Exploitdb Exploits
3,138 exploits tracked across all sources.
Xi Graphics Accelerated-X Server - Buffer Overflow via Long Display or Query Parameter
Buffer overflow in Xi Graphics Accelerated-X server allows local users to gain root access via a long display or query parameter.
by KSR[T]
VMware Workstation 1.0.1 - Buffer Overflow via HOME Environment Variable
Buffer overflow in VMWare 1.0.1 for Linux via a long HOME environmental variable.
by funkysh
Solaris - Buffer Overflow via NETMGT_PROC_SERVICE Request
Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request.
by Cheez Whiz
Solaris - Buffer Overflow via NETMGT_PROC_SERVICE Request
Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request.
by Cheez Whiz
SCO Open Server 5.0.5 - X Library Buffer Overflow (2)
by The Dark Raver of CPNE
tcpdump 3.4a - Denial of Service via Zero-Length Header Packet
ip_print procedure in Tcpdump 3.4a allows remote attackers to cause a denial of service via a packet with a zero length header, which causes an infinite loop and core dump when tcpdump prints the packet.
by badi
Internet Information Server 4.0 - Denial of Service via Malformed .HTR/.IDC/.STM Request
Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions.
by Greg Hoglund
Internet Information Server 4.0 - Denial of Service via Malformed .HTR/.IDC/.STM Request
Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions.
by eeye security
KDE K-Mail < 1.1 - Privilege Escalation via Symlink Attack in Temporary Directories
KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories.
by Brian Mitchell
Solaris - Remote Procedure Call Forwarding via rpc.statd SM_MON and SM_NOTIFY Commands
rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SM_MON and SM_NOTIFY commands, which in turn could be used to remotely exploit other bugs such as in automountd.
by anonymous
Linux Kernel 2.2.x - Denial of Service via Malformed ICMP Packets
Denial of service in Linux 2.2.x kernels via malformed ICMP packets containing unusual types, codes, and IP header lengths.
by Piotr Wilkin
Ethereal - Denial of Service via Malformed DNS Packet
tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while decompressing the packet.
by Hugo Breton
IRIX 6.5-6.5.2 - Unauthenticated Information Disclosure and Denial of Service via nsd Virtual Filesystem
nsd in IRIX 6.5 through 6.5.2 exports a virtual filesystem on a UDP port, which allows remote attackers to view files and cause a possible denial of service by mounting the nsd virtual file system.
by Jefferson Ogata
xosview 1.5.1 - Privilege Escalation
xosview 1.5.1 in Red Hat 5.1 allows local users to gain root access via a long HOME environmental variable.
by Chris Evans
Linux Kernel 2.0 Sendmail - Denial of Service
by Michal Zalewski
University of Washington IMAP - Buffer Overflow via POP-2D FOLD Command
Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command.
by Chris Evans
Solaris - Buffer Overflow via Long -p Option
Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option.
by ADM
Solaris - Buffer Overflow via LC_MESSAGES Environmental Variable
Buffer overflow in Solaris libc, ufsrestore, and rcp via LC_MESSAGES environmental variable.
by UNYUN
Solaris - Buffer Overflow via LC_MESSAGES Environmental Variable
Buffer overflow in Solaris libc, ufsrestore, and rcp via LC_MESSAGES environmental variable.
Solaris - Buffer Overflow via LC_MESSAGES Environmental Variable
Buffer overflow in Solaris libc, ufsrestore, and rcp via LC_MESSAGES environmental variable.
by UNYUN
Solaris - Buffer Overflow via LC_MESSAGES Environmental Variable
Buffer overflow in Solaris libc, ufsrestore, and rcp via LC_MESSAGES environmental variable.
by Georgi Guninski
Windows 2000 and NT - Buffer Overflow in Remote Access Service via Malformed Phonebook Entry
Buffer overflow in Remote Access Service (RAS) client allows an attacker to execute commands or cause a denial of service via a malformed phonebook entry.
by David Litchfield
Windows NT 4.0 - Buffer Overflow via Malformed Help File
Buffer overflow in Windows NT 4.0 help file utility via a malformed help file.
by David Litchfield
By Source