[SA17554] Sun Solaris in.iked ISAKMP IKE Message Processing Denial of Service

TITLE: Sun Solaris in.iked ISAKMP IKE Message Processing Denial of Service SECUNIA ADVISORY ID: SA17554 VERIFY ADVISORY: http://secunia.com/advisories/17554/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: Sun Solaris 10 http://secunia.com/product/4813/ Sun Solaris ...

PT-2005-4308 · Vubb · Vubb

Name of the Vulnerable Software and Affected Versions: VUBB alpha version rc1 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the t parameter in a "newreply" action. This can occur in the index.php file. Recommendations: F...

[SA16470] Sun StorEdge Enterprise Backup Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2003-1115

CVE-2003-1115 affects Nortel Networks Succession Communication Server 2000’s SIP-T implementation. The SIP stack allows remote attackers to trigger denial of service and potentially execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite. The ava...

CVE-2002-0695

CVE-2002-0695 describes a buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5–2.7, affecting SQL Server 7.0 or 2000. The underlying issue is a buffer overflow in the OpenRowSet path that could allow a remote attacker to execute arbitrary...

PT-2002-3091 · Cisco · Cisco As5350 +1

Name of the Vulnerable Software and Affected Versions: Cisco AS5350 IOS version 12.211T Description: The issue allows remote attackers to cause a denial of service crash via a port scan, possibly due to an ssh bug, when access control lists ACLs are applied and possibly with ssh running. Note tha...

Motorola Cable Modem DOS

I've found it trivial to crash the Motorola Surfboard 4200 Cable modem, as installed default by AT&T Broadband Internet. The modem acts as a bridge, but also has an internal RFC1918 IP address 192.168.100.1. Simply nmap'ing the cable user's IP address, ie: nmap -sS -p 1-1024 12.x.x.x will cause i...

CVE-2001-0558

CVE-2001-0558 affects Jana Webserver 2.01 beta 1 and earlier. A remote attacker can cause a denial of service by sending a URL request that includes an MS-DOS device name (e.g., GET /aux HTTP/1.0). Connected sources corroborate the DOS impact via MS-DOS device names; OpenVAS/Nessus references lis...

CVE-1999-1034

This CVE (CVE-1999-1034) is a local privilege escalation in the login component of AT&T System V Release 4. The NVD entry lists a base score of 7.2 (HIGH) with Local attack vector, low attack complexity, no authentication required, and complete impact on confidentiality, integrity, and availabili...

CVE-1999-1059

Vulnerability in rexec daemon rexecd in AT&T TCP/IP 4.0 for various SVR4 systems allows remote attackers to execute arbitrary commands...

CVE-1999-1059

CVE-1999-1059 affects the rexec daemon (rexecd) in AT&T TCP/IP 4.0 for various SVR4 systems. The vulnerability enables a remote attacker to execute arbitrary commands via rexecd. The provided documents do not specify affected versions beyond AT&T TCP/IP 4.0, nor do they provide remediation steps ...

CVE-1999-1034

Vulnerability in login in AT&T System V Release 4 allows local users to gain privileges...

CVE-2001-0558

T. Hauck Jana Webserver 2.01 beta 1 and earlier allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name i.e. GET /aux HTTP/1.0...

CVE-2001-0167

Buffer overflow in AT&T WinVNC Virtual Network Computing client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string...

CVE-2001-0168

Buffer overflow in AT&T WinVNC Virtual Network Computing server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0...

Remote buffer overflow in DCOM VB T-SQL debugger

BindView Security Advisory -------- Remote buffer overflow in DCOM VB T-SQL debugger Issue Date: March 27, 2001 Contact: [email protected] Topic: Remote buffer overflow in DCOM VB T-SQL debugger Overview: Microsoft Developer Studio version 6 installs a world-launchable DCOM object, known ...

Дырка в Microsoft Developer Studio (DCOM VB T-SQL debugger buffer overflow)

Устанавливается DCOM-объект с разрешениями на запуск VB T-SQL Debugger в котором присутствует переполнение буфера...

CVE-2001-0168

CVE-2001-0168 affects AT&T WinVNC Windows server up to version 3.3.3r7. A buffer overflow in the HTTP handling (vncHTTPConnect/Log.cpp) can be triggered by an overly long HTTP GET when the DebugLevel registry key > 0, allowing remote code execution with the privileges of the VNC server user. P...

CVE-2001-0167

Buffer overflow in AT&T WinVNC Virtual Network Computing client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string...

CVE-2001-0168

Buffer overflow in AT&T WinVNC Virtual Network Computing server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0...