OfficeSIP Server 3.1 - Denial of Service

Title : OfficeSIP Server Denial Of Service Vulnerability Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.officesip.com Advisory : http://secpod.org/blog/?p=461 http://secpod.org/advisories/SecPodExploitOfficeSIPServerDOSVuln.txt...

Kaspersky IS&AV 2011/12 - Memory Corruption Vulnerability

No description provided by source. References: =========== http://www.vulnerability-lab.com/getcontent.php?id=129 Introduction: ============= Kaspersky Internet Security 2011 has everything that you need to stay safe and secure while you re surfing the web. It provides constant protection for you...

Code injection

The LiveData Service in CSWorks before 2.0.4115.1 allows remote attackers to cause a denial of service service crash via crafted TCP packets...

Ciscokits 1.0 TFTP Denial Of Service

!/usr/bin/python Title: Ciscokits 1.0 TFTP Long Filename DoS Author: Craig Freyman @cd1zz Date: July 22, 2011 Software Link: http://www.certificationkits.com/tftpserver/tftpserver.zip Tested on: Windows XP SP3 Vendor notified: July 22, 2010 - Vendor approved release of PoC on July 23, 2010. Notes...

Serva32 1.2.00 RC1 Denial Of Service

------------------------------------------------------------------------ Software................Serva32 1.2.00 RC1 Vulnerability...........Denial Of Service Threat Level............Serious 3/5 Download................http://www.vercot.com/serva/ Discovery Date..........5/7/2011 Tested...

Buffer overflow

Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service crash via 1 IN or 2 CASE operations with NULL arguments that are explicitly specified or indirectly provided by the WITH ROLLUP modifier...

Fedora 11 : krb5-1.6.3-31.fc11 (2010-8796)

Shawn Emery discovered a remotely-triggerable NULL pointer dereference in the Kerberos GSS-API library which could be used to cause GSS-API-authenticated services to crash. This update incorporates fixes to instead correctly detect the error and return an error code. Note that Tenable Network...

DEBIAN-CVE-2010-2350

Heap-based buffer overflow in the PNG decoder in Ziproxy 3.1.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PNG file...

DEBIAN-CVE-2010-1642

The replysesssetupandXspnego function in sesssetup.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to trigger an out-of-bounds read, and cause a denial of service process crash, via a \xff\xff security blob length in a Session Setup AndX request...

Microsoft Windows XP/Vista - '.ani tagBITMAPINFOHEADER' Denial of Service

source: https://www.securityfocus.com/bid/38579/info Microsoft Windows is prone to a remote denial-of-service vulnerability when processing '.ani' files. Successful exploits will cause the vulnerable applications that use the affected APIs to crash or become unresponsive, denying service to...

Code injection

The StartServiceCtrlDispatcher function in the cvpnd service cvpnd.exe in Cisco VPN client for Windows before 5.0.06.0100 does not properly handle an ERRORFAILEDSERVICECONTROLLERCONNECT error, which allows local users to cause a denial of service service crash and VPN connection loss via a manual...

DEBIAN-CVE-2009-2905

Heap-based buffer overflow in textbox.c in newt 0.51.5, 0.51.6, and 0.52.2 allows local users to cause a denial of service application crash or possibly execute arbitrary code via a request to display a crafted text dialog box...

BakBone NetVault: Backup npvmgr.exe服务远程拒绝服务漏洞

BUGTRAQ ID: 36489 NetVault: Backup是一款实时备份和灾难恢复软件。 NetVault: Backup的npvmgr.exe进程没有执行长度检查便将从网络报文中获得的字段传送给了malloc，远程攻击者可以通过向20031端口发送特制的UDP或TCP报文导致服务崩溃。 BakBone NetVault: Backup 8.22 Build 29 厂商补丁： BakBone ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.bakbone.com/...

Microsoft IIS FTPd Denial Of Service

MS IIS FTPD DoS ZER0DAY There is a DoS vulnerability in the globbing functionality of IIS FTPD. Anonymous users can exploit this if they have read access to a directory!!! Normal users can exploit this too if they can read a directory. Example session where the anonymous user has read access to t...

CVE-2009-0799

The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service crash via a crafted PDF file that triggers an out-of-bounds read...

Zervit Web Server 0.3 - sockets++ crash Remote Denial of Service

!/usr/bin/perl Zervit HTTP Server \n"; print "- Exemple: file.pl 127.0.0.1 80\n"; exit; $ip = $ARGV0; $port = $ARGV1; print "+ Sending request...\n"; for$i=0;$i=4;$i++ $socket = IO::Socket::INET-new Proto = "tcp", PeerAddr = "$ip", PeerPort = "$port" || die "-Done!\n"; print $socket "GET \x11...

SlySoft Products Code Execution Vulnerability (CVE-2009-0824)

Multiple SlySoft Products are prone to a code execution vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-6725

The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PDF file that triggers a buffer underflow in the cfdecode2d function...

Femitter FTP Server 1.x Multiple Vulnerabilities (post auth)

Exploit for windows platform in category remote exploits ============================================================ Femitter FTP Server 1.x Multiple Vulnerabilities post auth ============================================================ / Femitter Server FTP 1.x Multiple Vulnerability...

Femitter FTP Server 1.x - (Authenticated) Multiple Vulnerabilities

/ Femitter Server FTP 1.x Multiple Vulnerability ---------------------------------------------------- Arbitrary: ---------- The vulnerability is caused due to an input validation error when processing FTP requests. This can be exploited to read, modify, or delete arbitrary files from the affected...