4620 matches found
RhinoSoft Serv-U SFTP Remote Denial of Service Vulnerability
The host is running RhinoSoft Serv-U SFTP, which is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodrhinosoftserv-usftpdosvuln900113.nasl 5375 2017-02-20 16:39:23Z cfi $ Description: RhinoSoft Serv-U SFTP Remote Denial of Service Vulnerability Authors: Sharath S...
NULL pointer in Ventrilo 3.0.2
Luigi Auriemma Application: Ventrilo http://www.ventrilo.com Versions: = 3.0.2 Platforms: Windows, Linux i386, Solaris SPARC, Solaris x86, FreeBSD i386, NetBSD i386, Mac OSX PowerPC Bug: NULL pointer Exploitation: remote, versus server Date: 13 Aug 2008 Authors: Andre Malm Luigi Auriemma web:...
Null pointer dereference
The decryption function in Flagship Industries Ventrilo 3.0.2 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and server crash by sending a type 0 packet with an invalid version followed by another packet to TCP port 3784...
[AJECT] NoticeWare IMAP Email Server 4.6.2 DoS vulnerability
---------------------------------------- Synopsis ---------------------------------------- NoticeWare Email Server NG 4.6.2 is vulnerable to denial-of-service DoS attacks. The IMAP server crashes after receiving several large LOGIN messages. Product: NoticeWare Email Server NG Version: 4.6.3 and...
openssl sslv2 client code
The getserverhello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service client crash via unknown vectors that trigger a null pointer dereference...
Call of Duty game server DoS
Few vulnerabilities lead to server crash...
X.Org X server: Multiple vulnerabilities
Background The X Window System is a graphical windowing system based on a client/server model. Description Regenrecht reported multiple vulnerabilities in various X server extensions via iDefense: The SProcSecurityGenerateAuthorization and SProcRecordCreateContext functions of the RECORD and...
dontcrysis-adv.txt
Luigi Auriemma Application: Crysis http://www.ea.com/crysis/home.jsp Versions: = 1.21 1.1.1.6156 showed as gamever Platforms: Windows Bug: NULL pointer in the HTTP/XML-RPC service Exploitation: remote, versus server Date: 16 Jun 2008 Author: Luigi Auriemma e-mail: [email protected] web:...
DEBIAN-CVE-2008-2361
Integer overflow in the ProcRenderCreateCursor function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to cause a denial of service daemon crash via unspecified request fields that are used to calculate a glyph buffer size, which triggers a...
Debian DSA-1595-1 : xorg-server - several vulnerabilities
Several local vulnerabilities have been discovered in the X Window system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-1377 Lack of validation of the parameters of the SProcSecurityGenerateAuthorization and SProcRecordCreateContext functions mak...
Denial of Service in Call of Duty 4 1.5
Luigi Auriemma Application: Call of Duty 4: Modern Warfare http://www.callofduty.com Versions: = 1.5 Platforms: Windows tested and Linux Bug: Denial of Service Exploitation: remote, versus server in-game Date: 02 May 2008 Thanx to: Chronos for the additional tests Author: Luigi Auriemma e-mail:...
xmeasy-dos.txt
!/usr/bin/python XM Easy Personal FTP Server 5.4.0 XCWD DoS When admin looks at the server log, application crashes : Elhamdulillahi Rabbil-alemin! bt ./sploit.py + Saljemo zli bafer : + Now wait until the admin looks at server log : + Finito! Vulnerability discovered and coded by Muris Kurgas...
XM Easy Personal FTP Server 5.4.0 - XCWD Denial of Service
XM Easy Personal FTP Server 5.4.0 - XCWD Denial of Service !/usr/bin/python XM Easy Personal FTP Server 5.4.0 XCWD DoS When admin looks at the server log, application crashes : Elhamdulillahi Rabbil-alemin! bt ./sploit.py + Saljemo zli bafer : + Now wait until the admin looks at server log : +...
SmarterTools SmarterMail 5.0 - HTTP Request Handling Denial of Service
source: https://www.securityfocus.com/bid/28610/info SmarterTools SmarterMail is prone to a denial-of-service vulnerability when handling specially crafted HTTP GET, HEAD, PUT, POST, and TRACE requests. When the server eventually resets the request connection, it will crash. Remote attackers can...
SmarterTools SmarterMail 5.0 - HTTP Request Handling Denial of Service
SmarterTools SmarterMail 5.0 - HTTP Request Handling Denial of Service source: https://www.securityfocus.com/bid/28610/info SmarterTools SmarterMail is prone to a denial-of-service vulnerability when handling specially crafted HTTP GET, HEAD, PUT, POST, and TRACE requests. When the server...
X.Org PCF font parser buffer overflow
Overview A vulnerability in the X.Org server could allow a remote attacker to execute arbitrary code on an affected system. Description The X.Org project provides an open source implementation of the X Window System. The server supports bitmapped fonts in various formats, including Portable...
SurgeFTP 2.3a2 - Content-Length Null Pointer Denial of Service
SurgeFTP 2.3a2 - Content-Length Null Pointer Denial of Service source: https://www.securityfocus.com/bid/27993/info SurgeFTP is prone to a remote denial-of-service vulnerability because it fails to perform adequately boundary checks on user-supplied input. Exploiting this issue will cause the...
SurgeFTP 2.3a2 - 'Content-Length' Null Pointer Denial of Service
source: https://www.securityfocus.com/bid/27993/info SurgeFTP is prone to a remote denial-of-service vulnerability because it fails to perform adequately boundary checks on user-supplied input. Exploiting this issue will cause the server to copy data to a NULL pointer, which will crash the server...
Code injection
Unspecified vulnerability in the BEA WebLogic Server and Express proxy plugin, as distributed before November 2007 and before 9.2 MP3 and 10.0 MP2, allows remote attackers to cause a denial of service web server crash via a crafted URL...