[Full-disclosure] Cisco Security Advisory: Crafted IP Option Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Crafted IP Option Vulnerability Advisory ID: cisco-sa-20070124-crafted-ip-option http://www.cisco.com/warp/public/707/cisco-sa-20070124-crafted-ip-option.shtml Revision 1.0 For Public Release 2007 January 24 1600 UTC GMT...

Texinfo File Handling Buffer Overflow Vulnerability

Texinfo is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. Exploiting this issue allows attackers to cause the affected applications using Texinfo to crash, denying...

CVE-2006-6719

The ftpsyst function in ftp-basic.c in Free Software Foundation FSF GNU wget 1.10.2 allows remote attackers to cause a denial of service application crash via a malicious FTP server with a large number of blank 220 responses to the SYST command...

CVE-2006-6719

The ftpsyst function in ftp-basic.c in Free Software Foundation FSF GNU wget 1.10.2 allows remote attackers to cause a denial of service application crash via a malicious FTP server with a large number of blank 220 responses to the SYST command...

traceroute Local Root Exploit

No description provided by source. / MasterSecuritY www.mastersecurity.fr openwall.c - Local root exploit in LBNL traceroute Copyright C 2000 Michel "MaXX" Kaempf [email protected] Updated versions of this exploit and the corresponding advisory will be made available at:...

Mailman 2.1.8 Multiple Security Issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SA0013 - Public Advisory +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++ Mailman 2.1.8 Multiple Security Issues +++++ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ PUBLISHED ON Sep 13, 2006 PUBLISHED AT...

X11R6 < 6.4 XKEYBOARD (solaris x86) - Local Buffer Overflow

/ X11R6 XKEYBOARD extension Strcmp for Sun Solaris 8 9 10 x86 Copyright 2006 RISE Security , / X11R6 XKEYBOARD extension Strcmp for Sun Solaris 8 9 10 x86 Copyright 2006 RISE Security , Ramon de Carvalho Valle This program is free software; you can redistribute it and/or modify it under the terms...

CVE-2005-4808

Buffer overflow in resetvars in config/tc-crx.c in the GNU as gas assembler in Free Software Foundation GNU Binutils before 20050714 allows user-assisted attackers to have an unknown impact via a crafted .s file...

CVE-2005-4807

Stack-based buffer overflow in the asbad function in messages.c in the GNU as gas assembler in Free Software Foundation GNU Binutils before 20050721 allows attackers to execute arbitrary code via a .c file with crafted inline assembly code...

CVE-2006-2362

Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows context-dependent attackers to cause a denial of service application crash and possibly execute arbitrary code via a file with a crafted Tektronix Hex Format...

Crafty Syntax Image Gallery <= 3.1g Remote Code Execution Exploit

Exploit for unknown platform in category web applications ================================================================= Crafty Syntax Image Gallery = 4.0 + creating user account + user: 98fe56123 password: 7652L4M3l39q email: emai...

CVE-2005-4808

Buffer overflow in resetvars in config/tc-crx.c in the GNU as gas assembler in Free Software Foundation GNU Binutils before 20050714 allows user-assisted attackers to have an unknown impact via a crafted .s file...

Multi-Format Shellcode Encoding Tool - Beta v2.0 (w32)

Exploit for generator platform in category shellcode ====================================================== Multi-Format Shellcode Encoding Tool - Beta v2.0 w32 ====================================================== / ,sSSSis ,sSSSs, Beta v2.0 w32. iS" dP dY" ,SP Encodes binary data to/from a...

AltantisFAQ SQL inj. vuln.

Atlantis GPL Knowledge Base Software SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/altantisfaq-sql-inj-vuln.html Vendor:http://atlantisfaq.com/ affected version:3.0 and prior Product Description: Atlantis FAQ AltantisFAQ Free...

Multiple Vulnerabilities Found by PROTOS IPSec Test Suite

Multiple Cisco products contain vulnerabilities in the processing of IPSec IKE Internet Key Exchange messages. These vulnerabilities were identified by the University of Oulu Secure Programming Group OUSPG "PROTOS" Test Suite for IPSec and can be repeatedly exploited to produce a denial of servic...

PT-2005-4426 · Cisco · Cisco Ios +2

Name of the Vulnerable Software and Affected Versions: Cisco IOS affected versions not specified Description: The issue is related to vulnerabilities in the processing of IPSec IKE messages in multiple Cisco products. These vulnerabilities were identified by the University of Oulu Secure...

vpasswd.cgi

The 'vpasswd.cgi' CGI is installed. Some versions do not properly check for special characters and allow a cracker to execute any command on your system. Warning : OpenVAS solely relied on the presence of this CGI, it did not determine if you specific version is vulnerable to that problem OpenVAS...

Record route

This plugin sends packets with the 'Record Route' option. It is a complement to traceroute. OpenVAS Vulnerability Test $Id: recordroute.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Record route Authors: Michel Arboi Copyright: Copyright C 2004 Michel Arboi This program is free software; y...

alya.cgi

alya.cgi is a cgi backdoor distributed with multiple rootkits. OpenVAS Vulnerability Test $Id: alya.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: alya.cgi Authors: Jason Lidow Copyright: Copyright C 2002 Jason Lidow This program is free software; you can redistribute it and/or modify it...

CuteNews index.php XSS

The remote web server contains a PHP script that is prone to cross-site scripting attacks. Description : The version of CuteNews installed on the remote host is vulnerable to a cross-site-scripting XSS attack. An attacker, exploiting this flaw, would need to be able to coerce a user to browse to ...