[SA17085] CA iGateway Debug Mode HTTP GET Request Buffer Overflow

TITLE: CA iGateway Debug Mode HTTP GET Request Buffer Overflow SECUNIA ADVISORY ID: SA17085 VERIFY ADVISORY: http://secunia.com/advisories/17085/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: CA iGateway 4.x http://secunia.com/product/5821/ CA iGateway 3.x...

Microsoft Collaboration Data Objects Remote Buffer Overflow Vulnerability

Description Microsoft CDO is susceptible to a remote buffer overflow vulnerability. This issue is due to a failure of the library to properly bounds check user-supplied data prior to copying it to an insufficiently sized memory buffer. This issue presents itself when an attacker sends a...

Mozilla Firefox 1.0.6/1.0.7 - iFrame Handling Denial of Service

source: https://www.securityfocus.com/bid/15015/info Mozilla Firefox is prone to a remote denial of service vulnerability. The vulnerability presents itself when an affected browser handles a specially crafted IFRAME. A successful attack may result in crashing the application, or consuming...

RealPlayer/Helix Player (Linux) - Remote Format String

/ $ An open security advisory 13 - RealPlayer and Helix Player Remote Format String Exploit 1: Bug Researcher: c0ntex - c0ntexbatgmail.com 2: Bug Released: September 26th 2005 3: Bug Impact Rate: Hi 4: Bug Scope Rate: Remote $ This advisory and/or proof of concept code must not be used for...

[SECURITY] [DSA 792-1] New pstotext packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 792-1 [email protected] http://www.debian.org/security/ Martin Schulze August 31st, 2005 http://www.debian.org/security/faq -...

gtchatDoS.txt

!/usr/bin/perl use LWP::Simple; if @ARGV 3 print "\nUsage: $0 server path mode count for DoS\n"; print "sever - URL chat\n"; print "path - path to chat.pl\n"; print "mode - poc or dos,\n"; print " poc - simple check without DoS and exit,\n"; print " dos - DoS, you must set count for requests in 4...

PT-2005-3277 · Ethereal +1 · Ethereal +1

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.0 through 0.10.11 Description: The issue allows remote attackers to cause a denial of service, resulting in an application crash, by reassembling certain packets. This is due to an unknown vulnerability in several...

USN-153-1: fetchmail vulnerability

Ross Boylan discovered a remote buffer overflow in fetchmail. By sending invalid responses with very long UIDs, a faulty or malicious POP server could crash fetchmail or execute arbitrary code with the privileges of the user invoking fetchmail. fetchmail is commonly run as root to fetch mail for...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service application crash via an invalid file that causes a large dynamic tree to be produced. Remediation There is no fixed version for zlib...

[SECURITY] [DSA 759-1] New phppgadmin packages fix directory traversal vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 759-1 [email protected] http://www.debian.org/security/ Martin Schulze July 18th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 755-1] New tiff packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 755-1 [email protected] http://www.debian.org/security/ Martin Schulze July 13th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 753-1] New gedit packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 753-1 [email protected] http://www.debian.org/security/ Martin Schulze July 12th, 2005 http://www.debian.org/security/faq -...

Spid 1.3 - 'lang_path' File Inclusion

source: https://www.securityfocus.com/bid/14208/info SPiD is a gallery management application written in PHP. SPiD is prone to a remote file include vulnerability, due to lack of validation of user input. An attacker may leverage this issue to execute arbitrary server-side script code on an...

multihtml.c.exploit.txt

Multihtml.c Security Advisory Pot Kettle Industries Topic: Multihtml.c exploit remote vulnerability Category: Remote for Remote Vendor: bansh33 , r00tabega security labs Announced: 2005-06-10 Credits: Pot Kettle Industries Affects: All Platforms Corrected: N/A URL: http://potkettle.net/advisories...

[Full-disclosure] multihtml exploit vulnerability advisory

Multihtml.c Security Advisory Pot Kettle Industries http://potkettle.net Topic: Multihtml.c exploit remote vulnerability Category: Remote for Remote Vendor: bansh33 [email protected], r00tabega security labs http://www.r00tabega.org Announced: 2005-06-10 Credits: Pot Kettle Industries Affects:...

PeerCast <= 0.1211 Remote Format String Exploit

Exploit for linux platform in category remote exploits =============================================== PeerCast \ / by Darkeagle darkeagle at linkin-park dot cc \ / uKt researcherz http://unl0ck.org \ / greetz goes to: uKt researcherz. \ / \ - smallest code - better code!!! / / include include...

PServ 3.2 - Source Code Disclosure

source: https://www.securityfocus.com/bid/13638/info pServ is affected by a remote source code disclosure vulnerability. When handling a specially-crafted URI request, the application discloses the source code of scripts in the 'cgi-bin' directory. Information gathered through this attack could b...

remote root security bug in ethereal 0.9.13 &gt;= and &lt;= 0.10.10

Suresec security advisory 2 9th May 2005 CVE ID: CAN-2005-1461 Remote root vulnerability in Ethereal. About ethereal: Ethereal is a widely used network packet capturing utility which has support for over 700 network protocols. Vulnerability summary: Ethereal has a dissector for the distcc network...

[SECURITY] [DSA 723-1] New XFree86 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 723-1 [email protected] http://www.debian.org/security/ Martin Schulze May 9th, 2005 http://www.debian.org/security/faq -...

4D WebSTAR 5.3/5.4 Tomcat Plugin - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/13538/info The Tomcat Plugin supplied with the HTTP server is reportedly prone to a remote buffer overflow vulnerability. A successful attack can result in a crash or arbitrary code execution allowing the attacker to gain unauthorized access to the...