DC++私密消息远程拒绝服务漏洞

BUGTRAQ ID: 30037 CVE ID：CVE-2008-2954 CNCVE ID：CNCVE-20082954 DC++是一款开放源码的免费的P2P客户端软件。 DC++不正确处理私密消息，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 DC++ 0.706 可参考如下补丁信息： http://cvs.berlios.de/cgi-bin/viewcvs.cgi/linuxdcpp/linuxdcpp/client/NmdcHub.cpp.diff?r1=1.14&r2=1.15&sortby=date...

CVE-2008-2953

Linux DC++ linuxdcpp before 0.707 allows remote attackers to cause a denial of service crash via "partial file list requests" that trigger a NULL pointer dereference...

CVE-2008-2954

client/NmdcHub.cpp in Linux DC++ linuxdcpp before 0.707 allows remote attackers to cause a denial of service crash via an empty private message, which triggers an out-of-bounds read...

Out-of-bounds

client/NmdcHub.cpp in Linux DC++ linuxdcpp before 0.707 allows remote attackers to cause a denial of service crash via an empty private message, which triggers an out-of-bounds read...

CVE-2008-2954

client/NmdcHub.cpp in Linux DC++ linuxdcpp before 0.707 allows remote attackers to cause a denial of service crash via an empty private message, which triggers an out-of-bounds read...

CVE-2008-2953

Linux DC++ linuxdcpp before 0.707 allows remote attackers to cause a denial of service crash via "partial file list requests" that trigger a NULL pointer dereference...

Null pointer dereference

Linux DC++ linuxdcpp before 0.707 allows remote attackers to cause a denial of service crash via "partial file list requests" that trigger a NULL pointer dereference...

CVE-2008-2954

client/NmdcHub.cpp in Linux DC++ linuxdcpp before 0.707 allows remote attackers to cause a denial of service crash via an empty private message, which triggers an out-of-bounds read...

CVE-2008-2953

CVE-2008-2953 affects Linux DC++ (linuxdcpp) up to version 0.707; the issue is a remote denial of service caused by a NULL pointer dereference triggered by "partial file list requests". Fedora/Red Hat advisories indicate upgrading to a fixed version (0.707 or later) as the remediation. Exploitati...

CVE-2008-2953

Linux DC++ linuxdcpp before 0.707 allows remote attackers to cause a denial of service crash via "partial file list requests" that trigger a NULL pointer dereference...

CVE-2008-2953

Removed by vendor...

CVE-2008-2954

CVE-2008-2954 / CVE-2008-2953 (Linux DC++: linuxdcpp) affect Linux DC++ (linuxdcpp) clients prior to 0.707. The issues stem from handling of messages and file lists: an empty private message can trigger an out-of-bounds read (CVE-2008-2954) and partial file list requests can cause a NULL pointer ...

CVE-2008-2954

Removed by vendor...

CVE-2008-2954: Improper Input Validation

client/NmdcHub.cpp in Linux DC++ linuxdcpp before 0.707 allows remote attackers to cause a denial of service crash via an empty private message, which triggers an out-of-bounds read...

CVE-2008-2953: Improper Input Validation

Linux DC++ linuxdcpp before 0.707 allows remote attackers to cause a denial of service crash via "partial file list requests" that trigger a NULL pointer dereference...

Unfixed XSS vulnerability at www.washingtondcrealestatezoom.com

Security researcher mckt, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.washingtondcrealestatezoom.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/10/2008. It...

samba: send_mailslot() buffer overflow

Stack-based buffer overflow in the sendmailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON...

Can not log on locally to the system of the Telnet solution-vulnerability warning-the black bar safety net

In Windows 2 0 0 0 environment, is Group Policy to deny logon locally has been relatively headache thing. This article will introduce one to all users denied to log on locally after the solve method. In Windows2000, if a user is to cancel the log on locally permission, when the user locally logs ...

MS Windows NetpManageIPCConnect Stack Overflow Exploit (py)

Exploit for unknown platform in category remote exploits =========================================================== MS Windows NetpManageIPCConnect Stack Overflow Exploit py =========================================================== !/usr/bin/python MS06-070 Windows WorkStation...

DC++ and its mods remote DoS in bzip2 decompression routine

DC++ and its mods remote DoS in bzip2 decompression routine Critical Security research: http://www.critical.lt Original advisory may be found: http://www.critical.lt/?vulnerabilities/22 PoC file may be found here: http://www.critical.lt/research/dc.zip Vulnerable product: DC++ and its mods all...