112 matches found
oracleidir-dos.txt
!/usr/bin/python """ Oracle Internet Directory 10.1.4 preauthentication Denial Of Service NOTES: Under 32 bits platforms it crashes immediately. Under 64 bits it may take even hours. Sometimes you need 2 shoots to crash OID completely. The server "commonly" tolerates one shoot, but even when you...
Oracle Internet Directory 10.1.4 Remote Preauth DoS Exploit
Exploit for multiple platform in category dos / poc =========================================================== Oracle Internet Directory 10.1.4 Remote Preauth DoS Exploit =========================================================== !/usr/bin/python """ Oracle Internet Directory 10.1.4...
Oracle Internet Directory 10.1.4 - Remote Denial of Service
Oracle Internet Directory 10.1.4 - Remote Denial of Service !/usr/bin/python """ Oracle Internet Directory 10.1.4 preauthentication Denial Of Service NOTES: Under 32 bits platforms it crashes immediately. Under 64 bits it may take even hours. Sometimes you need 2 shoots to crash OID completely. T...
Oracle Internet Directory 10.1.4 - Remote Denial of Service
!/usr/bin/python """ Oracle Internet Directory 10.1.4 preauthentication Denial Of Service NOTES: Under 32 bits platforms it crashes immediately. Under 64 bits it may take even hours. Sometimes you need 2 shoots to crash OID completely. The server "commonly" tolerates one shoot, but even when you...
CVE-2008-2595
CVE-2008-2595 : A pre-authentication denial-of-service vulnerability exists in Oracle Internet Directory (LDAP) within Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.4.2. The issue is caused by a NULL pointer dereference when processing malformed LDAP requests, leading to a crash of the vu...
CVE-2007-2595
The CVE-2007-2595 issue in RSAuction 2.73.1.3 allows remote authenticated users to re-activate their own suspended accounts by issuing a direct request to the activation URL generated at registration. The vulnerability is described across multiple sources (NVD/NVDC and CVE listings) but no concre...
CVE-2006-2595
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-2583. Reason: This candidate is a duplicate of CVE-2006-2583. Notes: All CVE users should reference CVE-2006-2583 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2006-2595
CVE-2006-2595 is rejected/not used; use CVE-2006-2583 instead.
CVE-2004-2595
CVE-2004-2595 affects the Quake II server on Linux before R1Q2. It is an absolute path traversal in the download command using a full pathname, causing the server to crash (denial of service). No remediation details are provided in the supplied documents.
CVE-2005-2595
CVE-2005-2595 is a cross-site scripting (XSS) vulnerability in Dada Mail (Perl) prior to 2.10 Alpha 1. An attacker could inject arbitrary JavaScript into archived messages, which would then execute in a user’s browser when viewed. The root cause is improper validation of user-submitted content be...
CVE-2004-2595
Absolute path traversal vulnerability in Quake II server before R1Q2 on Linux, as used in multiple products, allows remote attackers to cause a denial of service application crash via a download command with a full pathname for a directory in the argument, which causes the server to crash when it...