CVE-2008-1552
Published Mar 31, 2008The silc_pkcs1_decode function in the silccrypt library (silcpkcs1.c) in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.7, SILC Client before 1.1.4, and SILC Server b…
Vendor archive
silc CVEs
Beta · best-effort7 CVEs tagged to vendor silc — 0 Critical, 3 High, 3 Medium, 1 Low, 0 Unrated.
CVE-2008-1429
Published Mar 20, 2008Secure Internet Live Conferencing (SILC) Server before 1.1.1 allows remote attackers to cause a denial of service (daemon crash) via a NEW_CLIENT packet without a nickname.
CVE-2008-1227
Published Mar 10, 2008Stack-based buffer overflow in the silc_fingerprint function in lib/silcutil/silcutil.c in Secure Internet Live Conferencing (SILC) Toolkit 1.1.5, and unspecified earlier versions…
CVE-2007-3728
Published Jul 12, 2007Buffer overflow in lib/silcclient/client_notify.c of SILC Client and SILC Toolkit before 1.1.2 allows remote attackers to cause a denial of service via "NICK_CHANGE" notifications.
CVE-2007-1327
Published Mar 7, 2007The SILC_SERVER_CMD_FUNC function in apps/silcd/command.c in silc-server 1.0.2 allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via a reque…
CVE-2005-2809
Published Sep 7, 2005silc daemon (silcd.c) in Secure Internet Live Conferencing (SILC) 1.0 and earlier allows local users to overwrite arbitrary files via a symlink attack on the silcd.[PID].stats tem…
CVE-2003-1439
Published Dec 31, 2003Secure Internet Live Conferencing (SILC) 0.9.11 and 0.9.12 stores passwords and sessions in plaintext in memory, which could allow local users to obtain sensitive information.
Showing 1-7 of 7 CVEsPage 1 of 1