Critical: Red Hat Security Advisory: lynx security update

An updated lynx package that corrects a security flaw is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Lynx is a text-based Web browser. Ulf Härnhammar discovered a stack overflow bug in Lynx when handling connections to NNTP...

PT-2005-3811 · Apache +1 · Apache Http Server +1

Name of the Vulnerable Software and Affected Versions: Apache 2 affected versions not specified Description: A memory leak in the worker MPM allows remote attackers to cause a denial of service memory consumption via aborted connections, which prevents the memory for the transaction pool from bei...

X11 Server Unauthenticated Access

The remote X11 server accepts connections from anywhere. An attacker can connect to it to eavesdrop on the keyboard and mouse events of a user on the remote host. It is even possible for an attacker to grab a screenshot of the remote host or to display arbitrary programs. An attacker can exploit...

Low: Red Hat Security Advisory: mysql security update

Updated mysql packages that fix a temporary file flaw and a number of bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisti...

openssh security update

CentOS Errata and Security Advisory CESA-2005:550 Updated openssh packages that fix a potential security vulnerability and various other bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell...

Skype Detection

The remote host is running Skype, a peer-to-peer Voice-Over-IP application. Due to the peer-to-peer nature of Skype, any user connecting to the Skype network may consume a large amount of bandwidth. Make sure the use of this program is done in accordance with your corporate security policy. C...

Free SMTP Server Open Mail Relay Vulnerability

Secunia Advisory: SA16698 Release Date: 2005-09-05 Critical: Moderately critical Impact: Security Bypass Where: From remote Solution Status: Unpatched Software: Free SMTP Server 2.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. Description:...

CVE-2005-2534

Race condition in OpenVPN before 2.0.1, when --duplicate-cn is not enabled, allows remote attackers to cause a denial of service server crash via simultaneous TCP connections from multiple clients that use the same client certificate...

CVE-2005-2585

Mentor ADSL-FR4II router running firmware 2.00.0111 allows remote attackers to cause a denial of service active TCP connections state table consumption via a large number of connections, such as a port scan...

CVE-2004-2378

@Mail 3.64 for Windows allows remote attackers to cause a denial of service "unusable" server via a large number of POP3 connections to the server...

CVE-2005-2585

Mentor ADSL-FR4II router running firmware 2.00.0111 allows remote attackers to cause a denial of service active TCP connections state table consumption via a large number of connections, such as a port scan...

Microsoft Plug and Play contains a buffer overflow vulnerability

Overview Microsoft Plug and Play contains a flaw in the handling of message buffers that may result in local or remote arbitrary code execution or denial-of-service conditions. Description The following is from the Microsoft Plug and Play description: Plug and Play PnP allows the operating system...

CVE-2005-2426

FTPshell Server 3.38 allows remote authenticated users to cause a denial of service application crash by multiple connections and disconnections without using the QUIT command...

CVE-2005-2426

FTPshell Server 3.38 allows remote authenticated users to cause a denial of service application crash by multiple connections and disconnections without using the QUIT command...

Vulnerability in IBM access

Hello, I would like to make to Bugtraq knowledge the existence of a security vulnerability in IBM access software. IBM access is vulnerable to a Shared Section vulnerability. The processes QCWLICON.exe and QCTRAY.exe have the section BaseNamedObjectsQCONDB with invalid rights which allows everyon...

[Full-disclosure] ICMP attacks against TCP: Conclusions

Folks, My posts to this list have tried to show how easy it is to perform ICMP attacks against TCP. The attacks are blind, so the attacker does not need to be a "man in the middle" to perform then. The typical number of packets required to perform any of these attacks is about 16000 in many cases...

CVE-2005-2307

netman.dll in Microsoft Windows Connections Manager Library allows local users to cause a denial of service Network Connections Service crash via a large integer argument to a particular function, aka "Network Connection Manager Vulnerability."...

CVE-2005-2307

CVE-2005-2307 is a denial-of-service vulnerability in the Windows Network Connection Manager (Network Connection Manager) where a web or local attacker could crash the Network Connections Service by sending a specially crafted input to netman.dll. The issue affects the Network Connection Manager ...

CVE-2005-2307

netman.dll in Microsoft Windows Connections Manager Library allows local users to cause a denial of service Network Connections Service crash via a large integer argument to a particular function, aka "Network Connection Manager Vulnerability."...

Mandrake Linux Security Advisory : nss_ldap (MDKSA-2005:121)

Rob Holland, of the Gentoo Security Audit Team, discovered that pamldap and nssldap would not use TLS for referred connections if they are referred to a master after connecting to a slave, regardless of the 'ssl starttls' setting in ldap.conf. As well, a bug in nssldap in Corporate Server and...