Snort 2.6.1.1/2.6.1.2/2.7.0 (fragementation) Remote DoS Exploit

Exploit for multiple platform in category dos / poc =============================================================== Snort 2.6.1.1/2.6.1.2/2.7.0 fragementation Remote DoS Exploit =============================================================== / DOS Snort Inline Affected Versions: 2.6.1.1, 2.6.1.2,...

Important: spamassassin security update

3.1.8-2 - Fix sa-learn regression 228968 3.1.8-1 - 3.1.8 CVE-2007-0451 3.1.7-9 - silence sa-update cron script 3.1.7-8 - only restart spamd if necessary after sa-update 227756 3.1.7-7 - requires gnupg 227738 3.1.7-6 - explicit requires on perlHTTP::Date and perlLWP::UserAgent Bug 193100 3.1.7-5 -...

Authentication flaw

sre/params.php in the Integrity Clientless Security ICS component in Check Point Connectra NGX R62 3.x and earlier before Security Hotfix 5, and possibly VPN-1 NGX R62, allows remote attackers to bypass security requirements via a crafted Report parameter, which returns a valid ICSCookie...

Dating Agent PRO 4.7.1 Vulnerability

Dating Agent PRO 4.7.1 http://www.datetopia.com/datingagent/ -------------------------------------- ------------- PHPinfo page /requirements.php ------------- SQL injection ------------- http://target.xx/picture.php?pid=1SQL http://target.xx/mem.php?mid=1SQL...

CVE-2006-2224

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets...

aMember Pro 2.3.X - Remote File Include Vulnerability

aMember Pro 2.3.X - Remote File Include Vulnerability NewAngels Advisory 2 aMember Pro 2.3.X - Remote File Include Vulnerability ============================================================================= Software: aMember Pro 2.3.4 Type: Remote PHP File Include Vulnerability Risk: High Date:...

aMemberPro234.txt

NewAngels Advisory 2 aMember Pro 2.3.X - Remote File Include Vulnerability ============================================================================= Software: aMember Pro 2.3.4 Type: Remote PHP File Include Vulnerability Risk: High Date: Aug. 16 2005 Vendor: CGI Central Credit: =======...

AutoLinks Pro 2.1

NewAngels Advisory 1 AutoLinks Pro 2.1 - Remote File Include Vulnerability ============================================================================= Software: AutoLinks Pro Version: 2.1 Type: Remote PHP File Include Vulnerability Risc: High Date: 16.08.05 Vendor: ScriptsCenter Page:...

iDEFENSE Security Advisory 04.07.05: SGI IRIX gr_osview File Overwrite Vulnerability

SGI IRIX grosview File Overwrite Vulnerability iDEFENSE Security Advisory 04.07.05 http://www.idefense.com/application/poi/display?type=vulnerabilities April 7, 2005 I. BACKGROUND The grosview application is a setuid root application that provides a graphical display of usage of certain types of...

phpbb2012.txt

-------------------------------------------------------------------- Written by [email protected] -------------------------------------------------------------------- -------------------------------------------------------------------- Exploit : 2.0.x = phpbb 2.0.12 :...

HP-UX PHCO_28425 : HP-UX calloc(3C), Local Denial of Service (DoS) (HPSBUX00310 SSRT2341 rev.2)

s700800 11.00 libc cumulative patch : calloc miscalculates the memory requirements. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO28425. The text itself is copyright C Hewlett-Packard Development Company,...

Microsoft Windows - NetDDE Remote Buffer Overflow (MS04-031)

Microsoft Windows - NetDDE Remote Buffer Overflow MS04-031 / HOD-ms04031-netdde-expl.c: 2004-12-30: PUBLIC v.0.2 Copyright c 2004 houseofdabus. MS04-031 NetDDE buffer overflow vulnerability PoC .:: houseofdabus ::. special unstable version...

Service Detection (2nd Pass)

This plugin is a complement of findservice1.nasl. It attempts to identify common services which might have been missed because of a network problem. C Tenable Network Security, Inc. if NASLLEVEL 2200 exit0; include"compat.inc"; ifdescription scriptid14772; scriptversion "$Revision: 1.51 $";...

Fedora Core 1 : mc-4.6.0-8.4 (2004-058)

Sat Jan 31 2004 Jakub Jelinek 4.6.0-8.4 - fix previous patch - Fri Jan 30 2004 Jakub Jelinek 4.6.0-8.3 - update php.syntax file 112645 - fix crash with large syntax file 112644 - Fri Jan 23 2004 Jakub Jelinek 4.6.0-8.2 - update CVE-2003-1023 fix to still make vfs symlinks relative, but with...

Authenticated Check : OS Name and Installed Package Enumeration

This plugin logs into the remote host using SSH, RSH, RLOGIN, Telnet, or local commands and extracts the list of installed packages. If using SSH, the scan should be configured with a valid SSH public key and possibly an SSH passphrase if the SSH public key is protected by a passphrase. TRUSTED...

Immunity Canvas: MS03_049

Name| ms03049 ---|--- CVE| CVE-2003-0812 Exploit Pack| CANVAS Description| Microsoft Windows Workstation Service RPC Overflow Notes| CVE Name: CVE-2003-0812 VENDOR: Microsoft Notes: This exploit will crash the service if XP SP1a is running under Virtual PC or Virtual Server Microsoft's...

GtkFtpd 1.0.4 - Remote Buffer Overflow

GtkFtpd 1.0.4 - Remote Buffer Overflow / gtkftpdv1.0.4and below: remote root buffer overflow exploit. by: vade79/v9 v9 at fakehalo.deadpig.org fakehalo/realhalo Url: http://gtkftpd.sourceforge.net/ GtkFtpd, versions v1.0.4 and belowas of this time, contain a remotely exploitable buffer overflow...

KaZaa v1.7.1 Denial of Service Attack

Submitted by : Josh [email protected], omega [email protected] on July 25th, 2002 Vulnerability : KaZaa Denial of Service Attack Tested On : KaZaa v1.7.1 Remote : Yes Fix : KaZaa v1.7.2 has been released and is a fix for the problem Big Thanks To : SooT for letting me crash your system a lot...

Microsoft Windows SMB NativeLanManager Remote System Information Disclosure

Nessus was able to obtain the remote operating system name and version Windows and/or Samba by sending an authentication request to port 139 or 445. Note that this plugin requires SMB to be enabled on the host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10785;...

Re[2]: mailbox parsing problem in imap-4.7c

Hello Mark, I have tested MDAs of different vendors under few OSs. All of them assume empty line to be at the end of message. Most of them comment out "From " in any "nnFrom " pattern. At least qpoper and BSD mail check for empty line under any supported OS and I never heard of any problem becaus...