3791 matches found
FreeBSD : openvpn -- multiple TCP clients connecting with the same certificate at the same time can crash the server (5ad3e437-e527-4514-b9ed-280b2ca1a8c9)
James Yonan reports : If two or more client machines try to connect to the server at the same time via TCP, using the same client certificate, and when --duplicate-cn is not enabled on the server, a race condition can crash the server with 'Assertion failed at mtcp.c:411' %NASLMINLEVEL 70300 C...
JVN#84775942 Multiple email clients vulnerable to directory traversal due to inappropriate unicode handling
Impact Actual impact could differ depending on the email clients though, an attacker coulld possibly forge a file name or a email client could handle a file inappropriately which may result in a file being overwritten or an arbitray file being created and saved in an arbitrary directory. Solution...
Update Protection against Microsoft Exchange Vulnerability (MS06-019)
A vulnerability exists in Microsoft Exchange Server that could allow an attacker to take complete control of the affected system. To exploit the vulnerability, an attacker would have to construct a specially crafted message that could potentially allow remote code execution when an Exchange Serve...
Quake 3 Engine 1.32b - 'R_RemapShader()' Remote Client Buffer Overflow
// remapthis.c - "RRemapShader" q3 engine 1.32b client remote bof exploit // by landser - landser at hotmail.co.il // // this code works as a preloaded shared library on a game server, // it hooks two functions on the running server: // svcdirectconnect that is called when a client connects, // a...
Quake 3 Engine 1.32b R_RemapShader() Remote Client BoF Exploit
Exploit for linux platform in category remote exploits ============================================================== Quake 3 Engine 1.32b RRemapShader Remote Client BoF Exploit ============================================================== // remapthis.c - "RRemapShader" q3 engine 1.32b client...
NeonResponder-5.4.txt
Author: Stefan Lochbihler Date: 17.04.2006 Affected Software: Neon Responder for Windows Software 5.4 Software http://www.neon.com/NRwin.shtml Attack: Dos Overview: Neon Responders greatly enhance the functionality of LANsurveyor by providing LANsurveyor with direct access to computers with the...
OpenTTD <= 0.4.7 (multiple vulnerabilities) Denial of Service Exploit
Exploit for multiple platform in category dos / poc ===================================================================== OpenTTD = 0.4.7 multiple vulnerabilities Denial of Service Exploit ===================================================================== Luigi Auriemma Application: OpenTTD...
OpenTTD 0.4.7 - Multiple Vulnerabilities
Luigi Auriemma Application: OpenTTD http://www.openttd.org Versions: = 0.4.7 Platforms: Windows, nix, BSD, Mac and others Bugs: A program termination through big error number B broadcast clients disconnection in multiplayer menu Exploitation: A remote, versus server and client in-game B remote,...
[Full-disclosure] Format string in Doomsday 1.8.6
Luigi Auriemma Application: Doomsday engine http://www.doomsdayhq.com http://deng.sourceforge.net Versions: = 1.8.6 and current SVN 1.9.0 Platforms: Windows, nix, BSD, Mac and others Bug: format string bug in ConMessage and ConPrintf Exploitation: remote, versus server and clients Date: 03 Apr 20...
Multiple vulnerabilities in Cube engine 2005_08_29
Luigi Auriemma Application: Cube engine http://www.cubeengine.com Versions: = 20050829 Platforms: Windows, nix, BSD and MacOS Bugs: A sgetstr buffer-overflow B invalid memory access C clients crash through invalid map Exploitation: remote, versus both server and clients Date: 06 Mar 2006 Author:...
JVN#89344424 Multiple email clients vulnerable in handling an attachement inapropriately
Impact Actual impact could differ depending on the email clients though, email clients may crash when hadling an attached file with a particular file name. Other possible impacts could be an attached file not being saved or hanged up while in the saving process, or an error message being displaye...
Ubuntu 4.10 / 5.04 : krb4, krb5 vulnerabilities (USN-224-1)
Gael Delalleau discovered a buffer overflow in the envoptadd function of the Kerberos 4 and 5 telnet clients. By sending specially crafted replies, a malicious telnet server could exploit this to execute arbitrary code with the privileges of the user running the telnet client. CVE-2005-0468 Gael...
VERITAS NetBackup Java Administration Console format string vulnerability
Added: 11/30/2005 CVE: CVE-2005-2715 BID: 15079 OSVDB: 19949 Background VERITAS NetBackup is a backup and recovery solution for multiple platforms. Problem The bpjava-msvc component of the Java Administration Console in Veritas NetBackup 4.5 through 6.0 is affected by a format string vulnerabilit...
Test HTTP dangerous methods
Misconfigured web servers allows remote clients to perform dangerous HTTP methods such as PUT and DELETE. SPDX-FileCopyrightText: 2000 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
GO-Global Windows Clients 3.1.0.3270 - Buffer Overflow (PoC)
/ by Luigi Auriemma / include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupted system...
GO-Global Windows Clients <= 3.1.0.3270 Buffer Overflow (PoC)
Exploit for unknown platform in category dos / poc ============================================================= GO-Global Windows Clients include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX....
GO-Global Windows Clients <= 3.1.0.3270 Buffer Overflow (PoC)
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include string.h include errno.h...
GO-Global Windows Clients 3.1.0.3270 - Buffer Overflow (PoC)
GO-Global Windows Clients 3.1.0.3270 - Buffer Overflow PoC / by Luigi Auriemma / include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error;...
CVE-2005-3393
Format string vulnerability in the foreignoption function in options.c for OpenVPN 2.0.x allows remote clients to execute arbitrary code via format string specifiers in a push of the dhcp-option command option...
VERITAS NetBackup Remote Code Execution
This vulnerability allows remote attackers to execute arbitrary code on vulnerable NetBackup installations. Authentication is not required to exploit this vulnerability. This specific flaw exists within the bpjava-msvc daemon due to incorrect handling of format string data passed through the...