PHP 5.3.7 - Multiple Null Pointer Dereference Denial of Service Vulnerabilities

PHP 5.3.7 - Multiple Null Pointer Dereference Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/49249/info PHP is prone to multiple denial-of-service vulnerabilities caused by a NULL-pointer dereference. An attacker can exploit these issues to cause an application writte...

PHP 5.3.6 Null Pointer Dereference

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PHP 5.3.6 multiple null pointer dereference Author: Maksymilian Arciemowicz http://securityreason.com/ http://securityreason.net/ http://cxib.net/ Date: - - Dis.: 20.07.2011 - - Pub.: 19.08.2011 Affected Software verified: PHP 5.3.6 and prior Fixed: P...

OpenSSH 3.5p1 Remote Root Exploit for FreeBSD

No description provided by source. OpenSSH 3.5p1 Remote Root Exploit for FreeBSD Discovered and Exploited By Kingcope Year 2011 -- The last two days I have been investigating a vulnerability in OpenSSH affecting at least FreeBSD 4.9 and 4.11. These FreeBSD versions run OpenSSH 3.5p1 in the defaul...

OpenSSH 3.5p1 Remote Root Exploit for FreeBSD

OpenSSH 3.5p1 Remote Root Exploit for FreeBSD OpenSSH 3.5p1 Remote Root Exploit for FreeBSD has been shared by kcope on twitter. The Released note is as given below : OpenSSH 3.5p1 Remote Root Exploit for FreeBSD Discovered and Exploited By Kingcope Year 2011 -- The last two days I have been...

FreeBSD OpenSSH 3.5p1 - Remote Command Execution

OpenSSH 3.5p1 Remote Root Exploit for FreeBSD Discovered and Exploited By Kingcope Year 2011 -- The last two days I have been investigating a vulnerability in OpenSSH affecting at least FreeBSD 4.9 and 4.11. These FreeBSD versions run OpenSSH 3.5p1 in the default install. The sshd banner for...

Fedora 13 : mutt-1.5.21-5.fc13 (2011-7756)

This is an update that fixes a hostname verification of x.509 certificates and a segmentation fault during reading message headers. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Fedora 14 : mutt-1.5.21-5.fc14 (2011-7751)

This is an update that fixes a hostname verification of x.509 certificates and a segmentation fault during reading message headers. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

AST-2011-007

Asterisk Project Security Advisory - AST-2011-007 +------------------------------------------------------------------------+ | Product | Asterisk | |---------------------+--------------------------------------------------| | Summary | Remote Crash Vulnerability in SIP channel driver |...

asterisk -- Remote crash vulnerability

The Asterisk Development Team reports: If a remote user initiates a SIP call and the recipient picks up, the remote user can reply with a malformed Contact header that Asterisk will improperly handle and cause a crash due to a segmentation fault...

RHEL 6 : perl (RHSA-2011:0558)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0558 advisory. Perl is a high-level programming language commonly used for system administration utilities and web programming. The Perl CGI module provide...

TSSA-2011-02 - Opera : SELECT SIZE Arbitrary null write

--------------------------------------------------------------------------- - - Opera : SELECT SIZE Arbitrary null write - - --------------------------------------------------------------------------- -- Vulnerability Summary: Date Published: 03/05/2011 Last Update: 03/05/2011 Advisory ID:...

pWhois Layer Four Traceroute 3.x vulnerability

Overview Given a specific set of command line arguments, Layer Four Traceroute lft will produce a segmentation fault leading to a possible privilege escalation vulnerability. Description pWhois Layer Four Traceroute 3.x contains a vulnerability when parsing command line arguments. Earlier version...

Linux NTP query client v4.2.6p1 Heap Overflow Vulnerability

Exploit for linux platform in category dos / poc Linux NTP query client v4.2.6p1 Heap Overflow vulnerability vendor: http://www.ntp.org/ software: http://www.eecis.udel.edu/ntp/ntpspool/ntp4/ntp-4.2/ntp-4.2.6p1.tar.gz impact: minor/informational There is a local heap overflow in the ntpq utility...

win32 eggsearch shellcode 33 bytes

win32 eggsearch shellcode 33 bytes. Shellcode exploit for win32 platform ; win32 eggsearch shellcode, 33 bytes ; tested on windows xp sp2, should work on all service packs on win2k, win xp, win2k3 ; c 2009 by Georg 'oxff' Wicherski bits 32 marker equ 0x1f217767 ; 'gw!\x1f' start: xor edx, edx ; e...

ProFTPD mod_sftp Integer Overflow DoS PoC

Exploit for linux platform in category dos / poc ProFTPD modsftp Integer Overflow by Kingcope reference: http://www.castaglia.org/proftpd/modules/modsftp.html Exploit Title: ProFTPD modsftp Integer Overflow Date: 7 February 2011 Author: Kingcope Software Link:...

ProFTPd - mod_sftp Integer Overflow Denial of Service (PoC)

ProFTPd - modsftp Integer Overflow Denial of Service PoC ProFTPD modsftp Integer Overflow by Kingcope reference: http://www.castaglia.org/proftpd/modules/modsftp.html Exploit Title: ProFTPD modsftp Integer Overflow Date: 7 February 2011 Author: Kingcope Software Link:...

ProFTPd - 'mod_sftp' Integer Overflow Denial of Service (PoC)

ProFTPD modsftp Integer Overflow by Kingcope reference: http://www.castaglia.org/proftpd/modules/modsftp.html Exploit Title: ProFTPD modsftp Integer Overflow Date: 7 February 2011 Author: Kingcope Software Link: http://www.castaglia.org/proftpd/modules/modsftp.html Tested on: Centos 5.5 Program...

CVE-2011-0520

The compressadddlabelpoints function in dns/Compress.c in MaraDNS 1.4.03, 1.4.05, and probably other versions allows remote attackers to cause a denial of service segmentation fault and possibly execute arbitrary code via a long DNS hostname with a large number of labels, which triggers a...

Heap overflow

The compressadddlabelpoints function in dns/Compress.c in MaraDNS 1.4.03, 1.4.05, and probably other versions allows remote attackers to cause a denial of service segmentation fault and possibly execute arbitrary code via a long DNS hostname with a large number of labels, which triggers a...

CVE-2011-0520

The MaraDNS vulnerability CVE-2011-0520 affects MaraDNS 1.4.x (notably 1.4.03 and 1.4.05) where the compress_add_dlabel_points() routine in dns/Compress.c can overflow a heap buffer when handling a long DNS hostname with many labels. This remote, unauthenticated issue could crash the server or po...