Sof-PunkBuster.txt

Luigi Auriemma Application: Soldier of Fortune II with PunkBuster enabled http://www.ravensoft.com/soldier2.html http://www.PunkBuster.com Versions: PB for server = 1.180 Platforms: Windows, Linux and Mac Bug: format string Exploitation: remote, versus server in-game Date: 16 Feb 2006 Author: Lui...

CVE-2006-0771

Format string vulnerability in PunkBuster 1.180 and earlier, as used by Soldier of Fortune II and possibly other games, allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in invalid cvar values, which are not properly...

Kadu instant messaging client DoS

Large number of image send requests causes client to crash and server not to accept any messages from this client...

CVE-2006-0678

PostgreSQL 7.3.x before 7.3.14, 7.4.x before 7.4.12, 8.0.x before 8.0.7, and 8.1.x before 8.1.3, when compiled with Asserts enabled, allows local users to cause a denial of service server crash via a crafted SET SESSION AUTHORIZATION command, a different vulnerability than CVE-2006-0553...

CVE-2006-0678

PostgreSQL 7.3.x before 7.3.14, 7.4.x before 7.4.12, 8.0.x before 8.0.7, and 8.1.x before 8.1.3, when compiled with Asserts enabled, allows local users to cause a denial of service server crash via a crafted SET SESSION AUTHORIZATION command, a different vulnerability than CVE-2006-0553...

CVE-2006-0678

CVE-2006-0678 affects PostgreSQL 7.3.x (pre-7.3.14), 7.4.x (pre-7.4.12), 8.0.x (pre-8.0.7), and 8.1.x (pre-8.1.3) when compiled with Asserts enabled. A local attacker can crash the server via a crafted SET SESSION AUTHORIZATION command (denial of service). Root cause: assertions enabled during co...

Design/Logic Flaw

telnetd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2 allows remote unauthenticated attackers to cause a denial of service server crash via unknown vectors that trigger a null dereference...

CVE-2006-0677

telnetd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2 allows remote unauthenticated attackers to cause a denial of service server crash via unknown vectors that trigger a null dereference...

CVE-2006-0677

CVE-2006-0677 affects Heimdal telnetd (0.6.x before 0.6.6 and 0.7.x before 0.7.2). A remote attacker can cause a denial-of-service by triggering a null dereference in the telnet server, crashing inetd or the service before user login. Affected advisories reference Heimdal telnetd vulnerability an...

CVE-2006-0677

telnetd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2 allows remote unauthenticated attackers to cause a denial of service server crash via unknown vectors that trigger a null dereference...

com506.py.txt

Hi all, The simple code below can be used to reproduce one of CommuniGate 5.0.6 LDAP vulnerabilities http://www.gleg.net/cgadvisory.txt !/usr/bin/env python Use this code at your own risk. It may crash your server! Author: Evgeny Legerov import sys import socket HELP=""" CommuniGate Pro 5.0.6...

Multiple vulnerabilities in CommuniGate Pro Server

I. DESCRIPTION CommuniGate Pro Core Server from CommuniGate Systems provides robust cross-platform groupware applications, enabling a cost effective, easy to manage communications platform. For more info visit http://www.stalker.com II. DETAILS During testing of CommuniGate Pro Server 5.0.6 using...

[SECURITY] [DSA 955-1] New mailman packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 955-1 [email protected] http://www.debian.org/security/ Michael Stone January 25th, 2006 http://www.debian.org/security/faq -...

CA iTechnology iGateway Service Content-Length Buffer Overflow

The remote host is using CA iTechnology iGateway service, a software component used in various products from CA. The version of the iGateway service installed on the remote host reportedly fails to sanitize Content-Length HTTP header values before using them to allocate heap memory. An attacker c...

CVE-2006-0348

Removed by vendor...

CVE-2006-0348

CVE-2006-0348 affects the ELOG electronic logbook. The vulnerability resides in the write_logfile function as a format string flaw in versions before 2.6.1, which could allow a remote attacker to execute arbitrary code and crash the server. Debian/DSA-967-1 documents fixes to 2.6.1+r1642-1; other...

Cerberus FTP Server DoS

Request flood causes server to crash...

Ubuntu 4.10 / 5.04 : apache2 vulnerabilities (USN-160-1)

Marc Stern discovered a buffer overflow in the SSL module's certificate revocation list CRL handler. If Apache is configured to use a malicious CRL, this could possibly lead to a server crash or arbitrary code execution with the privileges of the Apache web server. CAN-2005-1268 Watchfire...

Platinum FTP Server

Platinum FTP server for Win32 has several vulnerabilities in the way it checks the format of command strings passed to it. This leads to the following vulnerabilities in the server: The 'dir' command can be used to examine the filesystem of the machine and gather further information about the hos...

dwhttpd format string

The remote web server is vulnerable to a format string attack. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...