Memory corruption

Cisco CallManager 3.2 and earlier, 3.3 before 3.35SR1, 4.0 before 4.02aSR2c, and 4.1 before 4.13SR2 allow remote attackers to 1 cause a denial of service CPU and memory consumption via a large number of open TCP connections to port 2000 and 2 cause a denial of service fill the Windows Service...

CVE-2006-0368

Cisco CallManager 3.2 and earlier, 3.3 before 3.35SR1, 4.0 before 4.02aSR2c, and 4.1 before 4.13SR2 allow remote attackers to 1 cause a denial of service CPU and memory consumption via a large number of open TCP connections to port 2000 and 2 cause a denial of service fill the Windows Service...

CVE-2006-0368

CVE-2006-0368 affects Cisco CallManager versions 3.2 and earlier; 3.3 before 3.3(5)SR1; 4.0 before 4.0(2a)SR2c; and 4.1 before 4.1(3)SR2. It enables remote attackers to cause denial of service by opening a large number of TCP connections to port 2000 (CPU/memory consumption) and to ports 2001, 20...

RHEL 3 : kernel (RHSA-2006:0140)

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

Solaris dtspcd Heap Overflow

This is a port of noir's dtspcd exploit. This module should work against any vulnerable version of Solaris 8 sparc. The original exploit code was published in the book Shellcoder's Handbook. This module requires Metasploit: https://metasploit.com/download Current source:...

CVE-2002-2208

CVE-2002-2208 affects Cisco IOS (11.3–12.2) and related products. It allows remote attackers to cause a denial of service by sending a large number of spoofed EIGRP neighbor announcements, triggering an ARP storm on the local network. The issue is tied to the EIGRP implementation; Cisco issued a ...

CVE-2005-4131

Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed range, which could lead to memory corruption involving an argument to the msvcrt.memmove...

MS02-039 Microsoft SQL Server Resolution Overflow

This is an exploit for the SQL Server 2000 resolution service buffer overflow. This overflow is triggered by sending a udp packet to port 1434 which starts with 0x04 and is followed by long string terminating with a colon and a number. This module should work against any vulnerable SQL Server 200...

CVE-2002-2160

...

CVE-2002-2137

CVE-2002-2137 affects GlobalSunTech Wireless Access Points (including WISECOM GL2422AP-0T) and certain OEMs (D-Link DWL-900AP+ B1 2.1/2.2, ALLOY GL-2422AP-S, EUSSO GL2422-AP, LINKSYS WAP11-V2.2). The issue allows remote attackers to obtain sensitive information (WEP keys, administrator password, ...

CVE-2002-2177

BEA WebLogic Server and Express 6.1–7.0.0.1 are affected by a vulnerability in how HTTP requests are buffered, which can cause the same response to be sent for two different requests. This could enable remote attackers to view information intended for other users. The issue is described across mu...

CVE-2002-2160

Summary: CVE-2002-2160 is a duplicate of CVE-2002-1798 (DO NOT USE THIS CANDIDATE NUMBER). The connected records describe the underlying issue in MidiCart PHP, PHP Plus, and PHP Maxi. Affected software (as documented): MidiCart PHP, PHP Plus, and PHP Maxi. Vulnerability details (from connected CV...

CVE-2002-2159

The CVE affects Linksys EtherFast Cable/DSL BEFSR11, BEFSR41 and BEFSRU31 with firmware 1.42.7, where installing this upgrade opens TCP port 5678 for remote administration even when Block WAN and Remote Admin are disabled. This creates a potential for remote access by attackers. Publicly availabl...

CVE-2002-2199

CVE-2002-2199 concerns the Advanced Intrusion Detection Environment (AIDE). The default aide.conf on FreeBSD prior to 2002-08-28 with AIDE versions before 0.7_1 does not properly check subdirectories, enabling local users to bypass detection. Affected software/components: AIDE on FreeBSD; vulnera...

CVE-2002-2205

Webresolve 0.1.0 and earlier are affected by a buffer overflow when a client connects using an IP that resolves to a long hostname. This allows remote attackers to potentially execute arbitrary code on the server. The available documents confirm the vulnerability description but do not provide sp...

CVE-2002-2173

The CVE-2002-2173 entry describes a buffer overflow in the Trillian IRC module (versions 0.725 and 0.73). It allows remote attackers to execute arbitrary code via a long DCC Chat message. The available connected sources confirm the vulnerable component and impact but do not provide detailed root-...

CVE-2002-2189

CVE-2002-2189 concerns a cross-site scripting (XSS) vulnerability in ActiveXperts Software ActiveWebserver. The affected component is the ActiveWebserver, where an attacker can cause the execution of arbitrary web script by enticing a user to click a crafted link. The Red Hat and CVE Registry ent...

CVE-2002-2146

CVE-2002-2146 affects Savant Web Server prior to 3.2? (Savant Web Server 3.1 and earlier) through the CGI binary cgitest.exe . The issue is described as a buffer overflow in the CGI that can be triggered by a long HTTP request, leading to a denial of service via crash; some sources also indicate ...

CVE-2002-2196

Samba prior to 2.2.5 is affected by a buffer overflow in termination of the enum_csc_policy data structure, potentially allowing remote code execution. This is reflected across multiple sources (including Red Hat, Debian, CVE records, OSV/OSS listings, and OpenVAS/Nessus entries). Severity is lis...

CVE-2002-2161

Kerio Personal Firewall (KPF) 2.1.4 and earlier is affected by a denial-of-service vulnerability where remote attackers can trigger a SYN packet flood, causing the firewall to hang and consume CPU. The description available specifies the impact but does not provide deeper root-cause details, affe...