Apache Traffic Server 3.0.x < 3.0.4 / 3.1.x < 3.1.3 Host HTTP Header Parsing Remote Overflow

According to its banner, the version of Apache Traffic Server running on the remote host is 3.0.x prior to 3.0.4 or 3.1.x prior to 3.1.3. It is, therefore, affected by a heap-based buffer overflow vulnerability when handling malicious HTTP host headers. A remote, unauthenticated attacker can...

SPlayer 3.7 (build 2055) - Remote Buffer Overflow

SPlayer 3.7 build 2055 - Remote Buffer Overflow !/usr/bin/python Exploit Title: SPlayer Software Link: http://www.splayer.org/index.en.html Versions: URL ctrl+u ... 3. Input the server URL and Click OK ... 4. Boom!/calc ... Method 2: 1. Execute this script ... 2. Launch SPlayer and click Open...

Red Hat Directory Server Accept-Language HTTP Header Parsing Buffer Overflow (CVE-2008-2928)

Red Hat Directory Server is an LDAP-based server that centralizes application settings, user profiles, group data, policies, and access control information into an operating system-independent, network-based registry. Fedora Directory Server is a free version of Red Hat Directory Server. There...

SuSE9 Security Update : Red Carpet (YOU Patch Number 11461)

This update fixes a bug in the HTTP header parsing code of the included libsoup. This bug makes rcd vulnerable to a remote denial-of-service attack. CVE-2006-5876 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

Check Point Firewall-1 PKI Web Service buffer overflow

Multiple buffer overflows on HTTP headers parsing...

Debian Security Advisory DSA 1683-1 (streamripper)

The remote host is missing an update to streamripper announced via advisory DSA 1683-1. OpenVAS Vulnerability Test $Id: deb16831.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1683-1 streamripper Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...

openSUSE 10 Security Update : libsoup (libsoup-2503)

This update fixes a bug in the HTTP header parsing code. Applications using this library maybe vulnerable to a remote denial-of-service attack. CVE-2006-5876 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

Streamripper 1.62.1 - Buffer Overflows

Streamripper 1.62.1 Security Advisory | http://streamripper.sf.net Multiple Buffer Overflows 12 August 2007 Chris Rohlf http://em386.blogspot.com ----------- Description ----------- Streamripper is a program used to rip streaming media to mp3 format to your harddrive. Multiple buffer overflows th...

streamripper-2.txt

/ . \ \ \ \ | | / | | | | \ / / /\ \ / \ | \ / / / / 29\08\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet to look through "MbdMP Going forward may not be the answer .dMMMMMM.P dMM MMMMMM maybe I should go back...

Streamripper <= 1.61.25 HTTP Header Parsing Buffer Overflow Expl 2

Exploit for unknown platform in category remote exploits ===================================================================== Streamripper exploit.exe 80 0 public-release streamripper streamripper.exe http://127.0.0.1:80 Connecting... on other shell + client conneted! + exploit send check shell ...

CVE-2006-3124

Buffer overflow in the HTTP header parsing in Streamripper before 1.61.26 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted HTTP headers...

CVE-2006-3124

Buffer overflow in the HTTP header parsing in Streamripper before 1.61.26 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted HTTP headers...

CVE-2006-3124

CVE-2006-3124 describes a buffer overflow in Streamripper’s HTTP header parsing (lib/http.c) that could be triggered by crafted HTTP headers, potentially leading to denial of service or arbitrary code execution. ConnectedOpenVAS entries and Debian/OSS advisories reference Streamripper and corrobo...

CVE-2006-3124: Undefined Security Weakness

Buffer overflow in the HTTP header parsing in Streamripper before 1.61.26 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted HTTP headers...

DSA-1120 mozilla-firefox - several vulnerabilities

Bulletin has no description...

Mandrake Linux Security Advisory : squid (MDKSA-2005:034)

More vulnerabilities were discovered in the squid server : The LDAP handling of search filters was inadequate which could be abused to allow logins using severial variants of a single login name, possibly bypassing explicit access controls CVE-2005-0173. Minor problems in the HTTP header parsing...

SUSE-SA:2005:006: squid

The remote host is missing the patch for the advisory SUSE-SA:2005:006 squid. Squid is a feature-rich web-proxy with support for various web-related protocols. The last two squid updates from February the 1st and 10th fix several vulnerabilities. The impact of them range from remote...