PT-2010-5028

Name of the Vulnerable Software and Affected Versions IBM DB2 UDB version 9.5 before FP6a Description The issue in the Install component of IBM DB2 UDB enforces an unintended limit on password length. This limitation makes it easier for attackers to obtain access via a brute-force attack...

curl: zlib-compression causes curl to pass more than CURL_MAX_WRITE_SIZE bytes to write callback

contentencoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly restrict the amount of callback data sent to an application that requests automatic decompression, which might allow remote attackers to cause a denial of service application crash or have unspecified othe...

CVE-2010-0734

contentencoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly restrict the amount of callback data sent to an application that requests automatic decompression, which might allow remote attackers to cause a denial of service application crash or have unspecified othe...

On the php local includes-vulnerability warning-the black bar safety net

Would have thought it struck gold with a black brother after the Exchange found can only be applied to the Win32 platform, so this BUG might of the storm reduced, the basic not much harm, because in the WIN32 platform using PHP too. include $GETfile.”. php”; Previously we used a%0 0 to cut off, n...

kernel: KVM: x86 emulator: limit instructions to 15 bytes

The doinsnfetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel before 2.6.32-rc8-next-20091125 tries to interpret instructions that contain too many bytes to be valid, which allows guest OS users to cause a denial of service increased scheduling...

CVE-2008-6792

system-tools-backends before 2.6.0-1ubuntu1.1 in Ubuntu 8.10, as used by "Users and Groups" in GNOME System Tools, hashes account passwords with 3DES and consequently limits effective password lengths to eight characters, which makes it easier for context-dependent attackers to successfully condu...

PT-2009-3441 · Linux +2 · Linux +2

Name of the Vulnerable Software and Affected Versions: NovaStor NovaNET version 12 Description: The issue is related to a stack-based buffer overflow in the DtbClsLogin function, allowing remote attackers to execute arbitrary code on Linux platforms or cause a denial of service on Windows platfor...

TFTP Packet Buffer Overflow

libcurl uses the given file part of a TFTP URL in a manner that allows a malicious user to overflow a heap-based memory buffer due to the lack of boundary check. This overflow happens if you pass in a URL with a TFTP protocol prefix "tftp://", using a valid host and a path part that is longer tha...

3cdaemon tftp server DOS vulnerability

AUTHOR: Fortinet, inc Ning Wangnwangatscncomcn DATE: 15/12/2004 PRODUCTS: 3cdaemon version 2.0 revision 10 Description: 3com product 3cdaemon is one of the most popular used tools to achieve files backup and upgrade. Detail: 3com tftp daemon exist a vulnerability, which will encounter a fatal err...

Gzip Memory Bomb Denial Of Service

This module generates and hosts a 10MB single-round gzip file that decompresses to 10GB. Many applications will not implement a length limit check and will eat up all memory and eventually die. This can also be used to kill systems that download/parse content from a user-provided URL...

Microsoft Windows NT 4.02000 - NTFS File Hiding

Microsoft Windows NT 4.02000 - NTFS File Hiding source: https://www.securityfocus.com/bid/3989/info There exists a condition in Microsoft Windows operating systems using NTFS that may allow for files to be hidden. Though the NTFS filesystem allows for a 32000 character path, Microsoft Windows...

Dick Lin ZetaMail 2.1 - Login Denial of Service

Dick Lin ZetaMail 2.1 - Login Denial of Service source: https://www.securityfocus.com/bid/813/info The ZetaMail mail server will crash if a username/password pair longer than 3500 characters is supplied by the client. 19636-1.exe - binary for windows 19636-2.zip - source for windows 19636-3.tgz -...

ProFTPd 1.2 pre1pre2pre3pre4pre5 - Remote Buffer Overflow (2)

ProFTPd 1.2 pre1pre2pre3pre4pre5 - Remote Buffer Overflow 2 // source: https://www.securityfocus.com/bid/612/info The vulnerability in 1.2pre1, 1.2pre3 and 1.2pre3 is a remotely exploitable buffer overflow, the result of a sprintf in the logxfer routine in src/log.c. The vulnerability in 1.2pre4 ...