Remote vulnerability in gnuserv/XEmacs

SUMMARY All currently available versions of gnuserv for unix prior to 3.12 are vulnerable to remote exploit due to a buffer overflow and weak security. Gnuserv is a remote control facility for Emacsen. Gnuserv ships with XEmacs but is also available stand-alone from various sources for use with G...

MDKSA-2001:020 - cups update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Linux-Mandrake Security Update Advisory Package name: cups Date: February 1st, 2001 Advisory ID: MDKSA-2001:020 Affected versions: 7.2 Problem Description: A problem exists in all versions of CUPS prior to 1.1.5 with the httpGets function. It could go...

MDKSA-2001:014-1 MySQL update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Linux-Mandrake Security Update Advisory Package name: MySQL Date: January 26th, 2001 Original Advisory Date: January 22nd, 2001 Advisory ID: MDKSA-2001:014-1 Affected versions: 7.1, 7.2, Corporate Server 1.0.1 Problem Description: A security problem...

[SECURITY] [DSA-014-2] Correction: New version of splitvt released

---------------------------------------------------------------------------- Debian Security Advisory DSA-014-2 [email protected] http://www.debian.org/security/ Martin Schulze January 23, 2001 - ---------------------------------------------------------------------------- Package : splitvt...

[SECURITY] [DSA-012-1] New version of micq released

---------------------------------------------------------------------------- Debian Security Advisory DSA-012-1 [email protected] http://www.debian.org/security/ Martin Schulze January 22, 2001 - ---------------------------------------------------------------------------- Package : micq...

Mysql 3.22.x3.23.x - Local Buffer Overflow

Mysql 3.22.x3.23.x - Local Buffer Overflow // source: https://www.securityfocus.com/bid/2262/info MySQL is a widely used Open Source database tool. Versions of MySQL up to and including 3.23.30 are vulnerable to a buffer overflow attack. By supplying an excessively long string as an argument for ...

Advisory: Gaim remote vulnerability

Author: Stan Bubrouski [email protected] Date: November 9, 2000 Package: Gaim Versions affected: 0.10.3 current and previous 0.10.x versions. Severity: A remote user could potentially execute shell code as the user Gaim is running as. Problem:There is a buffer overflow in Gaim's parsing of HTML ta...

CURL-CVE-2000-0973 FTP Server Response Buffer Overflow

When storing an FTP server's error message on failure, there was no check for input length and thus a malicious FTP server could overflow curl's stack based buffer...

[ Hackerslab bug_paper ] HP-UX bdf -t option buffer overflow vul.

================================================================================ Hackerslab bugpaper HP-UX bdf -t option buffer overflow vul ================================================================================ File : /usr/bin/bdf SYSTEM : HP-UX 11.00 Tested by HP-UX B.11.00 INFO : bdf...

CVE-2000-0389

Buffer overflow in krbrdreq function in Kerberos 4 and 5 allows remote attackers to gain root privileges...

iMesh 1.02 vulnerability

================================================================ BluePanda Vulnerability Announcement: iMesh 1.02 Build 116/117 29/06/2000 dd/mm/yyyy [email protected] http://bluepanda.box.sk/ ================================================================ ==================== Brief...

dalnet 4.6.5 remote vulnerability

This was something that w00w00 was originally going to release under the w00giving, but we never did. So, I thought this would fit well with vuln-dev. The complication is that no individual variable is large enough to fit shellcode, so it requires splitting the shellcode between the nickname,...

Tridia DoubleVision 3.0 7.00 - Local Privilege Escalation

Tridia DoubleVision 3.0 7.00 - Local Privilege Escalation // source: https://www.securityfocus.com/bid/1697/info A utility integral to Tridia DoubleVision for SCO UnixWare 7.x has been found to be vulnerable to a buffer overflow attack. dvtermtype, which is setuid root, is run by a user at login...

Solaris 2.52.67.08 ufsrestore - Local Buffer Overflow

Solaris 2.52.67.08 ufsrestore - Local Buffer Overflow // source: https://www.securityfocus.com/bid/1348/info Solaris is a version of the UNIX Operating System distributed by Sun Microsystems. Solaris ships with a filesystem utility called ufsrestore that is used for archive/backup retrieval. A...

innd 2.2.2 remote buffer overflow

Newest innd 2.2.2, probably the most popular usenet news server as well as previous versions contain remotely exploitable, trivial on-stack buffer overflow in control articles handler. Offending piece of code in innd/art.c, function ARTcancelverify: if !EQlocal, p files = NULL; voidsprintfbuff,...

L-Soft Listserv 1.8 - Web Archives Buffer Overflow

// source: https://www.securityfocus.com/bid/1167/info The Web Archive component of L-Soft Listserv contains unchecked buffer code exploitable by sending specially crafted requests to the Web Archive. This weakness will allow execution of arbitrary code by remote attackers...

LCDproc < 0.4.1 screen_add Command Remote Overflow

The remote LCDproc service is vulnerable to a buffer overflow attack when processing commands received from the network due to a lack of bound checks. An attacker may exploit this flaw to execute arbitrary code on the remote host, with the privileges of the LCDproc process usually, nobody. C...

FreeBSD-SA-00:11.ircii

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:11 Security Advisory FreeBSD, Inc. Topic: ircII port contains a remote overflow Category: ports Module: ircII Announced: 2000-04-10 Credits: Derek Callaway via BugTraq...

Sam Hawker wmcdplay 1.0 beta1-2 - Local Buffer Overflow (2)

Sam Hawker wmcdplay 1.0 beta1-2 - Local Buffer Overflow 2 source: https://www.securityfocus.com/bid/1047/info wmcdplay is cdplayer generally used with the WindowMaker X11 window-manager on unix systems. While wmcdplay is rarely installed at all by default, when it is installed it is typically set...

RedHat 4.x/5.x/6.x / RedHat man 1.5 / Turbolinux man 1.5 / Turbolinux 3.5/4.x - 'man' Buffer Overrun (1)

/ source: https://www.securityfocus.com/bid/1011/info RedHat 4.0/4.1/4.2/5.0/5.1/5.2/6.0/6.2,RedHat man 1.5,Turbolinux man 1.5,Turbolinux 3.5/4.2/4.4 man Buffer Overrun Vulnerability A buffer overflow exists in the implementation of the 'man' program shipped with RedHat Linux, and other LInux...