SILC Server: Denial of service

Background SILC Server is a server for the Secure Internet Live Conferencing SILC protocol. Description Frank Benkstein discovered a possible NULL pointer dereference in apps/silcd/command.c if a new channel is created without specifying a valid hmac or cipher algorithm name. Impact A remote...

CVE-2007-1327

The SILCSERVERCMDFUNC function in apps/silcd/command.c in silc-server 1.0.2 allows remote attackers to cause a denial of service NULL dereference and daemon crash via a request without a cipher algorithm and an invalid HMAC algorithm...

CVE-2007-1327: NULL Pointer Dereference

The SILCSERVERCMDFUNC function in apps/silcd/command.c in silc-server 1.0.2 allows remote attackers to cause a denial of service NULL dereference and daemon crash via a request without a cipher algorithm and an invalid HMAC algorithm...

[Full-disclosure] silc-server 1.0.2 denial-of-service vulnerability

Hi, there is a bug in the current version of silc-server that makes it possible to crash a networks SILC router or a standalone server, when a new channel is created. All it takes is to specify an invalid hmac algorithm name and no cipher algorithm name. This results in an null pointer dereferenc...

Silc Server 1.0.2 - New Channel Remote Denial of Service

Silc Server 1.0.2 - New Channel Remote Denial of Service source: https://www.securityfocus.com/bid/22846/info SILC Server is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker can exploit this issue to crash the affected server,...

Silc Server 1.0.2 - New Channel Remote Denial of Service

source: https://www.securityfocus.com/bid/22846/info SILC Server is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker can exploit this issue to crash the affected server, effectively denying service to legitimate users. This iss...

silc server and toolkit insecure temporary file creation

silc server and toolkit insecure temporary file creation Vendor: http://silcnet.org/ Advisory: http://www.zataz.net/adviso/silc-server-toolkit-06152005.txt Vendor informed: yes Exploit available: yes Impact : low Exploitation : low The vulnerability is caused due to temporary file being created...