XM Easy Personal FTP Server 'LIST' Command Remote DoS Vulnerability

Date of Discovery: 10-Nov-2009 Credits:zhangmcatmail.ustc.edu.cn Vendor: Dxmsoft Affected: XM Easy Personal FTP Server 5.8.0 Earlier versions may also be affected Overview: XM Easy Personal FTP Server is a easy use FTP server Application. Denial of service vulnerability exists in XM Personal FTP...

CVE-2009-3885: Undefined Security Weakness

Sun Java SE 5.0 before Update 22 and 6 before Update 17 on Windows allows remote attackers to cause a denial of service via a BMP file containing a link to a UNC share pathname for an International Color Consortium ICC profile file, probably a related issue to CVE-2007-2789, aka Bug Id 6632445...

IPsec-Tools Prior to 0.7.2 Multiple Remote Denial Of Service Vulnerabilities

Exploit for unknown platform in category dos / poc ============================================================================ IPsec-Tools Prior to 0.7.2 Multiple Remote Denial Of Service Vulnerabilities ============================================================================ Title:...

CVE-2009-3836: Undefined Security Weakness

ArubaOS 3.3.1.x, 3.3.2.x, RN 3.1.x, 3.4.x, and 3.3.2.x-FIPS on the Aruba Mobility Controller allows remote attackers to cause a denial of service Access Point crash via a malformed 802.11 Association Request management frame...

2WIRE Router <= 5.29.52 Remote DoS

Exploit for unknown platform in category dos / poc ================================== 2wire Router = 5.29.52 Remote DoS ================================== Title: 2wire Router = 5.29.52 Remote DoS CVE-ID: OSVDB-ID: Author: hkm Published: 2009-10-29 Verified: yes view source print? """...

CVE-2009-3641: Undefined Security Weakness

Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service application crash via a crafted IPv6 packet that uses the 1 TCP or 2 ICMP protocol...

Snort 2.8.5 IPv6 Remote Denial Of Service

============================================= - Date: October 22th, 2009 - Discovered by: Laurent Gaffié - Severity: Low ============================================= I. VULNERABILITY ------------------------- Snort TCP 2 works x86,x64 /usr/bin/env python from scapy.all import z = "Q" 30...

Snort <= 2.8.5 IPv6 DoS

Exploit for unknown platform in category dos / poc ======================= Snort TCP 2 works x86,x64 /usr/bin/env python from scapy.all import z = "Q" 30 sendIPv6dst="IPv6ADDRHERE",nh=1/ICMPv6NIQueryNOOPtype=4/z nh1 - icmp not v6 IV. SYSTEMS AFFECTED ------------------------- Theses proof of...

Snort 2.8.5 - IPv6 Denial of Service

Snort 2.8.5 - IPv6 Denial of Service ============================================= - Date: October 22th, 2009 - Discovered by: Laurent Gaffi - Severity: Low ============================================= I. VULNERABILITY ------------------------- Snort TCP 2 works x86,x64 /usr/bin/env python from...

Snort 2.8.5 - IPv6 Denial of Service

============================================= - Date: October 22th, 2009 - Discovered by: Laurent Gaffi - Severity: Low ============================================= I. VULNERABILITY ------------------------- Snort TCP 2 works x86,x64 /usr/bin/env python from scapy.all import z = "Q" 30...

CVE-2009-3615: Undefined Security Weakness

The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service application crash via crafted contact-list data for 1 ICQ and possibly 2 AIM, as demonstrated by the SIM IM client...

NSFOCUS SA2009-02 : IBM DB2 JDBC Applet Server Remote DoS Vulnerability

NSFOCUS Security Advisory SA2009-02 IBM DB2 JDBC Applet Server Remote DoS Vulnerability Release Date: 2009-10-16 CVE ID: CVE-2009-2971 http://www.nsfocus.com/en/advisories/0902.html Affected system: ============== IBM DB2 Universal Database v8.1 Fixpak 15 v8.2 Fixpak 8 and lower versions IBM DB2...

CVE-2006-6404: Undefined Security Weakness

INNOVATION Data Processing FDR/UPSTREAM 3.3.0 GA Oct 2003 allows remote attackers to cause a denial of service service outage via a sequence of TCP SYN packets to many ports, as demonstrated using nmap. NOTE: the vendor's testing reportedly found that no denial of service occurred...

NSFOCUS SA2009-03 : Windows Kernel Malformed PE File Remote DoS Vulnerability

NSFOCUS Security Advisory SA2009-03 Windows Kernel Malformed PE File Remote DoS Vulnerability Release Date: 2009-10-16 CVE ID: CVE-2009-2516 http://www.nsfocus.com/en/advisories/0903.html Affected system: ============== Microsoft Windows XP Microsoft Windows 2000 Microsoft Windows 2003 Microsoft...

xpdf/poppler: ImageStream:: ImageStream integer overflow

Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service application crash via a crafted PDF document that triggers a NULL...

CVE-2009-3643: Undefined Security Weakness

Dxmsoft XM Easy Personal FTP Server 5.8.0 allows remote attackers to cause a denial of service via a long argument to the 1 LIST and 2 NLST commands, a differnt issue than CVE-2008-5626 and CVE-2006-5728...

Xlpd 3.0 Remote DoS Vulnerability

Xlpd is prone to a denial of service DoS vulnerability because it fails to adequately validate user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

{PRL} XLPD 3.0 Remote DoS

Application: XLPD 3.0 Remote DoS Platforms: Windows XP Professional SP2 crash: YES Exploitation: remote DoS Date: 2009-10-06 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The Code =============== 1 Introduction =============== Xlpd is an LPD Line Printer...

XLPD 3.0 Remote DoS

Exploit for unknown platform in category dos / poc =================== XLPD 3.0 Remote DoS =================== Title: XLPD 3.0 Remote DoS CVE-ID: OSVDB-ID: Author: Francis Provencher Published: 2009-10-06 Verified: yes view source print? Application: XLPD 3.0 Remote DoS Platforms: Windows XP...

XLPD 3.0 Remote DoS

No description provided by source. Application: XLPD 3.0 Remote DoS Platforms: Windows XP Professional SP2 crash: YES Exploitation: remote DoS Date: 2009-10-06 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The Code =============== 1 Introduction...