Internet Explorer wininet.dll URL parsing memory corruption details

Vendor: Microsoft Software: Internet Explorer 6.0, 5.5, 5.01 Problem: Memory corruption, code execution Remote: Yes Risk Level: Medium to low hard to exploit Authors: Axle ICQ 755756 bug discovery 3APA3A, http://www.security.nnov.ru/ bug research Original URL:...

CVE-2005-0176

The shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other processes, which could cause sensitive memory to be swapped to disk, which could allow it to be read by other users once it has been released...

Debian DSA-029-2 : proftpd - remote DOS & potential buffer overflow

The following problems have been reported for the version of proftpd in Debian 2.2 potato : - There is a memory leak in the SIZE command which can result in a denial of service, as reported by Wojciech Purczynski. This is only a problem if proftpd cannot write to its scoreboard file; the default...

Debian DSA-228-1 : libmcrypt - buffer overflows and memory leak

Ilia Alshanetsky discovered several buffer overflows in libmcrypt, a decryption and encryption library, that originates from improper or lacking input validation. By passing input which is longer than expected to a number of functions multiple functions are affected the user can successfully make...

GLSA-200407-03 : Apache 2: Remote denial of service attack

The remote host is affected by the vulnerability described in GLSA-200407-03 Apache 2: Remote denial of service attack A bug in the protocol.c file handling header lines will cause Apache to allocate memory for header lines starting with TAB or SPACE. Impact : An attacker can exploit this...

WU-FTPD < 2.6.0 'SITE NEWER' Command Memory Exhaustion DoS

Binary data 1807.prm...

SUSE-SA:2003:030: radiusd-cistron

The remote host is missing the patch for the advisory SUSE-SA:2003:030 radiusd-cistron. The package radiusd-cistron is an implementation of the RADIUS protocol. Unfortunately the RADIUS server handles too large NAS numbers not correctly. This leads to overwriting internal memory of the server...

DSA-498 libpng - out of bound access

Bulletin has no description...

WinSCP 3.5.6 - Long URI Handling Memory Corruption

source: https://www.securityfocus.com/bid/10160/info It has been reported that WinSCP may be prone to a denial of service condition resulting from memory corruption. This issue occurs when the application attempts to handle excessively long 'sftp:' or 'scp' addresses. WinSCP 3.5.6 is reported to ...

[SECURITY] [DSA 456-1] New Linux 2.2.19 packages fix local root exploit (arm)

-------------------------------------------------------------------------- Debian Security Advisory DSA 456-1 [email protected] http://www.debian.org/security/ Martin Schulze March 6th, 2004 http://www.debian.org/security/faq -...

DSA-410 libnids - buffer overflow

Bulletin has no description...

GEdit 2.0/2.2 - Large IOStream File Memory Corruption

// source: https://www.securityfocus.com/bid/9090/info A problem has been reported in the handling of certain file types by gEdit. Memory corruption may occur when handling files containing long strings. Because of this, it may be possible to cause memory corruption. / simple buffer overflow...

Trillian v.0.74* Remote DoS

Advisory Название : Trillian v.0.74 - удаленная DoS Сайт : www.trillian.cc Платформа : win32 Автор : lobsta/h [email protected] Информация о программном продукте Trillian - популярный чат-клиент, поддерживающий IRC, AIM, ICQ, MSN Messenger, и Yahoo! Messenger. Примечание к статье Основным отличие...

Mod_NTLM 0.x - Authorisation Format String

source: https://www.securityfocus.com/bid/7393/info A format string vulnerability has been reported for the modntlm Apache module. The problem occurs when logging authentication strings passed in HTTP requests. By passing malicious format specifiers in a request, it may be possibile for an attack...

PHP 4.x - socket_recvfrom() Signed Integer Memory Corruption

PHP 4.x - socketrecvfrom Signed Integer Memory Corruption source: https://www.securityfocus.com/bid/7198/info A vulnerability has been reported in PHP versions 4.3.1 and earlier. The problem occurs in the socketrecvfrom and may allow an attacker to corrupt memory. Specifically, the affected...

PHP 4.x - socket_recv() Signed Integer Memory Corruption

PHP 4.x - socketrecv Signed Integer Memory Corruption source: https://www.securityfocus.com/bid/7197/info A vulnerability has been reported in PHP versions 4.3.1 and earlier. The problem occurs in the socketrecv and may allow an attacker to corrupt memory. Specifically, the affected function fail...

PHP 4.x - 'socket_recvfrom()' Signed Integer Memory Corruption

source: https://www.securityfocus.com/bid/7198/info A vulnerability has been reported in PHP versions 4.3.1 and earlier. The problem occurs in the socketrecvfrom and may allow an attacker to corrupt memory. Specifically, the affected function fails to carry out sanity checks on user-supplied...

Qpopper 4.0.x - Remote Memory Corruption

// source: https://www.securityfocus.com/bid/7058/info A memory corruption vulnerability has been discovered in Qpopper version 4.0.4 and earlier. The vulnerability occurs when calling the 'mdef' command and a malicious macro name is supplied. By filling a target buffer with a malicious macro nam...

TRU64 /usr/sbin/quot overflow

again ... in light of the non-exec stack talks I am releasing some info I have been sitting on... alpha.snosoft.com uname -a OSF1 alpha.snosoft.com V5.1 732 alpha alpha.snosoft.com id uid=201dotslash gid=15users groups=0system alpha.snosoft.com ls -al /usr/sbin/quot -rwx--s--x 1 bin mem 32832 Aug...

RWhoisd remote format string vulnerability

Hello, there is a serious bug in RWhoisd by NSI on all versions. it is possible for a user to supply the format string passed to printerror simpley by using the "-soa" directive. the results are obvious, we can write almost anywhere in the proc's memory thus executing code as the user running...