41 matches found
bftpd < 1.0.13 Format String Overflow
Binary data 1829.prm...
Icecast < 1.3.10 print_client() Format String
Binary data 2144.prm...
FreeBSD : Arbitrary code execution via a format string vulnerability in jftpgw (82)
The following package needs to be updated: jftpgw %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg65a17a3fed6e11d8aff100061bc2ad93.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...
CVE-2004-0536
Format string vulnerability in Tripwire commercial 4.0.1 and earlier, including 2.4, and open source 2.3.1 and earlier, allows local users to gain privileges via format string specifiers in a file name, which is used in the generation of an email report...
OpenFTP format string bug
Format string bug in SITE msg send command...
Re: mod_ssl-2.8.18-1.3.31 Format string vulnerability
On Fri, Jul 16, 2004, [email protected] wrote: Thought you might like to look at this if you haven't seen it already. Any feedback on it is appreciated. -Packet Storm ----- Forwarded message from Virulent [email protected] ----- Delivered-To: [email protected]...
DreamFTP formatstring bug
Format string bug in username...
CVE-2003-0969
mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via an mp3 file that passes certain strings to the printf function, possibly triggering a format string vulnerability...
eMule/xMule/LMule OP_SERVERMESSAGE Format String Exploit
Exploit for unknown platform in category remote exploits ======================================================== eMule/xMule/LMule OPSERVERMESSAGE Format String Exploit ======================================================== / eMule/xMule/LMule OPSERVERMESSAGE Format String Vulnerability...
miniSQL (mSQL) 1.3 - GID Remote Code Execution
/ /.------ /.------..---- / / \ /\ . // / . /\ / | / .\ . \ / / / \ | / | | slc | - -------||--.---.//-| //-.|----.|| / \ / / mSQL / required by fatal / include include / required by fatal / include include include include include include include include include include include / required by...
DSA-148 hylafax - buffer overflows and format string vulnerabilities
Bulletin has no description...
Inso DynaWeb HTTPd 3.1/4.0.2/4.1 - Format String
// source: https://www.securityfocus.com/bid/5384/info Inso DynaWeb webserver, dwhttpd, is used as a subcomponent in products such as Sun's AnswerBook2, which is shipped as part of the Solaris operating environment. The dwhttpd webserver is prone to a remotely exploitable format-string...
CVE-2002-0175
libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" characters, which are implemented in libc but not libsafe...
eXtremail 1.x/2.1 - Remote Format String (2)
// source: https://www.securityfocus.com/bid/2908/info eXtremail is a freeware SMTP server available for Linux and AIX. eXtremail contains a format-string vulnerability in its logging mechanism. Attackers can send SMTP commands argumented with maliciously constructed arguments that will exploit...
GNU Privacy Guard 1.0.x - Format String
source: https://www.securityfocus.com/bid/2797/info GnuPG is a popular open source public/private key encryption system. It is possible for attackers to create an encrypted document that will exploit a format string vulnerability in the GnuPG client when the document is decrypted. This...
Дырка в gftp (format string)
Ошибка форматной строки...
[RHSA-2001:029-02] New mutt packages fix IMAP vulnerability/incompatibility
--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: New mutt packages fix IMAP vulnerability/incompatibility Advisory ID: RHSA-2001:029-02 Issue date: 2001-03-09 Updated on: 2001-03-13 Product: Red Hat Linux Keywords: mutt IMAP...
format string vulnerability in mars_nwe 0.99pl19
Hello, Marsnwe 0.99.pl19 is vulnerable to remote format string vulnerability, allowing to gain superuser privileges from DOS/Windows workstations attached to mars server. Here is the patch: --- tools.c.orig Fri Jan 26 22:46:34 2001 +++ tools.c Fri Jan 26 22:46:59 2001 @@ -189,7 +189,7 @@...
WU-FTPD 2.4.22.52.6 - Debug Mode Client Hostname Format String
WU-FTPD 2.4.22.52.6 - Debug Mode Client Hostname Format String source: https://www.securityfocus.com/bid/2296/info Wu-ftpd is a widely used unix ftp server. It contains a format string vulnerability that may be exploitable under certain perhaps 'extreme' circumstances. When running in debug mode,...
bftpd NLST Command Output Format String
The remote FTP server, which appears to be Bftpd, has a format string vulnerability in the NLST command. A remote attacker could use this to crash the service, or possibly execute arbitrary code. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderso...