CVE-2008-2953

CVE-2008-2953 affects Linux DC++ (linuxdcpp) up to version 0.707; the issue is a remote denial of service caused by a NULL pointer dereference triggered by "partial file list requests". Fedora/Red Hat advisories indicate upgrading to a fixed version (0.707 or later) as the remediation. Exploitati...

CVE-2008-2954

CVE-2008-2954 / CVE-2008-2953 (Linux DC++: linuxdcpp) affect Linux DC++ (linuxdcpp) clients prior to 0.707. The issues stem from handling of messages and file lists: an empty private message can trigger an out-of-bounds read (CVE-2008-2954) and partial file list requests can cause a NULL pointer ...

CVE-2008-2953

Removed by vendor...

CVE-2008-2954

Removed by vendor...

CVE-2008-2954: Improper Input Validation

client/NmdcHub.cpp in Linux DC++ linuxdcpp before 0.707 allows remote attackers to cause a denial of service crash via an empty private message, which triggers an out-of-bounds read...

CVE-2008-2953: Improper Input Validation

Linux DC++ linuxdcpp before 0.707 allows remote attackers to cause a denial of service crash via "partial file list requests" that trigger a NULL pointer dereference...

Unfixed XSS vulnerability at www.washingtondcrealestatezoom.com

Security researcher mckt, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.washingtondcrealestatezoom.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/10/2008. It...

samba: send_mailslot() buffer overflow

Stack-based buffer overflow in the sendmailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON...

Can not log on locally to the system of the Telnet solution-vulnerability warning-the black bar safety net

In Windows 2 0 0 0 environment, is Group Policy to deny logon locally has been relatively headache thing. This article will introduce one to all users denied to log on locally after the solve method. In Windows2000, if a user is to cancel the log on locally permission, when the user locally logs ...

MS Windows NetpManageIPCConnect Stack Overflow Exploit (py)

Exploit for unknown platform in category remote exploits =========================================================== MS Windows NetpManageIPCConnect Stack Overflow Exploit py =========================================================== !/usr/bin/python MS06-070 Windows WorkStation...

DC++ dirrect connect protocol client DoS

During transfer of bzip2 compressed filelist decompressed list size is not controlled leading to possibility of resource exhaustion...

DC++ and its mods remote DoS in bzip2 decompression routine

DC++ and its mods remote DoS in bzip2 decompression routine Critical Security research: http://www.critical.lt Original advisory may be found: http://www.critical.lt/?vulnerabilities/22 PoC file may be found here: http://www.critical.lt/research/dc.zip Vulnerable product: DC++ and its mods all...

Open DC Hub buffer overflow

$RedirectAll command buffer overflow...

[UNIX] Open DC hub Buffer Overflow ($RedirectAll)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

FreeBSD : Open DC Hub -- remote buffer overflow vulnerability (cdf14b68-3ff9-11d9-8405-00065be4b5b6)

Donato Ferrante reported an exploitable buffer overflow in this software package. Any user that can login with 'admin' privileges can abuse it, trough the $RedirectAll command, to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks ...

CVE-2005-1089

Unknown vulnerability in DC++ before 0.674 allows attackers to append data to arbitrary files...

CVE-2005-1089

DC++ before 0.674 is affected by a vulnerability that allows a remote attacker to append data to arbitrary files. The issue is described across CVE-2005-1089 sources as a file/content manipulation flaw in the DC++ client (pre-0.674). Affected component: DC++ core/application logic handling downlo...

CVE-2005-1089: Undefined Security Weakness

Unknown vulnerability in DC++ before 0.674 allows attackers to append data to arbitrary files...

DC++ Download Drive Arbitrary File Appending

According to its version number, the DC++ client installed on the remote host is affected by a vulnerability that may let a remote user append data to files anywhere on the drive on which DC++ is installed. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18012;...

DC++ Detection

DC++ is installed on the remote host. DC++ is an open source client for the Direct Connect peer-to-peer file-sharing protocol and may not be suitable for use in a business environment. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18016; scriptversion"1.10";...