W3C Amaya 9.4 - legend color Attribute Value Overflow

source: https://www.securityfocus.com/bid/17507/info W3C Amaya is susceptible to multiple remote buffer-overflow vulnerabilities. These issues are due to the application's failure to properly bounds-check user-supplied data before copying it to insufficiently sized memory buffers. Remote attacker...

W3C Amaya 9.4 - textarea rows Attribute Value Overflow

source: https://www.securityfocus.com/bid/17507/info W3C Amaya is susceptible to multiple remote buffer-overflow vulnerabilities. These issues are due to the application's failure to properly bounds-check user-supplied data before copying it to insufficiently sized memory buffers. Remote attacker...

[BuHa-Security] Stack Based Buffer Overflow Vulnerability in Amaya 9.4

-----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 --------------------------------------------------- | BuHa Security-Advisory 10 | Apr 12th, 2006 | --------------------------------------------------- | Vendor | W3C's Amaya | | URL | http://www.w3.org/Amaya/ | | Version | = 9.4 | | Risk | Critic...

vis.pl.txt

Hackers Center Security Group http://www.hackerscenter.com/ spher3's Security Advisory Multiple transversal bug in vis.pl -------------------------------------------------------------------------- Description: Vis.pl is a perl script which manages files in order to show these; you can find it in...

Ubuntu 4.10 / 5.04 / 5.10 : w3c-libwww vulnerability (USN-220-1)

Sam Varshavchik discovered several buffer overflows in the HTBoundaryputblock function. By sending specially crafted HTTP multipart/byteranges MIME messages, a malicious HTTP server could trigger an out of bounds memory access in the libwww library, which causes the program that uses the library ...

Mandrake Linux Security Advisory : w3c-libwww (MDKSA-2005:210)

Sam Varshavchik discovered the HTBoundaryputblock function in HTBound.c for W3C libwww w3c-libwww allows remote servers to cause a denial of service segmentation fault via a crafted multipart/byteranges MIME message that triggers an out-of-bounds read. The updated packages have been patched to...

MailEnable IMAPD W3C Logging Buffer Overflow

This module exploits a buffer overflow in the W3C logging functionality of the MailEnable IMAPD service. Logging is not enabled by default and this exploit requires a valid username and password to exploit the flaw. MailEnable Professional version 1.6 and prior and MailEnable Enterprise version 1...

MailEnable IMAP W3C Logging Buffer Overflow

Added: 12/03/2005 CVE: CVE-2005-3155 BID: 15006 OSVDB: 19842 Background MailEnable is a mail server for Windows platforms. The standard edition supports the SMTP and POP3 protocols. MailEnable Professional and MailEnable Enterprise also support IMAP and HTTPMail. Problem MailEnable's IMAP service...

MailEnable IMAP W3C Logging Buffer Overflow

Added: 12/03/2005 CVE: CVE-2005-3155 BID: 15006 OSVDB: 19842 Background MailEnable is a mail server for Windows platforms. The standard edition supports the SMTP and POP3 protocols. MailEnable Professional and MailEnable Enterprise also support IMAP and HTTPMail. Problem MailEnable's IMAP service...

MailEnable IMAP W3C Logging Buffer Overflow

Added: 12/03/2005 CVE: CVE-2005-3155 BID: 15006 OSVDB: 19842 Background MailEnable is a mail server for Windows platforms. The standard edition supports the SMTP and POP3 protocols. MailEnable Professional and MailEnable Enterprise also support IMAP and HTTPMail. Problem MailEnable's IMAP service...

MailEnable 1.54 Pro - Universal IMAPD W3C Logging Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

MailEnable 1.54 Pro - Universal IMAPD W3C Logging Buffer Overflow (Metasploit)

MailEnable 1.54 Pro - Universal IMAPD W3C Logging Buffer Overflow Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as...

W3C libwww library buffer overflow

Buffer overflow on MIME headers parsing...

[SA17119] W3C Libwww Multipart MIME Data Handling Vulnerability

TITLE: W3C Libwww Multipart MIME Data Handling Vulnerability SECUNIA ADVISORY ID: SA17119 VERIFY ADVISORY: http://secunia.com/advisories/17119/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: W3C Libwww 5.x http://secunia.com/product/5849/ DESCRIPTION: Sam Varshavchik has reporte...

CVE-2005-3183

The HTBoundaryputblock function in HTBound.c for W3C libwww w3c-libwww allows remote servers to cause a denial of service segmentation fault via a crafted multipart/byteranges MIME message that triggers an out-of-bounds read...

CVE-2005-3183

The HTBoundaryputblock function in HTBound.c for W3C libwww w3c-libwww allows remote servers to cause a denial of service segmentation fault via a crafted multipart/byteranges MIME message that triggers an out-of-bounds read...

CVE-2005-3183

CVE-2005-3183 – affected software: w3c-libwww (HTBoundary_put_block in HTBound.c). Root cause/impact: remote servers can induce a denial of service (segmentation fault) by sending a crafted multipart/byteranges MIME message that triggers an out-of-bounds read. This matches the description in the ...

Fedora Core 3 : w3c-libwww-5.4.0-10.0.FC3.1 (2005-953)

This update fixes libwww's handling of multipart/byteranges content and a possible stack overflow. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora Core 4 : w3c-libwww-5.4.0-13.0.FC4.1 (2005-952)

This update fixes libwww's handling of multipart/byteranges content and a possible stack overflow. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

oracle_xmldb_css.txt

Cross-Site-Scripting Vulnerability in Oracle XMLDB Name Cross-Site-Scripting Vulnerability in Oracle XMLDB Systems Affected Oracle Database 9i Rel. 2 Severity Low Risk Category Cross Site Scripting CSS/XSS Vendor URL http://www.oracle.com This advisory...