CVE-2003-1020

The formatsendtogui function in formats.c for irssi before 0.8.9 allows remote IRC users to cause a denial of service crash...

irssi - potential remote crash

irssi 0.8.9 release fixes a vulnerability that allows normal IRC users to remotely crash another user's irssi client, provided that either of these conditions is met: a irssi is running on an architecture that requires memory alignmentation ie. not x86 b "gui print text" signal is being used by...

security flaw

raddecode in FreeRADIUS 0.9.2 and earlier allows remote attackers to cause a denial of service crash via a short RADIUS string attribute with a tag, which causes memcpy to be called with a -1 length argument, as demonstrated using the Tunnel-Password attribute...

Important: Red Hat Security Advisory: zebra security update

Updated zebra packages that close a locally-exploitable and a remotely-exploitable denial of service vulnerability are now available. Zebra an open source implementation of TCP/IP routing software. Jonny Robertson reported that Zebra can be remotely crashed if a Zebra password has been enabled an...

security flaw

Ethereal 0.9.15 and earlier, and Tethereal, allows remote attackers to cause a denial of service crash via certain malformed 1 ISAKMP or 2 MEGACO packets...

[Full-Disclosure] MDKSA-2003:100 - Updated gdm packages fix local vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrake Linux Security Update Advisory Package name: gdm Advisory ID: MDKSA-2003:100 Date: October 16th, 2003 Affected versions: 9.1, 9.2, Corporate Server 2.1 Problem Description: Two vulnerabilities were discovered in gdm by Jarno Gassenbauer that...

SpeakFreely for Win <= 7.6a spoofed DoS

Luigi Auriemma Application: SpeakFreely http://www.fourmilab.ch/speakfree/ http://speak-freely.sourceforge.net Versions: = 7.6a Platforms: Windows Unix versions are NOT vulnerable Bug: Remote crash caused by multiple spoofed connections Risk: Low Author: Luigi Auriemma e-mail: [email protected]...

Denial Of Service in Plug & Play Web (FTP) Server

Denial Of Service in Plug & Play Web FTP Server Introduction: ============= "The Plug and Play Web Server provides all of the tools you need to host your own website. The tools are bundled together in one comprehensive software package that it is incredibly easy to use and maintain." - Vendors...

Exceed 5.0/6.0/6.1/7.1/8.0 - Font Name Handler Buffer Overflow

// source: https://www.securityfocus.com/bid/8194/info The Exceed server and client have been reported prone to a remotely triggered buffer overflow vulnerability. An attacker may trigger this vulnerability by sending excessive data as a font name to the server via a malicios XLoadQueryFont...

EnceladusServerSuite3.9.11.txt

Enceladus Server suite 3.9.11 Release Date: ------------- June 15,2003 Severity --------- HighRemote crash-code execution Systems Affected: ----------------- Enceladus Server Suite 3.9.11 possibly all the older versions are vulnerable Description: Enceladus Server Suite is a package that contains...

DEBIAN-CVE-2003-0297

c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service crash and possibly execute arbitrary code via certain large 1 literal and 2 mailbox size values that cause either integer signedness errors or integer overflow errors...

[RHSA-2003:118-01] Updated mICQ packages fix vulnerability

--------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated mICQ packages fix vulnerability Advisory ID: RHSA-2003:118-01 Issue date: 2003-04-24 Updated on: 2003-04-24 Product: Red Hat Linux Keywords: mICQ malformed ICQ message DoS 0xFE Cross...

Abyss X1 1.1.2 remote crash

Application: Abyss Webserver http://www.aprelium.com Versions: X1 v 1.1.2 Platform: Windows and Linux Bug: Crash caused by the reading of an unreacheable memory zone Risk: Remote crash Author: Auriemma Luigi e-mail: [email protected] web: http://www.pivx.com/luigi/ 1 Introduction 2 Bug 3 The Code 4...

abyss.txt

Application: Abyss Webserver http://www.aprelium.com Versions: X1 v 1.1.2 Platform: Windows and Linux Bug: Crash caused by the reading of an unreacheable memory zone Risk: Remote crash Author: Auriemma Luigi e-mail: [email protected] web: http://www.pivx.com/luigi/ 1 Introduction 2 Bug 3 The Code 4...

Emule 0.27b remote crash

Application: Emule http://emule-project.net Versions: 0.27b and previous versions Platform: Windows Bug: The program tries to read memory offset 0x00000000 if an attacker send a chat message without nickname Risk: Remote crash Author: Auriemma Luigi e-mail: [email protected] web:...

eMule Malformed Data Handling Remote DoS

It was possible to disable the remote eMule client by connecting to this port and sending malformed data. C Tenable Network Security, Inc. Ref: Date: Tue, 25 Mar 2003 13:03:13 +0000 From: Auriemma Luigi To: [email protected] Subject: Emule 0.27b remote crash include"compat.inc";...

Microsoft ActiveSync 3.5 - Null Pointer Dereference Denial of Service

// source: https://www.securityfocus.com/bid/7150/info A problem with ActiveSync could make it possible for remote users to trigger a denial of service. It has been reported that under some circumstances, the ActiveSync wcescomm service can be forced to crash. Due to improper handling of some...

EType EServ 1.9x - NNTP Remote Denial of Service

EType EServ 1.9x - NNTP Remote Denial of Service source: https://www.securityfocus.com/bid/6522/info EServ is a proxy software package distributed by EType. It is available for Microsoft Windows operating systems. It has been reported that a problem in EServ may cause the software to crash. When ...

EType EServ 2.9x - SMTP Remote Denial of Service

EType EServ 2.9x - SMTP Remote Denial of Service source: https://www.securityfocus.com/bid/6521/info EServ is a proxy software package distributed by EType. It is available for Microsoft Windows operating systems. It has been reported that a problem in EServ may cause the software to crash. When ...

Kaspersky Antivirus DoS

Title: Kaspersky Antivirus DoS Author: ZARAZA Affected: Kaspersky Antivirus 4.0.9.0 Server and Workstation version on Windows NT 4.0 and Windows 2000. Vendor: Kaspersky Lab Date: January, 30 2003 Risk: Average Exploitable: Yes Remote: Yes for server versions Vendor Notified: January, 30 2003 I...