ruby: FTP PASV command response can cause Net::FTP to connect to arbitrary host

Ruby's Net::FTP module trusted the IP address included in the FTP server's response to the PASV command. A malicious FTP server could use this to make Ruby applications using the Net::FTP module to connect to arbitrary hosts and use this to perform port scanning or information extraction from...

The vulnerability of the FTM command implementation in Qualcomm’s embedded software allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the FTM command implementation in Qualcomm’s embedded software is caused by buffer overflow. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2021-25471

A lack of replay attack protection in Security Mode Command process prior to SMR Oct-2021 Release 1 can lead to denial of service on mobile network connection and battery depletion...

CVE-2021-25471

A lack of replay attack protection in Security Mode Command process prior to SMR Oct-2021 Release 1 can lead to denial of service on mobile network connection and battery depletion...

Design/Logic Flaw

A lack of replay attack protection in Security Mode Command process prior to SMR Oct-2021 Release 1 can lead to denial of service on mobile network connection and battery depletion...

CVE-2021-25471

A lack of replay attack protection in Security Mode Command process prior to SMR Oct-2021 Release 1 can lead to denial of service on mobile network connection and battery depletion...

CVE-2021-25471

The vulnerability CVE-2021-25471 affects Samsung devices in the Security Mode Command (SMC) processing path where replay protection is missing. This lack of replay attack protection can cause denial of service to mobile network connections and result in battery depletion. Documented impact is tie...

CVE-2021-25471: Improper Input Validation

A lack of replay attack protection in Security Mode Command process prior to SMR Oct-2021 Release 1 can lead to denial of service on mobile network connection and battery depletion...

PT-2021-7399 · Qualcomm · Snapdragon Connectivity +6

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables affected versions not specified Description: The issue is related to improper...

CVE-2008-1501

The sendusermode function in suser.c in 1 Undernet ircu 2.10.12.12 and earlier, 2 snircd 1.3.4 and earlier, and unspecified other ircu derivatives allows remote attackers to cause a denial of service daemon crash via a malformed MODE command...

CVE-2008-1501

The sendusermode function in suser.c in 1 Undernet ircu 2.10.12.12 and earlier, 2 snircd 1.3.4 and earlier, and unspecified other ircu derivatives allows remote attackers to cause a denial of service daemon crash via a malformed MODE command...

CVE-2008-1501

The sendusermode function in suser.c in 1 Undernet ircu 2.10.12.12 and earlier, 2 snircd 1.3.4 and earlier, and unspecified other ircu derivatives allows remote attackers to cause a denial of service daemon crash via a malformed MODE command...

CVE-2008-1501: Undefined Security Weakness

The sendusermode function in suser.c in 1 Undernet ircu 2.10.12.12 and earlier, 2 snircd 1.3.4 and earlier, and unspecified other ircu derivatives allows remote attackers to cause a denial of service daemon crash via a malformed MODE command...

ircu and snircd IRC servers array index overflow

Array index overflow in /mode command...

CVE-2007-4584

Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary code via a long string in a MODE command, related to the pmode variable...

CVE-2007-4584: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary code via a long string in a MODE command, related to the pmode variable...

CVE-2007-1503

Multiple format string vulnerabilities in comm.c in Rhapsody IRC 0.28b allow remote attackers to execute arbitrary code via format string specifiers to the createctcpmessage function using the message argument to the 1 me or 2 ctcp commands, and possibly related vectors involving the 3 whois, 4...

PT-1997-1039 · Washington University · Wu-Ftpd

Name of the Vulnerable Software and Affected Versions: wu-ftp affected versions not specified Description: A buffer overflow issue exists in wu-ftp, triggered by the PASV command, which causes a core dump. Recommendations: At the moment, there is no information about a newer version that contains...