503 matches found
CVE-2011-1139
wiretap/pcapng.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service application crash via a pcap-ng file that contains a large packet-length field...
CVE-2011-1139
wiretap/pcapng.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service application crash via a pcap-ng file that contains a large packet-length field...
MySQL COM_TABLE_DUMP Information Leakage and Arbitrary Command Execution
No description provided by source. / April 21.st 2006 myexploit.c MySql COMTABLEDUMP Memory Leak & MySql remote B0f MySql = 5.0.20 MySql COMTABLEDUMP Memory Leak MySql = 4.x.x copyright 2006 Stefano Di Paola stefano.dipaolaatwisec.it GPL 2.0 Disclaimer: In no event shall the author be liable for...
Ubuntu Update for samba regression USN-617-2
Ubuntu Update for Linux kernel vulnerabilities USN-617-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN6172.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for samba regression USN-617-2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.ne...
evolution-data-server: insufficient checking of NTLM authentication challenge packets
The ntlmchallenge function in the NTLM SASL authentication mechanism in camel/camel-sasl-ntlm.c in Camel in Evolution Data Server aka evolution-data-server 2.24.5 and earlier, and 2.25.92 and earlier 2.25.x versions, does not validate whether a certain length value is consistent with the amount o...
CVE-2008-3584
NetBSD 3.0, 3.1, and 4.0, when a pppoe instance exists, does not properly check the length of a PPPoE packet tag, which allows remote attackers to cause a denial of service system crash via a crafted PPPoE packet...
Debian Security Advisory DSA 1409-3 (samba)
The remote host is missing an update to samba announced via advisory DSA 1409-3. OpenVAS Vulnerability Test $Id: deb14093.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1409-3 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Heap overflow
Heap-based buffer overflow in the Express Backup Server service dsmsvc.exe in IBM Tivoli Storage Manager TSM Express 5.3 before 5.3.7.3 allows remote attackers to execute arbitrary code via a packet with a large length value...
DEBIAN-CVE-2007-3764
The Skinny channel driver chanskinny in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service crash via a certain data length value...
TFTPDWIN Server 0.4.2 (UDP) Denial of Service Exploit
No description provided by source. !/usr/bin/perl TFTPDWIN Server UDP DOS 0.4.2 POC written By : Umesh Wanve [email protected] ------------------------------------------------------------------------------- TFTPDWIN Server is a Freeware TFTP server for Windows 9x/NT/XP...
DEBIAN-CVE-2006-3913
Buffer overflow in Freeciv 2.1.0-beta1 and earlier, and SVN 15 Jul 2006 and earlier, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a 1 negative chunklength or a 2 large chunk-offset value in a PACKETPLAYERATTRIBUTECHUNK packet in the...
CVE-2006-3913
Buffer overflow in Freeciv 2.1.0-beta1 and earlier, and SVN 15 Jul 2006 and earlier, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a 1 negative chunklength or a 2 large chunk-offset value in a PACKETPLAYERATTRIBUTECHUNK packet in the...
CVE-2006-3913
Buffer overflow in Freeciv 2.1.0-beta1 and earlier, and SVN 15 Jul 2006 and earlier, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a 1 negative chunklength or a 2 large chunk-offset value in a PACKETPLAYERATTRIBUTECHUNK packet in the...
security flaw
sqlparse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to obtain sensitive information via a COMTABLEDUMP request with an incorrect packet length, which includes portions of memory in an error message...
CVE-2006-1517
sqlparse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to obtain sensitive information via a COMTABLEDUMP request with an incorrect packet length, which includes portions of memory in an error message...
Mandrake Linux Security Advisory : mplayer (MDKSA-2006:048)
Multiple integer overflows in 1 the newdemuxpacket function in demuxer.h and 2 the demuxasfreadpacket function in demuxasf.c in MPlayer 1.0pre7try2 and earlier allow remote attackers to execute arbitrary code via an ASF file with a large packet length value. The updated packages have been patched...
Integer overflow
Multiple integer overflows in Shareaza 2.2.1.0 allow remote attackers to execute arbitrary code via 1 a large packet length field, which causes an overflow in the ReadBuffer function in a BTPacket.cpp and b EDPacket.cpp, or 2 a large packet, which causes a heap-based overflow in the Write functio...
security flaw
The Orinoco driver orinoco.c in Linux kernel 2.6.13 and earlier does not properly clear memory from a previously used packet whose length is increased, which allows remote attackers to obtain sensitive information...
CVE-2001-1398
The CVE-2001-1398 issue affects the Linux kernel prior to 2.2.19, arising from the masquerading code where packet length checks were lax, potentially enabling kernel memory writes via the CPIA driver off-by-one bug. Confirmed in multiple advisories (Mandrake MDKSA-2001:037 and Debian/Debian DSA-0...