DEBIAN-CVE-2007-2318

Multiple format string vulnerabilities in FileZilla before 2.2.32 allow remote attackers to execute arbitrary code via format string specifiers in 1 FTP server responses or 2 data sent by an FTP server. NOTE: some of these details are obtained from third party information...

Race condition

Race condition in the NeatUpload ASP.NET component 1.2.11 through 1.2.16, 1.1.18 through 1.1.23, and trunk.379 through trunk.445 allows remote attackers to obtain other clients' HTTP responses via multiple simultaneous requests, which triggers multiple calls to HttpWorkerRequest.FlushResponse for...

CVE-2007-2197

Race condition in the NeatUpload ASP.NET component 1.2.11 through 1.2.16, 1.1.18 through 1.1.23, and trunk.379 through trunk.445 allows remote attackers to obtain other clients' HTTP responses via multiple simultaneous requests, which triggers multiple calls to HttpWorkerRequest.FlushResponse for...

CVE-2007-2188

eXtremail 2.1.1 and earlier does not verify the ID field aka transaction id in DNS responses, which makes it easier for remote attackers to conduct DNS spoofing...

CVE-2007-1653

GlowWorm FW before 1.5.3b4 allows remote attackers to cause a denial of service kernel panic via certain DNS responses that trigger infinite recursion in TrueDNS packet parsing, as originally observed with certain login.yahoo.com responses...

TurboFTP 5.30 Build 572 (newline/LIST) Multiple Remote DoS Exploit

No description provided by source. / TurboFTP 5.30 Build 572 Multiple Remote DoS Several vulnerabilities have been discovered in TurboFTP 1 The app does not correctly handle reponses that contains 7000 newline chars 2 there's a heap overflow triggered by a long file name in a response to a LIST...

Captcha - response validation bypass

Captcha validation can be bypassed by manipulating request variables while posting or by providing certain incorrect responses. This defeats the purpose of the captcha and makes automated submission possible. Versions affected All versions of Captcha 4.7.x prior to Captcha 4.7-1.2. All versions o...

wget FTP client code DoS

Multiple blank 220 FTP responses on FTP SYST command cause application crash...

CVE-2007-0247

squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service core dump via crafted FTP directory listing responses, possibly related to the 1 ftpListingFinish and 2 ftpHtmlifyListEntry functions...

CVE-2006-6895

The Bluetooth stack in the Sony Ericsson T60 does not properly implement "Limited discoverable" mode, which allows remote attackers to obtain unauthorized inquiry responses...

AntiAntivirus (Internet can be ruined by antivrus)

Will AntiVirus ruin the Internet? 3APA3A security.nnov.ru Dmitry Leonov bugtraq.ru Alex Exler exler.ru Alexander Dilevsky yandex.ru Alexander Antipov securitylab.ru Ilya Medvedovsky dsec.ru Vladislav Myasnyankin BugTraq.Ru The seemingly uncomplicated mail worm Sobig.f broke all distribution...

CVE-2006-6895

The Bluetooth stack in the Sony Ericsson T60 does not properly implement "Limited discoverable" mode, which allows remote attackers to obtain unauthorized inquiry responses...

CVE-2006-6059

Buffer overflow in MA521nd5.SYS driver 5.148.724.2003 for NetGear MA521 PCMCIA adapter allows remote attackers to execute arbitrary code via 1 beacon or 2 probe 802.11 frame responses with an long supported rates information element. NOTE: this issue was reported as a "memory corruption" error, b...

CVE-2006-5420

Kerio WinRoute Firewall 6.2.2 and earlier allows remote attackers to cause a denial of service crash via malformed DNS responses...

CVE-2006-4265

Kaspersky Anti-Hacker 1.8.180, when Stealth Mode is enabled, allows remote attackers to obtain responses to ICMP 1 timestamp and 2 netmask requests, which is inconsistent with the documented behavior of Stealth Mode...

security flaw

HTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before 1.5.0.4, when used with certain proxy servers, allows remote attackers to cause Firefox to interpret certain responses as if they were responses from two different sites via 1 invalid HTTP response headers with spaces...

security flaw

HTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before 1.5.0.4, when used with certain proxy servers, allows remote attackers to cause Firefox to interpret certain responses as if they were responses from two different sites via 1 invalid HTTP response headers with spaces...

CVE-2002-2212

The DNS resolver in unspecified versions of Fujitsu UXP/V, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record RR combined with spoofed response...

CVE-2002-2213

The DNS resolver in unspecified versions of Infoblox DNS One, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record RR combined with spoofed...

CVE-2002-2211

BIND 4 and BIND 8, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record RR combined with spoofed responses, which increases the possibility of...