Unreal engine updates and Battle Mages advisory

I have an update about the methods used to test the format string vulnerability in the Unreal engine I reported yesterday. I have solved a problem in the windows version of my proof-of-concept unrfs-poc now version 0.1.1: http://aluigi.altervista.org/poc/unrfs-poc.zip The following instead is a...

Broadcast BoF and server freeze in RogerWilco (2001)

Application: Roger Wilco http://www.rogerwilco.com Versions: Mk.1d3 dated 14th Sep 2001 1.4.1.2 is NOT vulnerable Platforms: Windows Bugs: RogerWilco doesn't check the length of the nicknames sent by the clients and exists also a problem in a recv function Risk HIGH!: "Broadcast" buffer overflow...

Дырка в SunFTP

Имеются переполнения буфера, кроме того, при некорректном завершении сеанса сервер прекращает отвечать на запросы. Кроме того, можно получить любой файл используя обратный путь в директориях...

Nosque Workshop MsgCore 1.9 - Denial of Service

Nosque Workshop MsgCore 1.9 - Denial of Service source: https://www.securityfocus.com/bid/930/info There is a denial of service condition in Nosque Workshop's MsgCore SMTP server. The problem lies in memory used to store server input not being deallocated and eventually exhausted, causing the...

nt+exceed.DoS.txt

Date: Tue, 27 Apr 1999 13:29:26 -0700 From: "LaFournaise, Chris J." To: [email protected] Subject: NT/Exceed D.O.S. This is regarding Hummingbird's Exceed X emulator v5 and possibly v6 running on Windows NT. I haven't tested Win95/98. The Exceed X server allows inbound TCP connections on port...

John OFallon Responder.cgi 1.0 - Denial of Service

John OFallon Responder.cgi 1.0 - Denial of Service source: https://www.securityfocus.com/bid/3155/info responder.cgi' is a free CGI shell script, written in C, for MacHTTP Server and other MacOS webserver products. It is possible to cause a denial of service to MacHTTP webserver due to improper...