2615 matches found
SPECTral Personal SMTP Server 0.4.2 - Denial of Service
!/usr/bin/perl use IO::Socket; Small config If service not DoSeD try to increase this value. Number of trys for DoS. $trys = 10; Quantity signs for atack. $buf = 200000; if @ARGV port \n"; print " Coded by GreenwooD Network Security Team \n\n"; print " ======================= \n"; print " /\n";...
Network Service Malformed Data Remote DoS
It appears to be possible to crash the remote service by sending it a few kilobytes of random data. An attacker may use this flaw to make this service crash continuously, preventing this service from working properly. It may also be possible to exploit this flaw to execute arbitrary code on this...
CProxy 3.3.x - 3.4.4 Multiple Vulnerabilities
The remote host is running a version of Computalynx's CProxy Server that suffers from the following vulnerabilities: - Arbitrary Local File Access CProxy allows an attacker to retrieve arbitrary local files by issuing an HTTP request with directory traversal sequences relative to a subdirectory...
[Full-Disclosure] Thomson TCW690 Denial Of Service Vulnerability
I found a vulnerability in this cablemodem which a malicious user inside LAN can reset it easily. This cablemodem model is given by the spanish ISP "AUNA". Details ======= Product: Thomson TCW690 cablemodem Affected Version: ST42.03.0a possible others Immune Version: ??? Security-Risk: high...
CVE-2005-0482
TrackerCam 5.12 and earlier allows remote attackers to cause a denial of service crash via 1 a large number of connections with a negative Content-Length header, possibly triggering an integer signedness error, or 2 a large amount of data...
fingerd Remote Overflow
Nessus was able to crash the remote finger daemon by sending a very long request. This is likely due to a buffer overflow. A remote attacker could potentially exploit this to execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid17141; scriptversion...
HP-UX PHNE_28538 : HP-UX Running on HP9000 Series 700/800, Denial of Service (DoS) (HPSBUX00264 SSRT3460 rev.5)
s700800 11.00 cumulative ARPA Transport patch : Certain network traffic can cause programs to fail. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE28538. The text itself is copyright C Hewlett-Packard...
CVE-2004-1458
The CSAdmin web administration interface for Cisco Secure Access Control Server ACS 3.22 build 15 allows remote attackers to cause a denial of service hang via a flood of TCP connections to port 2002...
CVE-2005-0315
The FTP service in Magic Winmail Server 4.0 Build 1112 does not verify that the IP address in a PORT command is the same as the IP address of the user of the FTP session, which allows remote authenticated users to use the server as an intermediary for port scanning...
CVE-2004-0897
The Indexing Service for Microsoft Windows XP and Server 2003 does not properly validate the length of a message, which allows remote attackers to execute arbitrary code via a buffer overflow attack...
CVE-2005-0108
Apache modauthradius 1.5.4 and libpam-radius-auth allow remote malicious RADIUS servers to cause a denial of service crash via a RADIUSREPLYMESSAGE with a RADIUS attribute length of 1, which leads to a memcpy operation with a -1 length argument...
CVE-2004-1080
The WINS service wins.exe on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port 42, aka the...
Microsoft Windows kernel vulnerable to denial-of-service condition via animated cursor (.ani) rate number
Overview A vulnerability exists in the way the Microsoft Windows kernel processes animated cursor .ani files with a rate number set to zero. Exploitation of this vulnerability may allow a remote attacker to cause a denial-of-service condition. Description A vulnerability exists in the way the...
CVE-2004-2318
The administrative interface surgeftpmgr.cgi for SurgeFTP Server 1.0b through 2.2k1 allows remote attackers to cause a temporary denial of service crash via requests with two percent % signs in the CMD parameter...
CVE-2004-2390
The roster import functionality in Jabber Gadu-Gadu Transport a.k.a. jabber-gg-transport 2.0.x before 2.0.8, when using libgadu 1.0 and later, allows attackers to cause a denial of service via unknown vectors...
CVE-2004-2581
Novell iChain 2.3 allows attackers to cause a denial of service via a URL with a "specific string."...
CVE-2004-1395
The Lithtech engine, as used in 1 Contract Jack 1.1 and earlier, 2 No one lives forever 2 1.3 and earlier, 3 Tron 2.0 1.042 and earlier, 4 F.E.A.R. First Encounter Assault and Recon, and possibly other games, allows remote attackers to cause a denial of service connection refused via a UDP packet...
CVE-2004-2315
Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service crash via an empty OPTIONS request...
CVE-2004-0567
The Windows Internet Naming Service WINS in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and Windows Server 2003 does not properly validate the computer name value in a WINS packet, which allows remote attackers to execute arbitrary code or cause a...