2797 matches found
Linux Kernel Local DoS vulnerability.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello. I'd like to present one of Linux Kernel vulnerabilities. As far as I know, this one affects 2.6.x kernels. Problem - -- The problem lies in systimercreate in Linux/kernel/posix-timers.c. Each time user creates a posix timer, some kernel memory ...
Dropbear SSH Authorization-pending Connection Saturation DoS
The remote host is running Dropbear, a small, open source SSH server. The version of Dropbear installed on the remote host, by default, has a limit of 30 connections in the authorization-pending state; subsequent connections are closed immediately. This issue can be exploited trivially by an...
security flaw
store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service crash via certain aborted requests that trigger an assert error related to STOREPENDING...
DEBIAN-CVE-2005-2794
store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service crash via certain aborted requests that trigger an assert error related to STOREPENDING...
CVE-2005-2431
The 1 lost password and 2 account pending features in GForge 4.5 do not properly set a limit on the number of e-mails sent to an e-mail address, which allows remote attackers to send a large number of messages to arbitrary e-mail addresses aka mail bomb...
Sun Ray Smartcard reader may leave desktop session open when card is quickly removed
Overview The Sun Ray Smartcard reader fails to properly detect a "quick removal, reinsertion and removal of a Smartcard." Description The Sun Ray is a thin client computing device designed to process user input and output, and provide access to computing services hosted by a server. Authenticatio...
[security bulletin] SSRT2362 WEBES Service Tools (HP Tru64 UNIX, HP OpenVMS, Windows) Potential File Access Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SECURITY BULLETIN SSRT2362 WEBES Service Tools HP Tru64 UNIX, HP OpenVMS, Windows Potential File Access Vulnerability REVISION: 0 ------------------------------------------------------------ NOTICE: There are no restrictions for distribution of this...
KICQ 2.0.0b1 can be remotely crashed
KICQ is an ICQ client, specifically designed for the KDE. Versions affected: KICQ 2.0.0b1 using icqlib 1.0.0 Description KICQ can be remotely crashed in a very simple way. Just telnet the machine on wich KICQ is running on the port it's bound and feed some garbage. bash-2.05$ telnet 10.0.0.1 1030...
ICQ remote buffer overflow vulnerability
This is very similar to the AIM overflow recently discovered. ICQ protocol uses the same TLV 2711 packet and there is a similar weakness in the parsing of the packet. The details of this vulnerability will not be released until a further time when a patch has been implemented, probably. ICQ2000...
PerlCal (CGI) show files vulnerability
whizkunde security advisory: PerlCal CGI http://www.whizkunde.org | [email protected] ---------------------------------------------------------- Release date: April 27th 2001 Subject: PerlCal CGI security problem Systems affected: NIX not windows systems running PerlCal CGI script Vendor:...
OpenBSD 2.x - Pending ARP Request Remote Denial of Service
// source: https://www.securityfocus.com/bid/1759/info OpenBSD is vulnerable to a remotely exploitable denial of service condition. The problem seems to be a lack of limits on the storage of pending arp requests, and a failure to handle the condition of too many. If an attacker somehow causes a...
smartftp.txt
I found a bug in the SmartFTP-D Server which will give an attacker full access to the server, if he has the right to write files on the server. For every user, the program is checking if a special Userfile exists Sample: Username=hacker & Userfile=hacker.FTPUser. If it exists, the configuration,...
goodtech.telnet.dos.txt
Remote DoS Attack in GoodTech Telnet Server NT v2.2.1 Vulnerability PROBLEM UssrLabs found a Remote DoS Attack in GoodTech Telnet Server NT v2.2.1, the buffer overflow is caused by a long user name 23870 characters. There is not much to expand on.... just a simple hole Example: gimmemore@itsme$...
worldclient.2.0.0.0.dos.txt
Remote DoS Attack in WorldClient Server v2.0.0.0 Vulnerability PROBLEM: UssrLabs found a buffer overflow in WorldClient Server v2.0.0.0 where they do not use proper bounds checking. The following all result in a Denial of Service against the service in question. affected services: WorldClient: Po...
vftpd.txt
Remote DoS Attack in Vermillion FTP Daemon VFTPD v1.23 Vulnerability PROBLEM UssrLabs found a Local/Remote DoS Attack in Vermillion FTP Daemon VFTPD v1.23, The buffer overflow is caused by a 3 times long cwd, 504 characters, Example: gimmemore@itsme$ telnet example.com 21 Trying example.com...
