dhcp: unexpected abort caused by a DHCPv6 decline message

The DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before 4.1-ESV-R1, and 4.2.x before 4.2.1b1 allows remote attackers to cause a denial of service assertion failure and daemon crash by sending a message over IPv6 for a declined and abandoned address...

A-V Tronics InetServ POP3 Denial Of Service Vulnerability

This host is running A-V Tronics InetServ POP3 Server and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbavtronicsinetservpop3dosvuln.nasl 7006 2017-08-25 11:51:20Z teissa $ A-V Tronics InetServ POP3 Denial Of Service Vulnerability Authors: Veerendra G.G Copyright:...

isc-dhcp-server -- DHCPv6 crash

ISC reports: When the DHCPv6 server code processes a message for an address that was previously declined and internally tagged as abandoned it can trigger an assert failure resulting in the server crashing. This could be used to crash DHCPv6 servers remotely. This issue only affects DHCPv6 server...

Automated Solutions ModbusTCP OPC Server - Remote Heap Corruption (PoC)

Automated Solutions ModbusTCP OPC Server - Remote Heap Corruption PoC !/usr/bin/python asmb-heap.py Automated Solutions Modbus/TCP OPC Server Remote Heap Corruption PoC Jeremy Brown 0xjbrown41-gmail-com Jan 2011 A specially crafted length field in a MODBUS packet header can trigger heap corruptio...

Automated Solutions Modbus/TCP OPC Server Remote Heap Corruption PoC

!/usr/bin/python asmb-heap.py Automated Solutions Modbus/TCP OPC Server Remote Heap Corruption PoC Jeremy Brown 0xjbrown41-gmail-com Jan 2011 A specially crafted length field in a MODBUS packet header can trigger heap corruption. 00408312 | 8B5424 3C MOV EDX,DWORD PTR SS:ESP+3C - move length into...

MySQL: pre-evaluating LIKE arguments in view prepare mode causes crash (MySQL Bug#54568)

MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service assertion failure and server crash via vectors related to view preparation, pre-evaluation of LIKE predicates, and IN Optimizers...

MySQL: crash with LONGBLOB and union or update with subquery (MySQL Bug#54461)

MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service server crash via a query that uses the 1 GREATEST or 2 LEAST function with a mixed list of numeric and LONGBLOB arguments, which is not properly handled when the...

MySQL: crash when loading data into geometry function PolyFromWKB() (MySQL Bug#51875)

The Gislinestring::initfromwkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows remote authenticated users to cause a denial of service server crash by calling the PolyFromWKB function with Well-Known Binary WKB data containing a crafted number of 1 line strings or 2 line points...

CVE-2010-3840

The Gislinestring::initfromwkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows remote authenticated users to cause a denial of service server crash by calling the PolyFromWKB function with Well-Known Binary WKB data containing a crafted number of 1 line strings or 2 line points...

CVE-2010-3836

MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service assertion failure and server crash via vectors related to view preparation, pre-evaluation of LIKE predicates, and IN Optimizers...

Code injection

Unspecified vulnerability in MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service server crash via vectors related to "materializing a derived table that required a temporary table for grouping" and "user variable...

Code injection

MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service assertion failure and server crash via vectors related to view preparation, pre-evaluation of LIKE predicates, and IN Optimizers...

Code injection

The Gislinestring::initfromwkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows remote authenticated users to cause a denial of service server crash by calling the PolyFromWKB function with Well-Known Binary WKB data containing a crafted number of 1 line strings or 2 line points...

Code injection

MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 does not properly propagate type errors, which allows remote attackers to cause a denial of service server crash via crafted arguments to extreme-value functions such as 1 LEAST and 2 GREATEST, related to KILLBADDATA and a "CREATE...

CVE-2010-3834

CVE-2010-3834 affects MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6. The vulnerability arises from two related vectors: (1) materializing a derived table that required a temporary table for grouping, and (2) issues with user variable assignments. Successful exploitation could a...

CVE-2010-3837

MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service server crash via a prepared statement that uses GROUPCONCAT with the WITH ROLLUP modifier, probably triggering a use-after-free error when a copied object is modified in...

CVE-2010-3838

CVE-2010-3838 affects MySQL up to 5.0.92, 5.1 up to 5.1.51, and 5.5 up to 5.5.6. It enables remote authenticated users to crash the server via a query using GREATEST or LEAST with mixed numeric and LONGBLOB arguments, when results are processed through an intermediate temporary table. Root cause ...

CVE-2010-3833

CVE-2010-3833 affects MySQL 5.0/5.1/5.5 where type errors are not properly propagated, enabling remote DoS (server crash) from crafted inputs to functions like LEAST and GREATEST, tied to KILL_BAD_DATA and a CREATE TABLE ... SELECT. The MiracleLinux advisories AXSA:2011-32:01 and AXSA:2010-485:04...

CVE-2010-3840

CVE-2010-3840 affects MySQL 5.1, where Gis_line_string::init_from_wkb in sql/spatial.cc can crash the server. If remote, authenticated users supply Well-Known Binary data containing a crafted number of line strings or line points, it can cause a denial of service (server crash). The issue is docu...

HP Data Protector Manager v6.11 Remote DoS in RDS Service

Exploit for windows platform in category dos / poc !/usr/bin/perl =============================== HP Data Protector Manager v6.11 =============================== Bug: Remote Denial of Service Vulnerabilities RDS Service Software:...