1042 matches found
eMule操作系统用户帐户信息泄漏漏洞
BUGTRAQ ID: 30224 CNCAN ID:CNCAN-2008071508 eMule是一款流行的P2P下载软件。 eMule在发送共享文件列表时会泄漏操作系统用户帐户信息,远程攻击者可以利用漏洞借此这些敏感信息进行工程学等攻击。 当用户请求其他用户的共享文件列表时,文件夹的全路径会被发送,并在Emule日志中完全可见,如: Requesting shared files from 'yohan' User yohan 1507... shares directory 'C:\Documents and Settings\Jean-Denis\My documents...'...
Microsoft Malware Protection Engine TWO DoS Vulnerabilities
CVE-2008-1437 CVE-2008-1438 There are two vulnerabilities idenitified in Microsoft Antivirus product. These vulnerabilities can be exploited to cause Denial of service. 1. CVE-2008-1437 PE Parsing Memory Corruption While scanning a specially crafted PE file, Malware orotection engine...
DC++私密消息远程拒绝服务漏洞
BUGTRAQ ID: 30037 CVE ID:CVE-2008-2954 CNCVE ID:CNCVE-20082954 DC++是一款开放源码的免费的P2P客户端软件。 DC++不正确处理私密消息,远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 DC++ 0.706 可参考如下补丁信息: http://cvs.berlios.de/cgi-bin/viewcvs.cgi/linuxdcpp/linuxdcpp/client/NmdcHub.cpp.diff?r1=1.14&r2=1.15&sortby=date...
P2P Foxy Out of Memory Denial of Service Exploit
No description provided by source. P2P Foxy Out of memory Exploit Vulnerability Discovered by Styxosaurus Styxosaurus at gmail dot com Foxy is one of the most popular P2P software in Chinese users http://tw.gofoxy.net/ It starts to request more memory and freeze as when "&fs=" meet some large mag...
P2P Foxy - Out of Memory Denial of Service
P2P Foxy - Out of Memory Denial of Service P2P Foxy Out of memory Exploit Vulnerability Discovered by Styxosaurus Styxosaurus at gmail dot com Foxy is one of the most popular P2P software in Chinese users http://tw.gofoxy.net/ It starts to request more memory and freeze as when "&fs=" meet some...
P2P Foxy Out of Memory Denial of Service Exploit
Exploit for unknown platform in category dos / poc ================================================ P2P Foxy Out of Memory Denial of Service Exploit ================================================ P2P Foxy Out of memory Exploit Vulnerability Discovered by Styxosaurus Styxosaurus at gmail dot com...
P2P Foxy - Out of Memory Denial of Service
P2P Foxy Out of memory Exploit Vulnerability Discovered by Styxosaurus Styxosaurus at gmail dot com Foxy is one of the most popular P2P software in Chinese users http://tw.gofoxy.net/ It starts to request more memory and freeze as when "&fs=" meet some large magic point. Music.wmv milw0rm.com...
Debian DSA-1583-1 : gnome-peercast - buffer overflow
Several remote vulnerabilities have been discovered in GNOME PeerCast, the GNOME interface to PeerCast, a P2P audio and video streaming server. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-6454 Luigi Auriemma discovered that PeerCast is vulnerabl...
[SECURITY] [DSA 1582-1] New peercast packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1582-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 20, 2008 http://www.debian.org/security/faq -...
DSA-1583-1 gnome-peercast - several vulnerabilities
Bulletin has no description...
PeerCast: Buffer overflow
Background PeerCast is a client and server for P2P-radio network Description Luigi Auriemma reported a heap-based buffer overflow within the "handshakeHTTP" function when processing HTTP requests. Impact A remote attacker could send a specially crafted request to the vulnerable server, possibly...
DSA-1441-1 peercast
Bulletin has no description...
iMesh P2P Client Detection
iMesh is installed on the remote Windows host. iMesh is a peer-to- peer file sharing application. Make sure the use of this program fits with your corporate security policy. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29729; scriptversion"1.15";...
PeerCast servhs.cpp handshakeHTTP Function SOURCE Request Remote Overflow
The version of PeerCast installed on the remote host fails to check the length of user-supplied data in its 'handshakeHTTP' function in 'servhs.cpp' before copying it to the 'loginPassword' and 'loginMount' heap-based buffers. An unauthenticated attacker can leverage this issue to crash the...
iMesh 7.1.0.x - 'IMWeb.dll 7.0.0.x' Remote Heap Overflow
!-- iMesh = 7.1.0.x IMWebControl Class IMWeb.dll 7.0.0.x remote heap exploit IE7/XP full patched by rgod, site: http://retrogod.altervista.org/ software site: http://www.imesh.com "iMesh is a file sharing and online social network. It uses a proprietary, centralized, P2P protocol. iMesh is owned ...
Anon Proxy Server Software Detection
The remote service is a proxy server named Anon Proxy Server, which can operate either as a normal HTTP / HTTPS / Socks proxy or a P2P anonymous proxy. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid29703;...
CVE-2007-5714
The Gentoo ebuild of MLDonkey before 2.9.0-r3 has a p2p user account with an empty default password and valid login shell, which might allow remote attackers to obtain login access and execute arbitrary code...
Default credentials
The Gentoo ebuild of MLDonkey before 2.9.0-r3 has a p2p user account with an empty default password and valid login shell, which might allow remote attackers to obtain login access and execute arbitrary code...
CVE-2007-5714
The Gentoo ebuild of MLDonkey before 2.9.0-r3 has a p2p user account with an empty default password and valid login shell, which might allow remote attackers to obtain login access and execute arbitrary code...