smbmountDoS.txt

Announced: 2004-02-02 Type: Denial of Service Attack on Windows Impact: smbmount can stop Windows from sharing files Writer: Daniel Kabs, Germany [email protected] Credits: Thanks to Steve Ladjabi [email protected] Contents: 1. Abstract 2. Affected Systems 3. Attack Setup 4. Symptoms 5...

CVE-2003-1125

Unknown vulnerability in ns-ldapd for Sun ONE Directory Server 4.16, 5.0, and 5.1 allows LDAP clients to cause a denial of service service halt...

Multiple vulnerabilites in vendor IKE implementations, including Cisco,

Nortel, and Microsoft Reply-To: [email protected] INTRODUCTION This message will describe two serious vulnerabilities in the default configurations of IKE implementations. They are particularly common in so called "VPN client" implementations. Both allow easy session stealing and man-in-the-middle...

CVE-2003-0789

modcgid in Apache before 2.0.48, when using a threaded MPM, does not properly handle CGI redirect paths, which could cause Apache to send the output of a CGI program to the wrong client...

Advisory 02/2003: emule/xmule/lmule vulnerabilities

e-matters GmbH www.e-matters.de -= Security Advisory =- Advisory: eMule/lmule/xmule multiple remote vulnerabilities Release Date: 2003/08/17 Last Modified: 2003/08/17 Author: Stefan Esser [email protected] Application: eMule = 0.29c xmule = 1.4.3, = 1.5.6a lmule = 1.3.1 Severity: Several...

Half-Life clients: buffer-overflow

Applications: Half-Life http://half-life.sierra.com Versions: 1.1.1.0 and previous versions including all MODs based on the game, such as Counter-Strike and DoD Platforms: Windows Bugs: Remote buffer overflow Risk: High Author: Auriemma Luigi Senior Security Researcher, PivX Solutions, LLC e-mail...

cftp 0.12 - Banner Parsing Buffer Overflow

source: https://www.securityfocus.com/bid/8160/info A buffer overflow vulnerability has been reported in cftp. The vulnerability occurs when cftp is parsing 'Welcome' banner messages from remote FTP servers. When cftp receives an FTP banner exceeding a certain length, it will trigger the overflow...

Multiple bugs in FTP clients

Bugs during parsing FTP server data...

(RHSA-2003:177) Updated up2date and rhn_register clients available

The rhnregister and up2date packages contain the software necessary to take advantage of Red Hat Network functionality. The up2date package incorporates improvements in handling package dependencies and "obsoletes" processing, along with many other bug fixes. This release also includes an updated...

Buffer overflows in multiple IMAP clients

There's two common vulnerabilities in IMAP clients written with C and C++: 1. Handling huge literal sizes. Many clients do mallocliteralsize+1 and then read the literal into it. Problem is that if literalsize is UINTMAX-1, the +1 overflows it into malloc0 but server is still allowed to write...

FileMaker Pro network protocol sends passwords to any client attempting to connect to a shared database.

I recently discovered a serious bug in FileMaker Pro's database sharing. FileMaker have just released an advisory about this on their security pages: http://www.filemaker.com/support/security -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Subject: FileMaker Pro network protocol sends passwords to...

Seti@home information leakage and remote compromise

Information leakage and remotely exploitable buffer overflow in various SETI@home ..cc. seti@home clients and the main server. ..--''' $$$$ ,CCcc, .-' "": Januari 15, 2002 by Berend-Jan Wever $$$CCCCCCb ; : $$$$bbCCCCCCc; '. | Y$$$$$$bCCCCCCc : |/ Y$$$$$$$$$bCCCCc: Lined/ "$$$$$$$$$$$bCCc The...

CVE-2001-1359

CVE-2001-1359 affects Volution clients 1.0.7 and earlier. When LDAP authentication fails, these clients contact the CCD, enabling remote attackers operating a Trojan horse Volution server to fully control the client. No explicit exploit details or patch information are provided in the supplied do...

CVE-2001-1359

Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon CCD when an LDAP authentication failure occurs, which allows remote attackers to fully control clients via a Trojan horse Volution server...

CORE-2003-0304-03: Vulnerability in GNOME's Eye of Gnome

Core Security Technologies Advisory http://www.coresecurity.com Vulnerability in GNOME's Eye of Gnome Date Published: 2003-03-28 Last Update: 2003-03-27 Advisory ID: CORE-2003-0304-03 Bugtraq ID: 7121 CVE Name: CAN-2003-0165 Title: GNOME's Eye Of Gnome incorrect file name handling Class: Input...

eDonkey Clients 0.440.45 - Multiple Chat Dialog Resource Consumption Vulnerabilities

eDonkey Clients 0.440.45 - Multiple Chat Dialog Resource Consumption Vulnerabilities source: https://www.securityfocus.com/bid/7164/info A vulnerability has been reported for eDonkey clients for Windows that will result in a denial of service condition. The vulnerability occurs when numerous chat...

eDonkey Clients 0.44/0.45 - Multiple Chat Dialog Resource Consumption Vulnerabilities

source: https://www.securityfocus.com/bid/7164/info A vulnerability has been reported for eDonkey clients for Windows that will result in a denial of service condition. The vulnerability occurs when numerous chat dialog boxes are opened by the eDonkey or Overnet clients. Every open chat dialog bo...

Buffer overflows in ircII-based clients

After seeing the BitchX "DoS" problem mentioned the n'th time already, I decided to finally audit ircII based clients to show some worse problems they have. I had been pretty sure for years that malicious servers can exploit them in multiple ways, and I think many others have known it as well. EP...

Buffer overflows in ircII based clients

Multiple buffer overflows can only be exploited from server side...

CVE-2003-0047

SSH2 clients for VanDyke 1 SecureCRT 4.0.2 and 3.4.7, 2 SecureFX 2.1.2 and 2.0.4, and 3 Entunnel 1.0.2 and earlier, do not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials...