Multiple Linux kernel vulnerabilities

Remote DoS with netfilter iptrecent module. Privilege escalation with sendmsg for amd64 platform. Reading kernel memory and IO ports with rawsendmsg. Memory leaks with procfs for SCSI drivers. USB DoS...

Ventrilo Server Malformed Status Query Remote DoS

A malicious user can crash the remote version of Ventrilo due to a vulnerability in the way the server handles malformed status queries. Josh Zlatin-Amishav and Boaz Shatz GPLv2 include"compat.inc"; ifdescription scriptid19757; scriptversion "1.17"; scriptcveid"CVE-2005-2719"; scriptbugtraqid1464...

Snort <= 2.4.0 SACK TCP Option Error Handling

Snort = 2.4.0 SACK TCP Option Error Handling Package: Snort 2.4.0 And previous versions Vendor url: http://www.snort.org Class: Error Handling Exceptional Conditions Risk: High Credits: A. Alejandro Hernndez Hernndez Contact: nitrousatvulnfactdotcom BACKGROUND Snort is an open source network...

Zebedee Malformed Protocol Option Header Port 0 Remote DoS

The version of Zebedee installed on the remote host will crash if it receives a request for a connection with a destination port of 0. By exploiting this flaw, an attacker could cause the affected application to fail to respond to further requests. C Tenable Network Security, Inc...

Ventrilo <= 2.3.0 Remote Denial of Service Exploit (all platforms)

Exploit for multiple platform in category dos / poc ================================================================== Ventrilo include include / Ventrilo UDP status algorithm 0.1 by Luigi Auriemma e-mail: email protected web: http://aluigi.altervista.org INTRODUCTION ============ This algorithm ...

CVE-2004-2466

CVE-2004-2466 affects Easy Chat Server. Public material shows a remote buffer overflow in the username/authentication handling that can crash the server (denial of service). Historical details reference v1.2 and later reports indicate v2.2 is affected; multiple exploit chains exist for Easy Chat ...

remote DOS on Wyse thin client 1125SE

Synopsis: Wyse Winterm 1125SE Remote DOS. Product: Wyse Winterm 1125SE http://www.wyse.com/products/winterm/1125se/index.htm Version: Confirmed on Firmware 4.2.09f, 4.4.061f latest Author: Josh Zlatin-Amishav Date: August 10, 2005 Background: The Winterm 1125SE is a thin client which runs the Wys...

Hobbit Monitor < 4.1.0 Remote DoS

Binary data 3109.prm...

[SECURITY] [DSA 763-1] New zlib packages fix buffer overflow

------------------------------------------------------------------------ Debian Security Advisory DSA 763-1 [email protected] http://www.debian.org/security/ Michael Stone July 20, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

[SECURITY] [DSA 763-1] New zlib packages fix buffer overflow

------------------------------------------------------------------------ Debian Security Advisory DSA 763-1 [email protected] http://www.debian.org/security/ Michael Stone July 20, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

Debian DSA-763-1 : zlib - remote DoS

Markus Oberhumer discovered a flaw in the way zlib, a library used for file compression and decompression, handles invalid input. This flaw can cause programs which use zlib to crash when opening an invalid file. This problem does not affect the old stable distribution woody. %NASLMINLEVEL 70300 ...

FreeBSD : gaim -- remote DoS on receiving malformed HTML (3fa2b372-a9f5-11d9-a788-0001020eed82)

The GAIM team reports : The gaimmarkupstriphtml function in Gaim 1.2.0, and possibly earlier versions, allows remote attackers to cause a denial of service application crash via a string that contains malformed HTML, which causes an out-of-bounds read. %NASLMINLEVEL 70300 C Tenable Network...

FreeBSD : net-snmp -- remote DoS vulnerability (b2a1a3b5-ed95-11d9-8310-0001020eed82)

A Net-SNMP release announcement reports : A security vulnerability has been found in Net-SNMP releases that could allow a denial of service attack against Net-SNMP agent's which have opened a stream based protocol EG, TCP but not UDP; it should be noted that Net-SNMP does not by default open a TC...

FreeBSD : gaim -- remote DoS on receiving malformed HTML (142353df-b5cc-11d9-a788-0001020eed82)

The GAIM team reports : Receiving malformed HTML can result in an invalid memory access causing Gaim to crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques...

FreeBSD : gaim -- remote DoS on receiving certain messages over IRC (ec09baa3-a9f5-11d9-a788-0001020eed82)

The GAIM team reports : The IRC protocol plugin in Gaim 1.2.0, and possibly earlier versions, allows 1 remote attackers to inject arbitrary Gaim markup via ircmsgkick, ircmsgmode, ircmsgpart, ircmsgquit, 2 remote attackers to inject arbitrary Pango markup and pop up empty dialog boxes via...

FreeBSD : gaim -- MSN Remote DoS vulnerability (b6612eee-df5f-11d9-b875-0001020eed82)

The GAIM team reports : Remote attackers can cause a denial of service crash via a malformed MSN message that leads to a memory allocation of a large size, possibly due to an integer signedness error. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

[SECURITY] [DSA 736-2] New spamassassin packages fix potential DOS

------------------------------------------------------------------------ Debian Security Advisory DSA 736-2 [email protected] http://www.debian.org/security/ Michael Stone July 07, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

[SECURITY] [DSA 738-1] New razor packages fix potential DOS

------------------------------------------------------------------------ Debian Security Advisory DSA 738-1 [email protected] http://www.debian.org/security/ Michael Stone July 05, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

[SECURITY] [DSA 738-1] New razor packages fix potential DOS

------------------------------------------------------------------------ Debian Security Advisory DSA 738-1 [email protected] http://www.debian.org/security/ Michael Stone July 05, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

[SECURITY] [DSA 737-1] New clamav packages fix potential DOS

------------------------------------------------------------------------ Debian Security Advisory DSA 737-1 [email protected] http://www.debian.org/security/ Michael Stone July 05, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...