kill_sntsd.pl

I noticed an uncommon scanf overflow in the Simple Network Time Sync daemon and client version 1.0, tested on Redhat 6.1. I haven't looked into this fully yet, but it looks as tho it could be root comprimising as it sits on a priveledged udp port and seems to coredump, but looks like it only give...

Lotus Domino Enterprise Server 5.0.1/5.0.2/5.0.3 / Mail Server 5.0.1/5.0.2/5.0.3 - Remote Buffer Overflow

Lotus Domino Enterprise Server 5.0.1/5.0.2/5.0.3,Mail Server 5.0.1/5.0.2/5.0.3 Buffer Overflow source: https://www.securityfocus.com/bid/1229/info The code that handles the 'rcpt to' 'saml from' and 'soml from' commands in the ESMTP service of Lotus Domino Server has an unchecked buffer. If Lotus...

RedHat Linux 6.x - X Font Server Buffer Overflow (Denial of Service)

// source: https://www.securityfocus.com/bid/1111/info A denial of service exists in the X11 font server shipped with RedHat Linux 6.x. Due to improper input validation, it is possible for any user to crash the X fontserver. This will prevent the X server from functioning properly. Additional,...

RedHat Linux 6.x - X Font Server Buffer Overflow (Denial of Service)

RedHat Linux 6.x - X Font Server Buffer Overflow Denial of Service // source: https://www.securityfocus.com/bid/1111/info A denial of service exists in the X11 font server shipped with RedHat Linux 6.x. Due to improper input validation, it is possible for any user to crash the X fontserver. This...

Denial of Service in Xitami webserver all versions up to v2.5b1 for Windows.

Anyone can remotely crash Xitami webserver by sending simple GET command. On remote side will be: Assertion Failed! Module: D:ImatixDevelopSmtSmthttpl.c , line 745 All you need to do is just telnet to remote computer and execute GETspaceenterenter command. Also Xitami will crash if you'll execute...

Atrium Software Mercur Mail Server 3.2 - Multiple Buffer Overflows (1)

// source: https://www.securityfocus.com/bid/1051/info Atrium Software Mercur is a SMTP, POP3, and IMAP mail server. Insufficient boundary checking exists in the code that handles within the SMTP "mail from" command, the POP3 "user" command and the IMAP "login" command. The application will crash...

MS00-013: Microsoft Windows Media Server Malformed Handshake Sequence DoS (253943) (intrusive check)

It was possible to crash the remote Microsoft Media Server by sending it specially crafted packets. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10289; scriptversion"1.29"; scriptcvsdate"Date: 2018/11/15 20:50:29"; scriptcveid"CVE-2000-0211"; scriptbugtraqid1000;...

CVE-1999-0271

The CVE-1999-0271 issue affects Progressive Networks Real Video Server (pnserver). Public records describe remote crashes of the Real Video Server when handling crafted input data, impacting availability. Nessus/NVD/Red Hat entries consistently reference a remote crash as the core vulnerability, ...

CVE-1999-0271

Progressive Networks Real Video server pnserver can be crashed remotely...

Jgaa WarFTPd 1.66 x4s1.67-3 - CWDMKD Denial of Service

Jgaa WarFTPd 1.66 x4s1.67-3 - CWDMKD Denial of Service // source: https://www.securityfocus.com/bid/966/info War-FTPd 1.67 and possibly previous versions are susceptible to a buffer overflow DoS attack. Due to improper bounds checking in the code that handles MKD and CWD commands, it is possible ...

Alt-N MDaemon 3.1.1 - Denial of Service

Alt-N MDaemon 3.1.1 - Denial of Service source: https://www.securityfocus.com/bid/1689/info Alt-N MDaemon 3.1.1 is subject to a denial of service. If a remote user requests a specially crafted URL to the web services within MDaemon the service will crash. A restart of the service is required in...

Axent Raptor Firewall Zero Length IP Remote DoS

It is possible to make the remote Axent raptor freeze by sending it a IP packet containing special options of length equals to 0 An attacker may use this flaw to make the remote firewall crash continuously, thus preventing the network from working properly. C Tenable Network Security, Inc. THIS...

True North Software Internet Anywhere Mail Server 2.3.x - Mail Server Multiple Buffer Overflow

True North Software Internet Anywhere Mail Server 2.3.x - Mail Server Multiple Buffer Overflow // source: https://www.securityfocus.com/bid/730/info // // True North Software's Internet Anywhere Mail Server has various weaknesses that could allow an attacker to remotely crash the server running...

smtp_bof.txt

Subject: SECURITY TenFour TFS SMTP 3.2 Buffer Overflow To: [email protected] INTRINsec Security Advisory Release Date : August 30, 1999 Software : TenFour TFS SMTP 3.2 Operating System: Windows NT 3.x / 4.x Impact : The attackers can use a misconfigured TFS SMTP for spamming and can...

TCP/IP IGMP Overlap Remote DoS (pimp)

It was possible to crash the remote host using the 'pimp' attack. This flaw allows an attacker to make this host crash at will, thus preventing the legitimate users from using it. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson Added BugtraqI...

TCP/IP SYN Loopback Request Remote DoS (land.c)

It was possible to make the remote server crash using the 'land' attack. An attacker may use this flaw to shut down this server, thus preventing your network from working properly. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10133; scriptversion"1.33";...

TCP/IP IP Fragmentation Remote DoS (bonk)

It was possible to make the remote server crash using the 'bonk' attack. This is due to a design flaw in the remote operating system's TCP/IP implementation. An attacker may use this flaw to shut down this server, thus preventing the network from working properly. C Tenable Network Security, Inc...

Cisco Catalyst Supervisor Remote Reload DoS

The remote host appears to be a Cisco Catalyst switch. This device runs an undocumented TCP service. Sending a carriage return to this port causes the switch to immediately reset. A remote attacker could repeatedly exploit this to disable the switch. C Tenable Network Security, Inc...

Linux Kernel 2.22.3 (Debian Linux 2.1 RedHat Linux 6.0 SuSE Linux 6.1) - IP Options

Linux Kernel 2.22.3 Debian Linux 2.1 RedHat Linux 6.0 SuSE Linux 6.1 - IP Options / source: https://www.securityfocus.com/bid/302/info A vulnerability in the Linux Kernel's IPv4 option processing may allow a remote user to crash the system. The vulnerability is the result of the kernel freeing a...

Linux Kernel 2.2/2.3 (Debian Linux 2.1 / RedHat Linux 6.0 / SuSE Linux 6.1) - IP Options

/ source: https://www.securityfocus.com/bid/302/info A vulnerability in the Linux Kernel's IPv4 option processing may allow a remote user to crash the system. The vulnerability is the result of the kernel freeing a socket buffer when it shouldn't while sending an ICMP Parameter Problem error...