84 matches found
UBUNTU-CVE-2017-2669
Dovecot before version 2.2.29 is vulnerable to a denial of service. When 'dict' passdb and userdb were used for user authentication, the username sent by the IMAP/POP3 client was sent through varexpand to perform %variable expansion. Sending specially crafted %variable fields could result in...
UBUNTU-CVE-2014-3971
The CmdAuthenticate::authenticateX509 function in db/commands/authenticationcommands.cpp in mongod in MongoDB 2.6.x before 2.6.2 allows remote attackers to cause a denial of service daemon crash by attempting authentication with an invalid X.509 client certificate...
Open and Compact FTPd Pre-Authentication Crash (PoC)
Exploit for unknown platform in category dos / poc ==================================================== Open and Compact FTPd Pre-Authentication Crash PoC ==================================================== Title: Open & Compact FTPd Pre-Authentication Crash PoC Found by: loneferret Hat's off to...
DEBIAN-CVE-2004-1440
Multiple heap-based buffer overflows in the modpow function in PuTTY before 0.55 allow 1 remote attackers to execute arbitrary code via an SSH2 packet with a base argument that is larger than the mod argument, which causes the modpow function to write memory before the beginning of its buffer, an...