2041 matches found
Multiple BSD Distributions 'printf(3)' Memory Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36885/info Multiple BSD distributions are prone to a memory-corruption vulnerability because the software fails to properly bounds-check data used as an array index. An attacker can exploit this issue to cause application...
OpenBSD - ICMPv6 Fragment Remote Execution Exploit PoC
No description provided by source. The PoC executes the shellcode int 3 and returns. It overwrites the extfree function pointer on the mbuf and forces a mfreem on the overflowed packet. The Impacket library is used to craft and send packets http://oss.coresecurity.com/projects/impacket.html or...
FreeBSD and OpenBSD 'ftpd' NULL Pointer Dereference Denial of Service Vulnerability
No description provided by source. /FreeBSD and OpenBSD 'ftpd' NULL Pointer Dereference Denial Of Service Vulnerability The FreeBSD and OpenBSD 'ftpd' service is prone to a denial-of-service vulnerability because of a NULL-pointer dereference. Successful exploits may allow remote attackers to cau...
Apache 2.x HTTP Server Arbitrary HTTP Request Headers Security Weakness
漏洞类型： 设计缺陷 受影响的组件 VMWare ESX Server 3.0 VMWare ESX Server 2.5.4 Patch 1 VMWare ESX Server 2.5.4 VMWare ESX Server 2.5.3 Patch 4 VMWare ESX Server 2.5.3 VMWare ESX Server 2.5.2 VMWare ESX Server 2.5 VMWare ESX Server 2.1.3 Patch 2 VMWare ESX Server 2.1.3 VMWare ESX Server 2.1.2 VMWare ESX Server...
OpenBSD 3.x ISAKMPD Security Association Piggyback Delete Payload Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10496/info It is reported that OpenBSD's isakmpd daemon is susceptible to a remote denial of service vulnerability. An attacker is able to delete security associations and policies from IPSec VPN's by sending a malformed...
Multiple Vendors libc/glob(3) Resource Exhaustion (+0day remote ftpd-anon)
No description provided by source. Source: http://securityreason.com/securityalert/7822 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple Vendors libc/glob3 resource exhaustion +0day remote ftpd-anon Author: Maksymilian Arciemowicz http://netbsd.org/donations/ http://securityreason.com/...
Debian Linux 2.0/2.0 r5,FreeBSD <= 3.2,OpenBSD 2.4,RedHat Linux 5.2 i386,S.u.S.E. Linux <= 6.1 Lsof Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/496/info Lsof is an open file management utility included with many linux distributions. When run setuid root or setgid kmem, it is subject to a buffer overflow that can lead to regular users gaining root priveleges. /...
OpenBSD 3.3/3.4 sysctl Local Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9073/info A denial of service vulnerability has been reported for OpenBSD, specifically when handling malformed calls to sysctl. By invoking systcl and passing a specific flag in conjunction with a negative argument may...
BSD lpr 2000.05.07/0.48/0.72,lpr-ppd 0.72 Local Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/7025/info It has been reported that a vulnerability in the handling of some types of requests exists in lprm. When an attacker sends a maliciously crafted string to a configured printer through the lprm command, it may be...
FreeBSD <= 8.0 and OpenBSD 4.x 'ftpd' NULL Pointer Dereference Denial Of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38559/info The FreeBSD and OpenBSD 'ftpd' service is prone to a denial-of-service vulnerability because of a NULL-pointer dereference. Successful exploits may allow remote attackers to cause denial-of-service conditions...
Apache 1.x/2.0.x Chunked-Encoding Memory Corruption Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/5033/info When processing requests coded with the 'Chunked Encoding' mechanism, Apache fails to properly calculate required buffer sizes. This is believed to be due to improper signed interpretation of an unsigned integer...
psyBNC <= 2.3 - Denial of Service Exploit
No description provided by source. / psyBNC = 2.3 DoS Information System Advancement in Penetration ISAP Labs By Lunar Fault ElectronicSouls C May 19, 2002 Legal Notice: In no way is ElectronicSouls, ISAP, or the author responsible for the actions or usage of this program. The author retains all...
OpenBSD <= 4.5 (IP datagrams) Remote DoS Vulnerability
No description provided by source. / / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author : Rembrandt Date : 2009-04-09 Affected Software: OpenBSD Kernel Affect...
OpenBSD <= 4.5 IP datagram Null Pointer Deref DoS Exploit
No description provided by source. import sys from scapy import victim=sys.argv1 icmpv6=58 p=IPdst=victim p.proto=icmpv6 srp,timeout=1 milw0rm.com 2009-04-14...
OpenSSH 3.x Challenge-Response Buffer Overflow Vulnerabilities (1)
No description provided by source. source: http://www.securityfocus.com/bid/5093/info The OpenSSH team has reported two vulnerabilities in OpenSSH that are remotely exploitable and may allow for unauthenticated attackers to obtain root privileges. The conditions are related to the OpenSSH SSH2...
BSD ftpd 0.3.2 Single Byte Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2124/info The ftp daemon derived from 4.x BSD source contains a serious vulnerability that may compromise root access. There exists a one byte overflow in the replydirname function. The overflow condition is due to an...
Tcpdump 3.x L2TP Parser Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9263/info A vulnerability has been reported to exist in the software that may allow a remote attacker to cause a denial of service condition in tcpdump. The issue presents itself when an attacker sends a maliciously...
BSD bmon <= 1.2.1_2 - Local Exploit
No description provided by source. !/usr/local/bin/bash Written by Idan Nahoum. [email protected] local exploit for FreeBSD/OpenBSD with bmon 1.2.12 installed. when bmon is executed with the -n parameter it popens netcat but fail to provide an absoluth path. some bsds are configured with acls that...
BSD PPP 'pppx.conf' - Local Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28090/info BSD PPP is prone to a local denial-of-service vulnerability because it fails to perform adequate boundary checks on user-supplied input. Attackers can leverage this issue to crash the application and deny servi...
FreeBSD <= 5.0,NetBSD <= 1.4.2,OpenBSD <= 2.7 setsockopt() Dos
No description provided by source. source: http://www.securityfocus.com/bid/622/info A denial of service attack exists that affects FreeBSD, NetBSD and OpenBSD, and potentially other operating systems based in some part on BSD. It is believed that all versions of these operating systems are...