xpl017elz vulnerabilities and exploits

(subscribe to this query)

Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow malicious users to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 up to and including 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buff...

Wuftpd Wu-ftpd Redhat Wu Ftpd 2.6.1-16 Apple Mac Os X Server 10.2.6 Apple Mac Os X 10.2.6 Sun Solaris 9.0 Freebsd Freebsd Netbsd Netbsd Openbsd Openbsd

5 EDB exploits

Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon (GLD) 1.3 and 1.4 allows remote malicious users to execute arbitrary code via format string specifiers in data that is passed directly to syslog.

Salim Gasmi Gld 1.3 Salim Gasmi Gld 1.4

1 EDB exploit

Multiple heap-based buffer overflows in WsMp3 daemon (WsMp3d) 0.0.10 and previous versions allow remote malicious users to execute arbitrary code via long HTTP requests.

Wsmp3 Wsmp3 Daemon 0.0.9 Wsmp3 Wsmp3 Web Server 0.0.7 Wsmp3 Wsmp3 Daemon 0.0.10 Wsmp3 Wsmp3 Daemon 0.0.8

1 EDB exploit

Untrusted search path vulnerability in Qualcomm qpopper 4.0 up to and including 4.05 allows local users to execute arbitrary code by modifying the PATH environment variable to reference a malicious smbpasswd program.

Qualcomm Qpopper 4.0 Qualcomm Qpopper 4.0 B14 Qualcomm Qpopper 4.0.5 Qualcomm Qpopper 4.0.5 Fc2 Qualcomm Qpopper 4.0.1 Qualcomm Qpopper 4.0.2 Qualcomm Qpopper 4.0.3 Qualcomm Qpopper 4.0.4

1 EDB exploit

Buffer overflow in the changevalue function in libcgi.h for Marcos Luiz Onisto Lib CGI 0.1 allows remote malicious users to execute arbitrary code via a long argument.

Marcos Luiz Onisto Lib Cgi 0.1

1 EDB exploit

Buffer overflow in the httpdProcessRequest function in LibHTTPD 1.2 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP POST request.

Hughes Technologies Libhttpd 1.2

1 EDB exploit

Buffer overflow in webdesproxy 0.0.1 allows remote malicious users to execute arbitrary code via a long URL, possibly involving the process_connection_request function in webdesproxy.c.

Webdesproxy Webdesproxy 0.0.1

2 EDB exploits

Buffer overflow in the parse_url function in the RTSP module (rtsp/parse_url.c) in Fenice 1.10 and previous versions allows remote malicious users to execute arbitrary code via a long URL.

2 EDB exploits

Buffer overflow in hanterm 3.3.1 and previous versions allows local users to execute arbitrary code via a long string in the (1) -fn, (2) -hfb, or (3) -hfn argument.

Hanterm Hanterm 3.3.1 Hanterm Hanterm 3.3

2 EDB exploits

Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apache Tomcat JK Web Server Connector 1.2.19 and 1.2.20, as used in Tomcat 4.1.34 and 5.5.20, allows remote malicious users to execute arbitrary code via a long URL ...

Apache Tomcat Jk Web Server Connector 1.2.20 Apache Tomcat Jk Web Server Connector 1.2.19

2 EDB exploits

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook