CVE-2010-2580

The SMTP service MESMTPC.exe in MailEnable 3.x and 4.25 does not properly perform a length check, which allows remote attackers to cause a denial of service crash via a long 1 email address in the MAIL FROM command, or 2 domain name in the RCPT TO command, which triggers an "unhandled invalid...

Command injection

The SMTP service MESMTPC.exe in MailEnable 3.x and 4.25 does not properly perform a length check, which allows remote attackers to cause a denial of service crash via a long 1 email address in the MAIL FROM command, or 2 domain name in the RCPT TO command, which triggers an "unhandled invalid...

Windows-Movie-Maker

The vulnerable part starts at “IsValidWMToolsStream” function. In this function new is used two times for allocating space. In both cases, values of Size needed for allocating memory is read from .mswmm file. Successfully exploiting this issue allows remote attackers to cause denial-of-service...

DEBIAN-CVE-2010-2089

The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengths, which allows context-dependent attackers to cause a denial of service memory corruption and application crash via crafted arguments, as demonstrated by a call to...

Windows RSH daemon Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Windows RSH...

linux/x86 generate portbind payload

No description provided by source. ?php / Utility : Generate Payload PortBind Linux/x86 Author : Jonathan Salwan Mail : submit ! shell-storm.org More shellcodes in = http://www.shell-storm.org/shellcode/ / function syntax echo "\nSyntax:\nroot@laptop:/ php ./payload.php port\n\n"; function...

No-IP DUC Remote code execution vulnerability

This host has No-IP DUC installed and is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbnoipdnsbofvuln.nasl 5158 2017-02-01 14:53:04Z mime $ No-IP DUC Remote code execution vulnerability Authors: Chandan S Copyright: Copyright c 2008 Greenbone Networks GmbH,...

CVE-2008-5297

Buffer overflow in No-IP DUC 2.1.7 and earlier allows remote HTTP servers to execute arbitrary code via a crafted response to a DNS update request, related to a missing length check in the GetNextLine function...

About MySQL SQL Column Truncation Vulnerabilities-vulnerability warning-the black bar safety net

By:thorn Stefan Esser today wrote a great article, mentioned about MySQL in the two defect 1. maxpacketsize problems 2. SQL Column Truncation attack I tested the second one. According to the paper in the description, when the mysql sqlmode is set to default, i.e. no turn on STRICTALLTABLES...

Linux Kernel "xt_sctp"拒绝服务攻击漏洞

Secunia Advisory:SA20703 Linux内核被报告一个漏洞，这个漏洞可被恶意攻击者操作进行拒绝服务攻击Denial of Service。 这个漏洞是因为对"xtsctp"代码的SCTP块长度缺省检查引起的。这可能通过一个0长度的块导致一个无限循环从而致使系统资源耗尽。 Linux Kernel 2.6.x 升级到版本2.6.17.1。 http://kernel.org/...

IBM OS/400 BrSmRcvAndCheck()远程溢出漏洞

BUGTRAQ ID: 29660 IBM OS/400是IBM网络服务器上所运行的操作系统。 IBM OS/400在modem端口上执行诊断时，IBM OS/400中由BrSmIntWrap所调用的BrSmRcvAndCheck函数未经长度检查便执行了memcpy操作。如果远程攻击者提交了超长参数的话，就可能触发缓冲区溢出，导致初始程序加载（IPL）bootstrap进程终止。 IBM OS/400 V6R1M0 IBM OS/400 V5R4M5 IBM OS/400 V5R4M0 IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Debian Security Advisory DSA 1409-3 (samba)

The remote host is missing an update to samba announced via advisory DSA 1409-3. OpenVAS Vulnerability Test $Id: deb14093.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1409-3 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

USN-549-1: PHP vulnerabilities

It was discovered that the wordwrap function did not correctly check lengths. Remote attackers could exploit this to cause a crash or monopolize CPU resources, resulting in a denial of service. CVE-2007-3998 Integer overflows were discovered in the strspn and strcspn functions. Attackers could...

cygwin-overflow.txt

============================================= INTERNET SECURITY AUDITORS ALERT 2007-005 - Original release date: May 23rd, 2007 - Last revised: November 24th, 2007 - Discovered by: Jesus Olmos Gonzalez - Severity: 5/5 ============================================= I. VULNERABILITY...

[Full-disclosure] Unrarlib 0.4.0 (urarlib_get) Local buffer overflow

Description: in file unrarlib.c don't exist the check control of size len filename passed in function urarlibget using strcpy Source error: -- char ArcName255; / RAR archive .. int urarlibgetvoid output, unsigned long size, char filename, void rarfile, char libpassword / Get a file from a RAR fil...

CVE-2006-2898

The IAX2 channel driver chaniax2 for Asterisk 1.2.x before 1.2.9 and 1.0.x before 1.0.11 allows remote attackers to cause a denial of service crash and execute arbitrary code via truncated IAX 2 IAX2 video frames, which bypasses a length check and leads to a buffer overflow involving negative...

CVE-2006-1834

Integer signedness error in Opera before 8.54 allows remote attackers to execute arbitrary code via long values in a stylesheet attribute, which pass a length check. NOTE: a sign extension problem makes the attack easier with shorter strings...

CVE-2006-1834

Integer signedness error in Opera before 8.54 allows remote attackers to execute arbitrary code via long values in a stylesheet attribute, which pass a length check. NOTE: a sign extension problem makes the attack easier with shorter strings...

TelCondex Simple Webserver Buffer Overflow

The TelCondex SimpleWebserver is vulnerable to a remote executable buffer overflow, due to missing length check on the referer-variable of the HTTP-header. OpenVAS Vulnerability Test $Id: telcondex.nasl 6063 2017-05-03 09:03:05Z teissa $ Description: TelCondex Simple Webserver Buffer Overflow...

TelCondex Simple Webserver Buffer Overflow

The TelCondex SimpleWebserver is vulnerable to a remote executable buffer overflow, due to missing length check on the referer-variable of the HTTP-header. SPDX-FileCopyrightText: 2003 Matt North Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...