which is a result of BIND improperly validating NXT records. The consequence of this being exploited is a remote root compromise...
Stanford University bootpd 2.4.3 Debian 2.0 - netstd
Stanford University bootpd 2.4.3 Debian 2.0 - netstd // source: https://www.securityfocus.com/bid/324/info The netstd package, included with the Debian GNU/Linux distribution is vulnerable to two buffer overflow attacks. The first is in the bootp server, the second in the FTP client. Bootpd versi...