Monthly Archive: April 2003

hpnst.exe in the GoAhead-Webs webserver for HP Instant TopTools before 5.55 allows remote attackers to cause a denial of service (CPU consumption) via a request to hpnst.exe that calls itself, which causes an infinite...

Buffer overflow in Apple QuickTime Player 5.x and 6.0 for Windows allows remote attackers to execute arbitrary code via a long QuickTime URL. Date published : 2003-04-01 http://www.securityfocus.com/archive/1/317141/30/25220/threaded http://www.securityfocus.com/bid/7247

The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail...

Heap-based buffer overflow in dtsession for Solaris 2.5.1 through Solaris 9 allows local users to gain root privileges via a long HOME environment variable. Date published : 2003-04-01 http://www.securityfocus.com/bid/7240 http://www.securityfocus.com/archive/1/316948/30/25250/threaded

Stack-based buffer overflow in the bsd_queue() function for lpq on Solaris 2.6 and 7 allows local users to gain root privilege. Date published : 2003-04-01 http://www.securityfocus.com/archive/1/316957/30/25250/threaded http://www.ciac.org/ciac/bulletins/n-068.shtml