Fedora Core 5 : mono-1.1.13.7-3.fc5.1 (2007-068)

A security problem was found and fixed in mono class libraries that affects the Mono web server implementation. By appending spaces to URLs attackers could download the source code of ASP.net scripts that would normally get executed by the web server. After upgrading the packages you need to...

Unreal Tournament 2004 "secure" Overflow (Linux)

This is an exploit for the GameSpy secure query in the Unreal Engine. This exploit only requires one UDP packet, which can be both spoofed and sent to a broadcast address. Usually, the GameSpy query server listens on port 7787, but you can manually specify the port as well. The RunServer.sh scrip...

04WebServer Three Vulnerabilities

Summary 04WebServer is a HTTP server developed by Soft3304 for Windows platforms. It is an easy-to-configure personal HTTP server that supports CGI, SSI, WebDAV and SSL/TLS. This advisory documents three vulnerabilities that were found in version 1.42 of 04WebServer. Tested System 04WebServer...

Important: Red Hat Security Advisory: squid security update

An updated squid package that fixes a remote denial of service vulnerability is now avaliable. Squid is a full-featured Web proxy cache. iDEFENSE reported a flaw in the squid SNMP module. This flaw could allow an attacker who has the ability to send arbitrary packets to the SNMP port to restart t...

GLSA-200410-15 : Squid: Remote DoS vulnerability

The remote host is affected by the vulnerability described in GLSA-200410-15 Squid: Remote DoS vulnerability A parsing error exists in the SNMP module of Squid where a specially crafted UDP packet can potentially cause the server to restart, closing all current connections. This vulnerability onl...

Squid: Remote DoS vulnerability

Background Squid is a full-featured Web proxy cache designed to run on Unix systems. It supports proxying and caching of HTTP, FTP, and other URLs, as well as SSL support, cache hierarchies, transparent caching, access control lists and many other features. Description A parsing error exists in t...

Apple QuickTime Streaming Server vulnerable to DoS

Overview There is a vulnerability in the Apple QuickTime Streaming Server that could allow a remote attacker to cause a denial-of-service condition. Description Apple's QuickTime Streaming Server provides an integrated distribution mechanism for various forms of digital content. There is a...

SUSE-SA:2003:042: mysql

The remote host is missing the patch for the advisory SUSE-SA:2003:042 mysql. A remotely exploitable buffer overflow within the authentication code of MySQL has been reported. This allows remote attackers who have access to the 'User' table to execute arbitrary commands as mysql user. The list of...

Monkey HTTP Daemon 0.x - Missing Host Field Denial of Service

Monkey HTTP Daemon 0.x - Missing Host Field Denial of Service source: https://www.securityfocus.com/bid/9642/info Monkey HTTP Daemon is prone to a denial of service attacks. HTTP GET requests, which do not include a 'Host' header field, will trigger this condition. The server will need to be...

Monkey HTTP Daemon 0.x - Missing Host Field Denial of Service

source: https://www.securityfocus.com/bid/9642/info Monkey HTTP Daemon is prone to a denial of service attacks. HTTP GET requests, which do not include a 'Host' header field, will trigger this condition. The server will need to be restarted to regain normal functionality...

Medieval Total War <= 1.1 broadcast Connection expired

Luigi Auriemma Application: Medieval Total War http://www.totalwar.com Versions: = 1.1 Platforms: Windows Bug: "Connection expired" message to server and connected clients caused by malformed nickname Risk: Low Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org...

VisNetic ActiveDefense 1.3.1 - GET Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/7428/info A denial of service vulnerability has been discovered in VisNetic ActiveDefense. The problem occurs when multiple HTTP requests are subsequently made to a server, containing a specific amount of data. After processing these requests, the affecte...

SmartMail Server 2.0 - Closed Connection Denial of Service

source: https://www.securityfocus.com/bid/6074/info SmartMail Server is reported to be prone to a denial of service when a client is sending data and then closes the connection unexpectedly. SmartMail Server will need to be restarted to regain normal functionality. This issue was reported in...

SmartMail Server 2.0 - Closed Connection Denial of Service

SmartMail Server 2.0 - Closed Connection Denial of Service source: https://www.securityfocus.com/bid/6074/info SmartMail Server is reported to be prone to a denial of service when a client is sending data and then closes the connection unexpectedly. SmartMail Server will need to be restarted to...

SmartMail Server 1.0 Beta 10 - Oversized Request Denial of Service

source: https://www.securityfocus.com/bid/6075/info SmartMail Server is reported to be prone to a remote denial of service condition. It is possible to trigger this condition by sending large amounts 5MB+ of data to the server via TCP port 25 or 110. SmartMail Server will need to be restarted to...

[SECURITY] [DSA-131-2] Apache chunk handling vulnerability, update

Package : apache Problem type : remote DoS / exploit Debian-specific: no CVE name : CAN-2002-0392 CERT advisory : VU944335 The DSA-131-1 advisory for the Apache chunk handling vulnerability contained an error and was missing some essential information: The upstream fix was for the 1.3 series was...

glFTPd 1.x - LIST Denial of Service

glFTPd 1.x - LIST Denial of Service source: https://www.securityfocus.com/bid/3201/info glFtpD contains an input validation error that may allow a malicious user to cause a denial of service against a host running the daemon. The problem occurs when a specially crafted 'LIST' command is received ...

Computer Software Manufaktur Alibaba 2.0 - Denial of Service

// source: https://www.securityfocus.com/bid/1482/info It is possible for a user to initiate a denial of service against Alibaba Web Server. Sending an unusually long GET request 8000 bytes to the server will cause the service to stop responding. A restart of the server service is required in ord...

Computer Software Manufaktur Alibaba 2.0 - Denial of Service

Computer Software Manufaktur Alibaba 2.0 - Denial of Service // source: https://www.securityfocus.com/bid/1482/info It is possible for a user to initiate a denial of service against Alibaba Web Server. Sending an unusually long GET request 8000 bytes to the server will cause the service to stop...

RealNetworks Real Server 7.0 GameHouse dldisplay ActiveX control 0 - Denial of Service

RealNetworks Real Server 7.0 GameHouse dldisplay ActiveX control 0 - Denial of Service source: https://www.securityfocus.com/bid/1128/info Sending malformed packets to port 7070 will cause Real Server to stop responding. Restarting the server will be required in order to re-establish normal...