183 matches found
UBUNTU-CVE-2017-3644
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...
Nginx Remote Integer Overflow Vulnerability
Nginx is a very widely used high-performance web server. An integer overflow vulnerability exists in the Nginx Range Filter module, which allows remote attackers to exploit the vulnerability to submit a special request, obtain sensitive information or crash the application...
openssl: Possible integer overflow vulnerabilities in codebase
Multiple integer overflow flaws were found in the way OpenSSL performed pointer arithmetic. A remote attacker could possibly use these flaws to cause a TLS/SSL server or client using OpenSSL to crash...
UBUNTU-CVE-2017-3251
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
Null pointer dereference
Everest PeakHMI before 8.7.0.2, when the video server is used, allows remote attackers to cause a denial of service incorrect pointer dereference and daemon crash via a crafted packet...
PT-2015-3373 · None +3 · Libtirpc +3
Name of the Vulnerable Software and Affected Versions: libtirpc versions prior to 0.3.3-rc3 Description: A null-pointer dereference issue was found in the makefd xprt function, where the return value was not checked in all instances. This could lead to a crash when the server exhausts the maximum...
PT-2015-2509 · Oracle +7 · Mysql Server +6
Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.5.43 and earlier Oracle MySQL Server versions 5.6.24 and earlier Description: The issue is related to errors in the code of the Server: Security: Privileges subcomponent of the MySQL database management system. ...
OpenLiteSpeed Buffer Overflow Denial of Service Vulnerability
OpenLiteSpeed is a high performance, lightweight, open source HTTP server. OpenLiteSpeed suffers from a heap buffer overflow vulnerability that could be exploited by a remote attacker to submit a special request to crash the application or execute arbitrary code...
xorg-x11-server: integer overflow in DRI2 extension function ProcDRI2GetBuffers()
An integer overflow flaw was found in the way the X.Org server calculated memory requirements for certain DRI2 extension requests. A malicious, authenticated client could use this flaw to crash the X.Org server...
Open And Compact FTP Server 1.2 Denial Of Service
Exploit Title: Open&Compact Ftp Server = 1.2 Denial Of Service Date: June 12, 2010 Author: Serge Gorbunov Software Link: http://sourceforge.net/projects/open-ftpd/ Version: = 1.2 Tested on: Windows 7, Windows XP SP3 !/usr/bin/python This exploits allows to crash open ftpd server at any time simpl...
ddrLPD 1.0 - Remote Denial of Service
source: https://www.securityfocus.com/bid/39904/info ddrLPD is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. ddrLPD 1.0 is vulnerable; other versions may also be affected...
Firebird SQL Fbserver 2.0 - Remote Buffer Overflow
source: https://www.securityfocus.com/bid/24436/info Firebird SQL is prone to a remote buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary machine code in the context of the affected database server. Failed exploit attempts will likely crash the server, denying...
Snort 2.1/2.2 - DecodeTCPOptions Remote Denial of Service (1)
// source: https://www.securityfocus.com/bid/12084/info Snort is reported prone to a remote denial of service vulnerability. The vulnerability is reported to exist in the DecodeTCPOptions function of 'decode.c', and is as a result of a failure to sufficiently handle malicious TCP packets. A remot...
WinFTP Server 1.6 - Denial of Service
WinFTP Server 1.6 - Denial of Service !/usr/local/bin/perl -w WinFTP server ver 1.6 D.o.S Exploit Discovered,exploited by KaGra Tested on WinXP SP1 English version Sending 40 times a username and a buffer of 1500 bytes as pass,will crash the server,as soon as is not minimized in Target computer.I...
WinFTP Server 1.6 - Denial of Service
!/usr/local/bin/perl -w WinFTP server ver 1.6 D.o.S Exploit Discovered,exploited by KaGra Tested on WinXP SP1 English version Sending 40 times a username and a buffer of 1500 bytes as pass,will crash the server,as soon as is not minimized in Target computer.If he is minimized,he will crash as soo...
mysql -- ALTER MERGE denial of service vulnerability
Dean Ellis reported a denial of service vulnerability in the MySQL server: Multiple threads ALTERing the same or different MERGE tables to change the UNION eventually crash the server or hang the individual threads. Note that a script demonstrating the problem is included in the MySQL bug report...
IBM WebSphere HTTP Request Header Remote Overflow
It was possible to kill the WebSphere server by sending an invalid request for a .jsp with a too long Host: header. An attacker may exploit this vulnerability to make your web server crash continually. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. References... From:"PeterGrundl"...
CVE-2001-0260
Buffer overflow in Lotus Domino Mail Server 5.0.5 and earlier allows a remote attacker to crash the server or execute arbitrary code via a long "RCPT TO" command...
CVE-2001-0260
Buffer overflow in Lotus Domino Mail Server (Lotus Domino R5 SMTP server) versions 5.0.5 and earlier can be triggered by a long RCPT TO command, allowing a remote attacker to crash the server or execute arbitrary code. The vulnerability affects Domino R5 SMTP server with domain restrictions enabl...
Avirt Mail 4.x DoS
Issue: ------ Avirt Mail 4.x up to latest version is vulnerable to denial of service while handling a SMTP session. Tested versions: ---------------- Avirt Mail 4.0 build 4124 - vulnerable Avirt Mail 4.2 build 4807 - vulnerable Both versions where tested on Windows 98 since I do not have access...