CVE-2006-3216

Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to cause a denial of service via 1 non-ASCII characters in a reverse DNS lookup result from a Received header, which leads to a Receiver service stop, and 2 unspecified vectors involvi...

spamassassin security update

CentOS Errata and Security Advisory CESA-2006:0543 Updated spamassassin packages that fix an arbitrary code execution flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SpamAssassin provides a way to reduce unsolicited...

Neon Responder 5.4 - Clock Synchronization Denial of Service

Neon Responder 5.4 - Clock Synchronization Denial of Service / Stefan Lochbihler/ include include include pragma commentlib,"ws232" define PORT 4347 char CLOCKMSG = "\x00\x0e\x5a\x00\x4c\xe9\x24\xb1\x17\x88\x40\x84"; //Password = "" void usage char; void endpgr char ,SOCKET, char; unsigned long...

squid security update

CentOS Errata and Security Advisory CESA-2006:0052 An updated squid package that fixes a security vulnerability as well as several issues is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Squid is a high-performance proxy cachin...

win32 WinExec Command Parameter 104+ bytes

win32 WinExec Command Parameter 104+ bytes. Shellcode exploit for win32 platform ; ; relocateable dynamic runtime assembly code example using hash lookup ; ; WinExec with ExitThread ; 104 bytes ; ; for testing: ; ; ml /c /coff /Cp wexec2.asm ; link /subsystem:windows /section:.text,w wexec2.obj ;...

win32 WinExec() Command Parameter 104+ bytes

Exploit for win32 platform in category shellcode ============================================ win32 WinExec Command Parameter 104+ bytes ============================================ ; ; relocateable dynamic runtime assembly code example using hash lookup ; ; WinExec with ExitThread ; 104 bytes ; ...

CVE-2005-2777

CVE-2005-2777 affects Looking Glass (Looking Glass 20040427). The issue is a remote command execution vulnerability: an attacker can craft shell metacharacters in the DNS lookup query field to run arbitrary commands, with the attacker able to execute code on the web server (per the description’s ...

CVE-2005-2777

Looking Glass 20040427 allows remote attackers to execute arbitrary commands via shell metacharacters in the DNS lookup query field...

EUVD-2005-2778

Looking Glass 20040427 allows remote attackers to execute arbitrary commands via shell metacharacters in the DNS lookup query field...

Looking Glass v20040427 arbitrary commands execution / cross site scripting

9.05 27/08/2005 Looking Glass v20040427 arbitrary commands execution / cross site scripting description: Looking Glass is a pretty extensive web based network querying tool for use on php enabled servers. site: http://de-neef.net/articles.php?id=2&page=1 download page:...

CVE-2002-2103

Apache before 1.3.24, when writing to the log file, records a spoofed hostname from the reverse lookup of an IP address, even when a double-reverse lookup fails, which allows remote attackers to hide the original source of activities...

Windows Upload/Execute, Find Tag Ordinal Stager

Uploads an executable and runs it staged. Use an established connection This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 92 include Msf::Payload::Stager include Msf::Payload::Window...

Reflective DLL Injection, Find Tag Ordinal Stager

Inject a DLL via a reflective loader. Use an established connection This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 92 include Msf::Payload::Stager include Msf::Payload::Windows de...

[SECURITY] [DSA 751-1] New squid packages fix IP spoofing vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 751-1 [email protected] http://www.debian.org/security/ Martin Schulze July 11th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 751-1] New squid packages fix IP spoofing vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 751-1 [email protected] http://www.debian.org/security/ Martin Schulze July 11th, 2005 http://www.debian.org/security/faq -...

DSA-751-1 squid - IP spoofing

Bulletin has no description...

Debian DSA-751-1 : squid - IP spoofing

The upstream developers have discovered a bug in the DNS lookup code of Squid, the popular WWW proxy cache. When the DNS client UDP port assigned by the operating system at startup is unfiltered and the network is not protected from IP spoofing, malicious users can spoof DNS lookups which could...

Courier Mail Server < 0.50.1 SPF Data Lookup Remote DoS

Binary data 3048.prm...

FreeBSD ipfw packet filter race conditions

Because of insuddicient locking it's possible to corrupt cached lookup table on machines with threading PREEMPTIVE multitasking...

FreeBSD-SA-05:13.ipfw

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:13.ipfw Security Advisory The FreeBSD Project Topic: ipfw packet matching errors with address tables Category: core Module: netinet Announced: 2005-06-29...