what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 5 of 5

Files from Yosef Klein

unrtf.txt

Posted Dec 30, 2004

Authored by Yosef Klein, Limin Wang

A buffer overflow in UnRTF version 0.19.3 may allow for system compromise.

tags | advisory, overflow

SHA-256 | ed8e15b1ff29f2b48ade8b0266ace04da74771910cada6b1022271ca4515fc76

Download | Favorite | View

junkie.txt

Posted Dec 30, 2004

Authored by Yosef Klein

Multiple input validation errors exist in Junkie version 0.3.1 that allow for command execution and directory traversal attacks.

tags | advisory

SHA-256 | 62c04fabfebf6a62c0a093fc92f44b9279d6ed4eeb501753bbdb2d443f62d682

Download | Favorite | View

iglooftp2.txt

Posted Dec 30, 2004

Authored by Yosef Klein

IglooFTP version 0.6.1 suffers from an input validation error that allows for arbitrary file overwrite.

tags | advisory, arbitrary

SHA-256 | 8b10bb047065530990fe3e2cad18f6a45589fd414a2c475d573a9bff11963029

Download | Favorite | View

abcpp.txt

Posted Dec 30, 2004

Authored by Yosef Klein | Site tigger.uic.edu

A vulnerability in abcpp 1.3.0 allows for system compromise.

tags | advisory

SHA-256 | 510976248616273f5a30c8c88b380eefa7ecf07c6d2aa2ba316a63ead781da5e

Download | Favorite | View

tnftp.txt

Posted Dec 30, 2004

Authored by Yosef Klein | Site tigger.uic.edu

A flaw in tnftp exists where it fails to properly validate file names provided by the server. Successful exploitation allows overwriting local files, but requires that a user connects to a malicious ftp server and downloads files.

tags | advisory, local

SHA-256 | dff05585de9e9d4b5e8f328f1cf7e188ee8c4a393bf6e1515fd472aea30727e7

Download | Favorite | View