3716 matches found
GO-Global Windows Clients <= 3.1.0.3270 Buffer Overflow (PoC)
Exploit for unknown platform in category dos / poc ============================================================= GO-Global Windows Clients include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX....
GO-Global Windows Clients <= 3.1.0.3270 Buffer Overflow (PoC)
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include string.h include errno.h...
GO-Global Windows Clients 3.1.0.3270 - Buffer Overflow (PoC)
GO-Global Windows Clients 3.1.0.3270 - Buffer Overflow PoC / by Luigi Auriemma / include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error;...
CVE-2005-3393
Format string vulnerability in the foreignoption function in options.c for OpenVPN 2.0.x allows remote clients to execute arbitrary code via format string specifiers in a push of the dhcp-option command option...
VERITAS NetBackup Remote Code Execution
This vulnerability allows remote attackers to execute arbitrary code on vulnerable NetBackup installations. Authentication is not required to exploit this vulnerability. This specific flaw exists within the bpjava-msvc daemon due to incorrect handling of format string data passed through the...
CVE-2005-3165
Multiple cross-site scripting XSS vulnerabilities in MediaWiki before 1.4.9 allow remote attackers to inject arbitrary web script or HTML via 1 tags or 2 Extension or sections that "bypass HTML style attribute restrictions" that are intended to protect against XSS vulnerabilities in Internet...
CVE-2005-3143
Unspecified vulnerability in the Mailbox Server for 4D WebStar before 5.3.5 allows attackers to cause a denial of service crash via IMAP clients on Mac OS X 10.4 Mail 2...
CVE-2005-0138
CVE-2005-0138 affects SGI IRIX 6.5.25–6.5.27 where rpc.mountd does not correctly handle anonymous clients from hosts with undetermined hostnames. The public records describe this as a security-mechanism issue and note there is no clear attacker role, with the CVE possibly not meeting the vulnerab...
Rational ClearQuest Cross-Site Scripting Vulnerability
Secunia Advisory: SA16717 Release Date: 2005-09-20 Critical: Less critical Impact: Cross Site Scripting Where: From local network Solution Status: Vendor Patch Software: Rational ClearQuest 2002 Rational ClearQuest 2003 Select a product and view a complete list of all Patched/Unpatched Secunia...
CVE-2005-2533
OpenVPN before 2.0.1, when running in "dev tap" Ethernet bridging mode, allows remote authenticated clients to cause a denial of service memory exhaustion via a flood of packets with a large number of spoofed MAC addresses...
NOVL-2005010098073 GroupWise Password Caching
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 For Immediate Disclosure ============================== Summary ============================== Security Alert: NOVL-2005-10098073 Title: GroupWise Password Caching Date: 16-August-2005 Revision: Original Product Name: GroupWise 5.x, 6.x OS/Platforms:...
CVE-2005-2589
Unknown vulnerability in Linksys WRT54GS wireless router with firmware 4.50.6, with WPA Personal/TKIP authentication enabled, allows remote clients to bypass authentication by connecting without using encryption...
openvpn -- multiple TCP clients connecting with the same certificate at the same time can crash the server
James Yonan reports: If two or more client machines try to connect to the server at the same time via TCP, using the same client certificate, and when --duplicate-cn is not enabled on the server, a race condition can crash the server with "Assertion failed at mtcp.c:411"...
openvpn -- denial of service: undecryptable packet from authorized client can disconnect unrelated clients
James Yonan reports: If the client sends a packet which fails to decrypt on the server, the OpenSSL error queue is not properly flushed, which can result in another unrelated client instance on the server seeing the error and responding to it, resulting in disconnection of the unrelated client...
Debian DSA-765-1 : heimdal - buffer overflow
Gael Delalleau discovered a buffer overflow in the handling of the LINEMODE suboptions in telnet clients. Heimdal, a free implementation of Kerberos 5, also contains such a client. This can lead to the execution of arbitrary code when connected to a malicious server. %NASLMINLEVEL 70300 C Tenable...
DEBIAN-CVE-2005-2302
PowerDNS before 2.9.18, when allowing recursion to a restricted range of IP addresses, does not properly handle questions from clients that are denied recursion, which could cause a "blank out" of answers to those clients that are allowed to use recursion...
JRun authntication token race conditions
Race conditions lead to situation same token is issued to few clients...
Fedora Core 4 : krb5-1.4.1-5 (2005-553)
A double-free flaw was found in the krb5recvauth routine which may be triggered by a remote unauthenticated attacker. Fedora Core 4 contains checks within glibc that detect double-free flaws. Therefore, on Fedora Core 4, successful exploitation of this issue can only lead to a denial of service K...
security flaw
Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENVUSERVAR command...
Debian DSA-731-1 : krb4 - buffer overflows
Several problems have been discovered in telnet clients that could be exploited by malicious daemons the client connects to. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-0468 Gael Delalleau discovered a buffer overflow in the envoptadd function...