9285 matches found
MagicISO <= 5.4(build239) .cue File Heap Overflow PoC
Exploit for linux platform in category dos / poc ===================================================== MagicISO = 5.4build239 .cue File Heap Overflow PoC ===================================================== !/usr/bin/env ruby Credits to n00b for finding this bug. Magic iso has a stacked based...
Low: Red Hat Security Advisory: gdb security and bug fix update
An updated gdb package that fixes a security issue and various bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. GDB, the GNU debugger, allows debugging of programs written in C, C++, and other languages by executing them in a...
[Full-disclosure] mydns-1.1.0 remote heap overflow
The attached PoC causes a remote heap smash in mydns 1.1.0, the bug is found within the dynamic update code update.c. Exploitation requires update privs which tends not to matter too much if you know an IP address with privileges to do so, also allow-update = yes must be set in /etc/mydns.conf. T...
[Full-disclosure] ASA-2007-011: Multiple problems in SIP channel parser handling response codes
Asterisk Project Security Advisory - ASA-2007-011 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Multiple problems in SIP channel parser handling | | | respons...
[Full-disclosure] Asterisk SDP DOS vulnerability
MADYNES Security Advisory http://madynes.loria.fr/ http://madynes.loria.fr Title: Asterisk SIP INVITE remote DOS Release Date: 08/03/2007 Severity: High - Denial of Service Advisory ID:KIPH1 Software: Asterisk http://www.asterisk.org/ http://www.asterisk.org/ AsteriskR is a complete IP PBX in...
QFTP (LIBFtp 3.1-1) (command line) sprintf() local buffer overflow
http://nbpfaus.net/pfau/ftplib/ qftp is a utility that performs file transfers using ftplib based on instructions presented on the command line. Description buffer overflow in sprintf, setumask don't check sizelen of passed argument. Source error in main: 337: case 'm' : setumaskoptarg; break;...
Code injection
The frag3 preprocessor in Snort 2.6.1.1, 2.6.1.2, and 2.7.0 beta, when configured for inline use on Linux without the ipconntrack module loaded, allows remote attackers to cause a denial of service segmentation fault and application crash via certain UDP packets produced by sendmorefragpacket and...
CVE-2007-1398
Removed by vendor...
CVE-2007-1398
The frag3 preprocessor in Snort 2.6.1.1, 2.6.1.2, and 2.7.0 beta, when configured for inline use on Linux without the ipconntrack module loaded, allows remote attackers to cause a denial of service segmentation fault and application crash via certain UDP packets produced by sendmorefragpacket and...
SEC Consult SA-20070309-0 :: MySQL 5 Single Row Subselect Denial of Service
SEC-CONSULT Security Advisory 20070309-0 =========================================================================== title: MySQL 5 Single Row Subselect Denial of Service program: MySQL 5 vulnerable version: 5.0.37 impact: moderate homepage: http://www.mysql.com found: 2007-02-10 by: S.Streichbie...
Mozilla Firefox 2.0.0.2 - '.GIF' Handling Denial of Service
source: https://www.securityfocus.com/bid/22899/info Firefox is prone to a remote denial-of-service vulnerability. An attacker may exploit this vulnerability to cause the application to crash, resulting in denial-of-service conditions. Little is known regarding this vulnerability; this BID will b...
Mozilla Firefox 2.0.0.2 - .GIF Handling Denial of Service
Mozilla Firefox 2.0.0.2 - .GIF Handling Denial of Service source: https://www.securityfocus.com/bid/22899/info Firefox is prone to a remote denial-of-service vulnerability. An attacker may exploit this vulnerability to cause the application to crash, resulting in denial-of-service conditions...
CVE-2006-7139
Kmail 1.9.1 on KDE 3.5.2, with "Prefer HTML to Plain Text" enabled, allows remote attackers to cause a denial of service crash via an HTML e-mail with certain table and frameset tags that trigger a segmentation fault, possibly involving invalid free or delete operations...
CVE-2006-7139
Removed by vendor...
Asterisk <= 1.2.15 / 1.4.0 pre-auth Remote Denial of Service Exploit
No description provided by source. / this will cause asterisk to segfault, the bug that this exploits has been patched in release 1.2.16 & 1.4.1 CLI Program received signal SIGSEGV, Segmentation fault. Switching to Thread 1082719152 LWP 2510 registerverify p=0x81cf600, sin=0x4088e750,...
MOPB-03-2007:PHP Variable Destructor Deep Recursion Stack Overflow
Summary The last vulnerability for today is similar to the second one. This time the bug is however a deep recursion bug in the Zend Engine variable destruction. User input is parsed in an iterative way which allows the creation of very deeply nested array structures from user input. However when...
CVE-2007-1071
CVE-2007-1071: An integer overflow exists in Apple Mac OS X ImageIO when handling GIFs, specifically in gifGetBandProc, which can cause a denial of service and may allow arbitrary code execution. Affected: Mac OS X 10.4.8 via crafted GIF during decompression. Documentation notes this is a separat...
MDKA-2006:048 : gnuplot
An error in gnuplot was causing it to fail with a segmentation fault whenever the user attempted to produce a graphical plot via the default 'x11' term. The updated package corrects this error and allows graphical plotting via X11. Updated packages correct this issue. %NASLMINLEVEL 999999...
[Full-disclosure] Axigen <2.0.0b1 DoS
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 attached are two DoS's used in part to win the beta testing competition of Axigen www.axigen.com mail server for versions 2.0.0b1, the vulnerabilities affect all platforms.. The first exploit is a single byte underflow causing a probabilistic intege...
KDE 3.5 (libkhtml) <= 4.2.0 / Unhandled HTML Parse Exception Exploit
No description provided by source. !-- KDE 3.5 | libkhtml = 4.2.0 / Unhandled HTML Parse Exception ============================================================ Tested with Konqueror 3.5.2 and kmail 1.9.1 Federico L. Bossi Bonin [email protected] www.globalst.com.ar Program received signal...