6180 matches found
GNOME gdmchooser format string vulnerability
Format string vulnerability in remote hostname...
Microsoft Windows - NetpManageIPCConnect Remote Stack Overflow (MS06-070) (Python)
Microsoft Windows - NetpManageIPCConnect Remote Stack Overflow MS06-070 Python !/usr/bin/python MS06-070 Windows WorkStation NetpManageIPCConnect Vulnerability Exploit Tested on windows 2000 server SP4 Usage: python NetAPI-NetrJoinDomain2.py Requires a domain controller on the network configure...
CVE-2006-4691
Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service wkssvc.dll in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to execute arbitrary code via NetrJoinDomain2 RPC messages with a long hostname...
Hawking Technology wireless router WR254-CA DNS issue
Hi, I have discovered a security issue with Hawking Technology wireless router, model WR254-CA. Since they are still available on the market so I think it will be good to warn the community. This router contains a DNS address 139.175.55.244 hardcoded in the firmware. At least when used in DHCP...
CVE-2006-5290
The ESS/ Network Controller and MicroServer Web Server components of Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265 and 275 allow remote attackers to bypass authentication and execute arbitrary code via "WebUI command injection on TCP/IP hostname."...
openssh43p1DoS.txt
!/bin/bash OpenSSH CRC compensation attack detection DoS PoC. Tavis Ormandy Yes, I really did implement crc-32 in bash. usage: script victim hostname hostname=$1:-localhost port=$2:-22 where the fifo is created to communicate with netcat fifo=/tmp/nc.$$ make the fifos mkfifo $fifo.in mkfifo...
Ipswitch IMail SMTP Server code execution
Stack buffer overflow on oversized hostname string within characters '@' and ':'...
ShockwaveFlash ActiveX buffer overflow
Stack overflow stack memory exhaustion on oversized hostname in AllowScriptAccess property ftp:// URL...
CVE-2006-3440
Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka "Winsock Hostname Vulnerability."...
PAC privilege escalation using Function.prototype.call — Mozilla
mozbugra4 reports that a malicious Proxy AutoConfig PAC server could serve a PAC script that can execute code with elevated privileges by setting the required FindProxyForURL function to the eval method on a privileged object that leaked into the PAC sandbox. By redirecting the victim to a...
CVE-2006-3414
CVE-2006-3414 affects Tor prior to 0.1.1.20. The issue arises in server descriptors that use hostnames instead of IP addresses, enabling remote attackers to influence/address selectivity by providing preferential address resolution and thereby arbitrarily grouping users. The available connected d...
CVE-2006-3199
Opera 9 allows remote attackers to cause a denial of service crash via an A tag with an href attribute with a URL containing a long hostname, which triggers an out-of-bounds operation...
MyServer-0.5.txt
/ MyServer 0.5 denial of service / / bug found by badpack3t. / / http://myserverweb.sourceforge.net / / / / $ gcc -o fms fms-0.5.c linux version / / $ gcc -o fms fms-0.5.c -DWINDOWS windows version / / / / $ ./fms / / / / Federico Fazzi / include include include if WINDOWS include pragma...
Mandrake Linux Security Advisory : openldap (MDKSA-2006:096)
A stack-based buffer overflow in st.c in slurpd for OpenLDAP might allow attackers to execute arbitrary code via a long hostname. Packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
Stack overflow
Stack-based buffer overflow in st.c in slurpd for OpenLDAP before 2.3.22 might allow attackers to execute arbitrary code via a long hostname...
CVE-2006-2754
Stack-based buffer overflow in st.c in slurpd for OpenLDAP before 2.3.22 might allow attackers to execute arbitrary code via a long hostname...
CVE-2006-2754
Stack-based buffer overflow in st.c in slurpd for OpenLDAP before 2.3.22 might allow attackers to execute arbitrary code via a long hostname...
FreeBSD : firefox & mozilla -- buffer overflow vulnerability (8665ebb9-2237-11da-978e-0001020eed82)
Tom Ferris reports : A buffer overflow vulnerability exists within Firefox version 1.0.6 and all other prior versions which allows for an attacker to remotely execute arbitrary code on an affected host. The problem seems to be when a hostname which has all dashes causes the NormalizeIDN call in...
ASP.NET w3wp (COM Components) Remote Crash Exploit
Exploit for unknown platform in category dos / poc ================================================== ASP.NET w3wp COM Components Remote Crash Exploit ================================================== // w3wp-dos.c // include "stdafx.h" pragma comment lib,"ws232" include include include include...