CWE-119 Archives - CVE Vulnerability

CVE-2008-7232

Sun, 26 Feb 2023 09:11:56 +0000

Buffer overflow in the report function in xtacacsd 4.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted CONNECT TACACS command.

The post CVE-2008-7232 appeared first on CVE Vulnerability.

CVE-2008-7249

Sun, 26 Feb 2023 09:11:56 +0000

Buffer overflow in Squid Analysis Report Generator (Sarg) 2.2.3.1, and probably later, allows user-assisted remote attackers to execute arbitrary code via a long HTTP request method in a crafted access.log file, a different vulnerability than CVE-2008-1167.

The post CVE-2008-7249 appeared first on CVE Vulnerability.

CVE-2008-7224

Sun, 26 Feb 2023 09:11:55 +0000

Buffer overflow in entity_cache in ELinks before 0.11.4rc0 allows remote attackers to cause a denial of service (crash) via a crafted link.

The post CVE-2008-7224 appeared first on CVE Vulnerability.

CVE-2008-7225

Sun, 26 Feb 2023 09:11:55 +0000

Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SSH packets, a different vulnerability than CVE-2008-0151.

The post CVE-2008-7225 appeared first on CVE Vulnerability.

CVE-2008-7227

Sun, 26 Feb 2023 09:11:55 +0000

PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an “in memory buffer,” which prevents the reporting of a service exception, with unknown impact and attack vectors.

The post CVE-2008-7227 appeared first on CVE Vulnerability.

CVE-2008-7174

Sun, 26 Feb 2023 09:11:54 +0000

Multiple buffer overflows in the Jura Internet Connection Kit for the Jura Impressa F90 coffee maker allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors related to improper use of the gets and sprintf functions.

The post CVE-2008-7174 appeared first on CVE Vulnerability.

CVE-2008-7177

Sun, 26 Feb 2023 09:11:54 +0000

Buffer overflow in the listing module in Netwide Assembler (NASM) before 2.03.01 has unknown impact and attack vectors, a different vulnerability than CVE-2008-2719.

The post CVE-2008-7177 appeared first on CVE Vulnerability.

CVE-2008-7182

Sun, 26 Feb 2023 09:11:54 +0000

Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions before 3.9g2, allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long first argument to the APPEND command, a different vector than CVE-2008-1497 and CVE-2008-1498. NOTE: due to lack of details, it is not certain whether this is the same issue as CVE-2008-2859.

The post CVE-2008-7182 appeared first on CVE Vulnerability.

CVE-2008-7162

Sun, 26 Feb 2023 09:11:53 +0000

Buffer overflow in Hero Super Player 3000 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long filename in a .M3U file. NOTE: this might be related to CVE-2008-4504.

The post CVE-2008-7162 appeared first on CVE Vulnerability.

CVE-2008-7166

Sun, 26 Feb 2023 09:11:53 +0000

Buffer overflow in the web interface in BitTorrent 6.0.1 (build 7859) and earlier, and uTorrent 1.7.6 (build 7859) and earlier, allows remote attackers to cause a denial of service (memory consumption and crash) via a crafted Range header. NOTE: this is probably a different vulnerability than CVE-2008-0071 and CVE-2008-0364.

The post CVE-2008-7166 appeared first on CVE Vulnerability.