S-077: Vulnerability in Message Queuing


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-077: Vulnerability in Message Queuing
# 1  
Old 12-24-2007
S-077: Vulnerability in Message Queuing

A remote code execution vulnerability exists in the Message Queuing Service when it incorrectly validates input strings before passing the strings to a buffer. The risk is MEDIUM. A remote code execution.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

6 More Discussions You Might Find Interesting

1. IP Networking

Common Vulnerability

Hi there, I am trying to find info about the commonly used ports and how it can be vulnerable and to identify them? For example, I would like to identify how to man-in-the-middle using these ports 21(FTP),22(SSH),23(TELNET), (1 Reply)
Discussion started by: alvinoo
1 Replies

2. UNIX and Linux Applications

Ssmtp -t < /path/to/the/message.txt (How to format message.txt for html email)

ssmtp has been running well under Kubuntu 12.04.1 for plain text messages. I would like to send html messages with ssmtp -t < /path/to/the/message.txt, but I cannot seem to get the message.txt file properly formatted. I have tried various charsets, Content-Transfer-Encoding, rearranging the... (0 Replies)
Discussion started by: Ronald B
0 Replies

3. Programming

[XQuery] How to Convert from JSON Message to XML Message with XQuery

Hi guys, I'm in a job of converting a restful webservice to soap. Tool for convertation uses XQuery. Now i need to convert a message like this: { "firstName": "John", "midName": null, "lastName": "Smith", "married": false, "address": { "streetAddress": "21 2nd... (5 Replies)
Discussion started by: tien86
5 Replies

4. Programming

Accept (sockets) queuing up connection requests

Yes, I guess that is what it is sort of meant to do but it is sort of a problem. Scenario: Server is running and is blocked at ACCEPT Client A connects with server Server returns from ACCEPT and moves to RECV call waiting for incoming string Client... (4 Replies)
Discussion started by: Kam5FCC
4 Replies

5. Programming

How to limit max no of message in a posix message queue

Hii can anyone pls tell how to limit the max no of message in a posix message queue. I have made changes in proc/sys/fs/mqueue/msg_max But still whenever i try to read the value of max. message in the queue using attr.mq_curmsgs (where struct mq_attr attr) its giving the default value as 10.... (0 Replies)
Discussion started by: mohit3884
0 Replies

6. UNIX for Advanced & Expert Users

0821-077 ping: illegal packet size.

Hi, When i try this command ping ukblx151.ukhx.astrazeneca.net -n 3 | grep icmp it gives following error :mad:: 0821-077 ping: illegal packet size. But when i give command ping ukblx151.ukhx.astrazeneca.net It returns correct output.:D Could you please help? (2 Replies)
Discussion started by: vishal_ranjan
2 Replies
Login or Register to Ask a Question
NNTPGET(1)						      General Commands Manual							NNTPGET(1)

NAME
nntpget - get Usenet articles from a remote NNTP server SYNOPSIS
nntpget [ -d dist ] [ -f file ] [ -n newsgroups ] [ -t timestring ] [ -o ] [ -u file ] [ -v ] host DESCRIPTION
Nntpget connects to the NNTP server at the specified host and retrieves articles from it. The Message-ID's of the desired articles are read from standard input. The articles are sent to standard output. OPTIONS
-o The ``-o'' option may be used only if the command is executed on the host where the innd(8) server is running. If this option is used, nntpget connects to the specified remote host to retrieve articles. Any article not present in the local history database is then fetched from the remote site and offered to the local server. -v If the ``-v'' option is used with the ``-o'' option then the Message-ID of each article will be sent to standard output as it is processed. -f The list of article Message-ID's is normally read from standard input. If the ``-f'' option is used, then a ``newnews'' command is used to retrieve all articles newer then the modification date of the specified file. -u The ``-u'' option is the same except that if the transfer succeeded, the file will be updated with a statistics line, modifying its timestamp so that it can be used in later invocations. -t If the ``-t'' option is used, then the specified timestring is used as the time and date parameter to the ``newnews'' command. -n If either the ``-t'' or ``-f'' options are used, then the ``-n'' option may be used to specify a newsgroup list. The default is ``*''. -d The ``-d'' option may be used to specify a distribution list when using the ``-t'' or ``-f'' options. The default is no distribu- tion list. HISTORY
Written by Rich $alz <rsalz@uunet.uu.net> for InterNetNews. This is revision 1.2, dated 1998/01/28. SEE ALSO
innd(8). NNTPGET(1)