1846 matches found
Mac OS X <= 10.4.7 Mach Exception Handling Local Root Exploit
Exploit for macOS platform in category local exploits ============================================================= Mac OS X include include include extern booleant excservermachmsgheadert , machmsgheade...
Mandrake Linux Security Advisory : openvpn (MDKSA-2005:206-1)
Two Denial of Service vulnerabilities exist in OpenVPN. The first allows a malicious or compromised server to execute arbitrary code on the client CVE-2005-3393. The second DoS can occur if when in TCP server mode, OpenVPN received an error on accept2 and the resulting exception handler causes a...
Mandrake Linux Security Advisory : apache2 (MDKSA-2005:233)
A memory leak in the worker MPM in Apache 2 could allow remote attackers to cause a Denial of Service memory consumption via aborted commands in certain circumstances, which prevents the memory for the transaction pool from being reused for other connections. As well, this update addresses two bu...
Microsoft Windows DTC Remote Exploit (PoC) (MS05-051) (updated)
No description provided by source. / Hard to exploit, isn't it? I have tested it on 10+ box, most of them allocated 0x9X0058 for me, however, I cannot write the pointer to 0x7ffdf020 since the length I can control should be divided exactly by 8 merde, so I choose 0x684191c4. This following progra...
openvpn -- potential denial-of-service on servers in TCP mode
James Yonan reports: If the TCP server accept call returns an error status, the resulting exception handler may attempt to indirect through a NULL pointer, causing a segfault. Affects all OpenVPN 2.0 versions...
php.4.4.1.txt
Hello, Here under some stuff to dos apache + php just through an htaccess. With .htaccess method : If you have into your php.ini - safemode = On Simply put a .htaccess file on the root directory of your website with this content : phpvalue session.savepath /var/www/somewherehowexist Apache segfau...
[Full-disclosure] php < 4.4.1 htaccess apache dos
Hello, Here under some stuff to dos apache + php just through an htaccess. With .htaccess method : If you have into your php.ini - safemode = On Simply put a .htaccess file on the root directory of your website with this content : phpvalue session.savepath /var/www/somewherehowexist Apache segfau...
Gaim <= 1.2.1 URL Handling Remote Stack Overflow Exploit
Exploit for linux platform in category dos / poc ======================================================== Gaim // Friday, May 13, 2005 // // This is a very weak demonstration of Gaim 1.2.1's stack overflow vulnerability // when processing email addresses. What this basically does is segfault you...
Gaim 1.2.1 - URL Handling Remote Stack Overflow
Gaim 1.2.1 - URL Handling Remote Stack Overflow // Written by Ron // Friday, May 13, 2005 // // This is a very weak demonstration of Gaim 1.2.1's stack overflow vulnerability // when processing email addresses. What this basically does is segfault you when you // do a /vuln command in a...
Moderate: Red Hat Security Advisory: XFree86 security update
Updated XFree86 packages that fix a libXpm integer overflow flaw and a number of bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. XFree86 is an open source implementation of the X Window System. It provides the basic low...
Low: Red Hat Security Advisory: postfix security update
Updated postfix packages that include a security fix and two other bug fixes are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team Postfix is a Mail Transport Agent MTA, supporting LDAP, SMTP AUTH SASL, and...
[ANNOUNCE] Apache HTTP Server 2.0.51 Released
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Apache Software Foundation and the The Apache HTTP Server Project are pleased to announce the release of version 2.0.51 of the Apache HTTP Server "Apache". This Announcement notes the significant changes in 2.0.51 as compared to 2.0.50. This versi...
GLSA-200403-12 : OpenLDAP DoS Vulnerability
The remote host is affected by the vulnerability described in GLSA-200403-12 OpenLDAP DoS Vulnerability A password extended operation password EXOP which fails will cause the slapd server to free an uninitialized pointer, possibly resulting in a segfault. This only affects servers using the...
apache2 -- SSL remote DoS
The Apache HTTP Server 2.0.51 release notes report that the following issues have been fixed: A segfault in modssl which can be triggered by a malicious remote server, if proxying to SSL servers has been configured. CAN-2004-0751 A potential infinite loop in modssl which could be triggered given...
OpenLinux: Multiple vulnerabilities have reported in Ethereal 0.9.12
To: [email protected] [email protected] [email protected] [email protected] -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SCO Security Advisory Subject: OpenLinux: Multiple vulnerabilities have reported in Ethereal 0.9.12 Advisory number:...
fetchmail -- denial-of-service vulnerability
Dave Jones discovered a denial-of-service vulnerability in fetchmail. An email message containing a very long line could cause fetchmail to segfault due to missing NUL termination in transact.c. Eric Raymond decided not to mention this issue in the release notes for fetchmail 6.2.5, but it was...
[SECURITY] [DSA 379-1] New sane-backends packages fix several vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 379-1 [email protected] http://www.debian.org/security/ Martin Schulze September 11th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA 379-1] New sane-backends packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 379-1 [email protected] http://www.debian.org/security/ Martin Schulze September 11th, 2003 http://www.debian.org/security/faq -...
0x333-lockdexvul.txt
0x333 OUTSIDERS SECURITY LABS - - www.0x333.org - lockdev in redhat 7.3 ,8.0 ,9.0 possible all linux os has Segmentation fault contents 0x0 Info 0x1 Description 0x2 Vulnerable code 0x3 Debug session 0x4 Exploit 0x0 Info Author : nic Email : [email protected] Date : 28 July 2003 Advisory :...
Apache Mod_Access_Referer 1.0.2 - Null Pointer Dereference Denial of Service
source: https://www.securityfocus.com/bid/7375/info A vulnerability has been reported for the modaccessreferer Apache module. The problem occurs when parsing invalid HTTP referer header fields. If this vulnerability were to be triggered, it may be possible to trigger a NULL pointer dereference,...