CVE-2007-1047

Distributed Checksum Clearinghouse (DCC) before 1.3.51 is affected by an unspecified vulnerability that enables remote attackers to delete or add hosts in /var/dcc/maps. The CVE entry notes a network-accessible impact with partial confidentiality/integrity/availability implications (CVSS2 base sc...

Comodo firewall protection bypass

CRC32 control checksum is used for files protection making in trivial to bypass it...

3APA3A : Using FTP protocol weaknesses

How to exploit bugs in the implementation of the FTP protocol David Sacerdot, in his article on the vulnerability of the FTP protocol and dated as early as April 1996, theoretically the vulnerability of the FTP protocol if it is incorrectly implemented. Two points are interesting in the article,...

IpSwitch WS_FTP Server buffer overflow

Buffer overflow in XCRC, XSHA1, XMD5, Checksum FTP commands...

CVE-2006-4116

Multiple stack-based buffer overflows in Lhaz before 1.32 allow user-assisted attackers to execute arbitrary code via a long filename in 1 an LHZ archive, when saving the filename during extraction; and 2 an LHZ archive with an invalid CRC checksum, when constructing an error message...

CVE-2006-4116

Multiple stack-based buffer overflows in Lhaz before 1.32 allow user-assisted attackers to execute arbitrary code via a long filename in 1 an LHZ archive, when saving the filename during extraction; and 2 an LHZ archive with an invalid CRC checksum, when constructing an error message...

MS Windows XP/2003 (IGMP v3) Denial of Service Exploit (MS06-007) (2)

No description provided by source. / MS06-007 Denial of Service POC exploit created by Firestorm, based on zloSend.exe win32 exploit http://www.securitylab.ru/poc/264136.php Tested on Windows XP SP2 as victim compiled/runned on Fedore Core 4 x86 FOR EDUCATIONAL PURPOSE ONLY !!! / include stdio.h...

Cisco PIX TCP connection DoS

Packets from the same hosts are blocked for few minutes if packet with invalid checksum, or with 1 byte data or of predefined TTL is received...

CVE-2005-4448

FlatNuke 2.5.6 verifies authentication credentials based on an MD5 checksum of the admin name and the hashed password rather than the plaintext password, which allows attackers to gain privileges by obtaining the password hash possibly via CVE-2005-2813, then calculating the credentials and...

CVE-2005-4448

FlatNuke 2.5.6 verifies authentication credentials based on an MD5 checksum of the admin name and the hashed password rather than the plaintext password, which allows attackers to gain privileges by obtaining the password hash possibly via CVE-2005-2813, then calculating the credentials and...

Cisco PIX fails to verify TCP checksum

Overview Versions of Cisco PIX firewalls do not validate the checksum of transiting TCP packets. Attackers may be able to use this problem to create a sustained denial-of-service under certain conditions. Description Cisco PIX firewall systems are used to enforce site-specific network security...

[SECURITY] [DSA 734-1] New gaim packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 734-1 [email protected] http://www.debian.org/security/ Martin Schulze July 5th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 726-1] New oops packages fix format string vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 726-1 [email protected] http://www.debian.org/security/ Martin Schulze May 20th, 2005 http://www.debian.org/security/faq -...

CVE-2002-1656

CVE-2002-1656 affects X-News (x_news) 1.1 and earlier, a PHP-based news management system that stores user IDs and MD5 password hashes in a world-readable file (db/users.txt). The vulnerability enables an attacker to authenticate as other users by obtaining a password hash (e.g., via sniffing or ...

CVE-2002-1656

X-News xnews 1.1 and earlier allows attackers to authenticate as other users by obtaining the MD5 checksum of the password, e.g. via sniffing or the users.txt data file, and providing it in a cookie...

Microsoft Windows XP2003 - Remote Denial of Service

Microsoft Windows XP2003 - Remote Denial of Service / Added Line 1 - BSDSOURCE!!!! /str0ke / define BSDSOURCE include include include include include include include include include include include / Windows Server 2003 and XP SP2 remote DoS exploit Tested under OpenBSD 3.6 at WinXP SP 2 Vuln by...

CitrusDB Static id_hash Admin Authentication Bypass

The remote host is running CitrusDB, an open source customer database application written in PHP. The version of CitrusDB installed on the remote host uses as an authentication cookie the MD5 checksum of a username followed by the constant 'boogaadeeboo'. Knowing a valid username on the remote...

remote DoS for Nasi

oooo oooo oooooooo8 ooooooooooo 8888o 88 888 88 888 88 88 888o88 888oooooo 888 88 8888 888 888 o88o 88 o88oooo888 o888o Network security team nst.e-nex.com Title: All version = Network Assistant 3.2 build 2260 Bug found by: : Гринвуд Date: 6.01.2005 Influence: DoS URL: www.gracebyte.com Если...

CVE-2004-0375

SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service infinite loop via a TCP packet with 1 SACK option or 2 Alternate Checksum Dat...

CVE-2002-0703

CVE-2002-0703 involves the perl-Digest-MD5 module and its interaction with Perl that can yield incorrect MD5 checksums for UTF-8 data, impairing data integrity verification. Mandrake’s MDKSA-2002:035 notes a UTF-8 handling bug in perl-Digest-MD5 and states that version 2.20 fixes the problem. The...