sgi propack 2.4 vulnerabilities and exploits

(subscribe to this query)

The AIM dissector in Ethereal 0.10.3 allows remote malicious users to cause a denial of service (assert error) via unknown attack vectors.

Ethereal Group Ethereal 0.10.1 Ethereal Group Ethereal 0.10.2 Ethereal Group Ethereal 0.10.3 Sgi Propack 2.4 Sgi Propack 3.0

Ethereal 0.10.3 allows remote malicious users to cause a denial of service (crash) via certain SIP messages between Hotsip servers and clients.

Ethereal Group Ethereal 0.10.1 Ethereal Group Ethereal 0.10.2 Ethereal Group Ethereal 0.10.3 Sgi Propack 2.4 Sgi Propack 3.0

The SPNEGO dissector in Ethereal 0.9.8 to 0.10.3 allows remote malicious users to cause a denial of service (crash) via unknown attack vectors that cause a null pointer dereference.

Ethereal Group Ethereal 0.10.1 Ethereal Group Ethereal 0.10.2 Ethereal Group Ethereal 0.10.3 Sgi Propack 2.4 Sgi Propack 3.0

Buffer overflow in the MMSE dissector for Ethereal 0.10.1 to 0.10.3 allows remote malicious users to cause a denial of service and possibly execute arbitrary code.

Ethereal Group Ethereal 0.10.1 Ethereal Group Ethereal 0.10.2 Ethereal Group Ethereal 0.10.3 Sgi Propack 2.4 Sgi Propack 3.0

Multiple buffer overflows in Metamail 2.7 and previous versions allow remote malicious users to execute arbitrary code.

Metamail Corporation Metamail Sgi Propack 2.3 Sgi Propack 2.4 Redhat Enterprise Linux 2.1 Redhat Linux Advanced Workstation 2.1

Multiple format string vulnerabilities in Metamail 2.7 and previous versions allow remote malicious users to execute arbitrary code.

Metamail Corporation Metamail Sgi Propack 2.3 Sgi Propack 2.4 Redhat Enterprise Linux 2.1 Redhat Linux Advanced Workstation 2.1

1 EDB exploit

Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files.

Sgi Propack 2.4 Sgi Propack 3.0 Utempter Utempter 0.5.2 Utempter Utempter 0.5.3 Slackware Slackware Linux Slackware Slackware Linux 9.1

1 EDB exploit

gdk-pixbuf prior to 0.20 allows malicious users to cause a denial of service (crash) via a malformed bitmap (BMP) file.

Gnome Gdkpixbuf 0.18 Gnome Gdkpixbuf 0.20 Redhat Gdk Pixbuf 0.18.0-7 Sgi Propack 2.3 Sgi Propack 2.4 Redhat Enterprise Linux 2.1 Redhat Enterprise Linux 3.0 Redhat Linux Advanced Workstation 2.1

The (1) post and (2) trigger scripts in sysstat 4.0.7 and previous versions allow local users to overwrite arbitrary files via symlink attacks on temporary files, a different vulnerability than CVE-2004-0108.

Redhat Sysstat 4.0.7-3 Sgi Propack 2.3 Sgi Propack 2.4 Sysstat Sysstat 4.0.7 Sysstat Sysstat 4.1.1 Sysstat Sysstat 4.1.2 Sysstat Sysstat 4.1.3 Sysstat Sysstat 4.1.4 Sysstat Sysstat 4.1.5 Sysstat Sysstat 4.1.6 Sysstat Sysstat 4.1.7 Sysstat Sysstat 5.0.1

The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CAN-2004-0107.

Redhat Sysstat 4.0.7-3 Sgi Propack 2.3 Sgi Propack 2.4 Sysstat Sysstat 4.0.7 Sysstat Sysstat 4.1.1 Sysstat Sysstat 4.1.2 Sysstat Sysstat 4.1.3 Sysstat Sysstat 4.1.4 Sysstat Sysstat 4.1.5 Sysstat Sysstat 4.1.6 Sysstat Sysstat 4.1.7 Sysstat Sysstat 5.0.1

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook