7491 matches found
[Full-disclosure] SecureW2 TLS security problem
Hi everyone! I was looking at the code for a TLS implementation, an open source implementation "SecureW2" by Alfa & Ariss, see: http://www.securew2.com/uk/index.htm I found that it uses weak random numbers when generating the pre-master-secret. The code is in "./Components/Common/release 3/versio...
DEBIAN-CVE-2005-2069
pamldap and nssldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent connection if the client is referred to a master, which may cause a password to be sent in cleartext and allows remote attackers to sniff the password...
CVE-2004-1492
CVE-2004-1492 concerns the game Master of Orion III (versions up to 1.2.5 and earlier). The vulnerability arises in how the game processes an incoming data packet that contains a large size specifier, triggering a large memory allocation that can fail and cause a remote denial of service (the gam...
CVE-2004-1492
Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service game exit via a data packet that contains a large size specifier, which causes a large memory allocation to fail...
CVE-2004-1493
Master of Orion III 1.2.5 and earlier is affected. The issue allows remote attackers to cause a denial of service (server crash) via multiple connections using long nicknames, possibly triggering a buffer overflow. Root cause isn’t explicitly detailed in the provided documents beyond this descrip...
CVE-2004-1493
Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service server crash via multiple connections with long nicknames, possibly triggering a buffer overflow...
CVE-2004-1493
Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service server crash via multiple connections with long nicknames, possibly triggering a buffer overflow...
CVE-2004-1492
Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service game exit via a data packet that contains a large size specifier, which causes a large memory allocation to fail...
CVE-2004-1220
Battlefield 1942 (1.6.19 and earlier) and Battlefield Vietnam (1.2 and earlier) are affected. A remote master server can cause a denial of service (client crash) by replying with a large numplayers value, which triggers a null dereference on the client. This describes the vulnerability and impact...
Crashs in Master of Orion III 1.2.5
Luigi Auriemma Application: Master of Orion III http://moo3.quicksilver.com Versions: = 1.2.5 Platforms: Windows and MacOS Bugs: - allocation error - big nicknames crash Exploitation: remote, versus server Date: 27 October 2004 Author: Luigi Auriemma e-mail: [email protected] web:...
Quicksilver Master of Orion III 1.2.5 - Multiple Remote Denial of Service Vulnerabilities
source: https://www.securityfocus.com/bid/11550/info Master of Orion III is reported prone to multiple remote denial of service vulnerabilities. These issues occur because the application does not handle exceptional conditions in a proper manner. Master of Orion III 1.2.5 and prior versions are...
Master of Orion III 1.2.5 - Denial of Service
Master of Orion III 1.2.5 - Denial of Service / by Luigi Auriemma / include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error;...
Master of Orion III <= 1.2.5 Denial of Service Exploit
Exploit for unknown platform in category dos / poc ====================================================== Master of Orion III include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include...
Master of Orion III <= 1.2.5 Denial of Service Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include string.h include errno.h...
Quicksilver Master of Orion III 1.2.5 - Multiple Remote Denial of Service Vulnerabilities
Quicksilver Master of Orion III 1.2.5 - Multiple Remote Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/11550/info Master of Orion III is reported prone to multiple remote denial of service vulnerabilities. These issues occur because the application does not handle...
Master of Orion III 1.2.5 - Denial of Service
/ by Luigi Auriemma / include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupted system...
bsd/x86 - cat /etc/master.passwd | mail email 92 bytes
bsd/x86 cat /etc/master.passwd | mail email 92 bytes. Shellcode exploit for bsdx86 platform / BSD version FreeBSD, OpenBSD, NetBSD. [email protected] 92 bytes. execve/bin/sh -c "/bin/cat /etc/master.passwd|mail root@localhost"; pueden reemplzar el comando por lo que se les ocurra. / char...
Distributed Network Protocol Version 3 (DNP3) Master Detection (SCADA)
Binary data 3552.prm...
Mandrake Linux Security Advisory : openssl (MDKSA-2002:046-1)
An audit of the OpenSSL code by A.L. Digital Ltd and The Bunker, under the DARPA program CHATS, discovered a number of vulnerabilities in the OpenSSL code that are all potentially remotely exploitable. From the OpenSSL advisory : 1. The client master key in SSL2 could be oversized and overrun a...
CVE-2002-0712
Entrust Authority Security Manager EASM 6.0 does not properly require multiple master users to change the password of a master user, which could allow a master user to perform operations that require multiple authorizations...