[NT] MERCUR Mail Server Control-Service Vulnerability (Exploit)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Microsoft Windows Messenger Service - Denial of Service (MS03-043)

Microsoft Windows Messenger Service - Denial of Service MS03-043 / DoS Proof of Concept for MS03-043 - exploitation shouldn't be too hard. Launching it one or two times against the target should make the machine reboot. Tested against a Win2K SP4. "The vulnerability results because the Messenger...

Microsoft Windows Messenger Service - Denial of Service (MS03-043)

/ DoS Proof of Concept for MS03-043 - exploitation shouldn't be too hard. Launching it one or two times against the target should make the machine reboot. Tested against a Win2K SP4. "The vulnerability results because the Messenger Service does not properly validate the length of a message before...

fetchmail -- denial-of-service vulnerability

Dave Jones discovered a denial-of-service vulnerability in fetchmail. An email message containing a very long line could cause fetchmail to segfault due to missing NUL termination in transact.c. Eric Raymond decided not to mention this issue in the release notes for fetchmail 6.2.5, but it was...

[SECURITY] [DSA 395-1] New tomcat4 packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 395-1 [email protected] http://www.debian.org/security/ Martin Schulze October 15th, 2003 http://www.debian.org/security/faq -...

NullLogic Null HTTPd 0.5 - Remote Denial of Service

source: https://www.securityfocus.com/bid/8697/info Null HTTPd has been reported prone to a remotely triggered denial of service vulnerability. The issue has been reported to present itself in the HTTP POST handling routines within the Null HTTPd server. It has been reported that a remote attacke...

Solaris sadmind AUTH_SYS Credential Remote Command Execution

The remote host is running the sadmind RPC service. It is possible to misuse this service to execute arbitrary commands on this host as root. C Tenable Network Security, Inc. Greatly improved by H D Moore include"compat.inc"; if description scriptid11841; scriptversion"1.34"; scriptcvsdate"Date:...

4D WebSTAR FTP Server Suite Remote Buffer Overflow Exploit

No description provided by source. / Remote Vulnerability in 4D WebSTAR Server Suite - Exploit ================================================ Date: 11.09.2003 Author: B-r00t. 2003. Email: B-r00t blueyonder.co.uk Reference: http://www.4d.com/products/webstar.html Versions: 4D WebSTAR 5.3.1 Lates...

MyServer 0.4.3 - Denial of Service

/ MyServer 0.4.3 DoS vendor: http://myserverweb.sourceforge.net Written and found by badpack3t at security-protocols.com For SP Research Labs 09/08/2003 usage: sp-myserv targetport default is 80 / include "stdafx.h" include include pragma commentlib, "ws232.lib" char exploit = / entire request /...

ZoneAlarm 3.7.202PRO 4.0PRO 4.5 - Random UDP Flood Denial of Service (2)

ZoneAlarm 3.7.202PRO 4.0PRO 4.5 - Random UDP Flood Denial of Service 2 // source: https://www.securityfocus.com/bid/8525/info A denial of service vulnerability has been alleged in ZoneAlarm. It is reportedly possible to reproduce this condition by sending a flood of UDP packets of random sizes to...

vpop3 DoS

Oversized username causes service to crash...

Opera 7 - Denial of Service

source: https://www.securityfocus.com/bid/8066/info Opera has been reported to be prone to five denial of service vulnerabilities. These issues can be triggered when the browser attempts to interpret a document with malformed code. Exploitation could cause the browser to terminate or freeze. This...

Check Point FireWall-1/VPN-1 Syslog Daemon Remote Overflow DoS

The remote host is running a syslog server most likely a Check Point NG syslog server with a denial of service vulnerability. A remote, attacker could exploit this to crash this server. It is not known whether or not this vulnerability could result in arbitrary code execution. Please note Nessus...

MDaemon POP Server Multiple Command Remote Overflow DoS

According to its banner, the remote POP server has a denial of service vulnerability. Input to the DELE and UIDL commands are not properly handled. A remote, authenticated attacker could exploit this to crash the POP service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

PT-2003-1416 · Sgi · Irix

Name of the Vulnerable Software and Affected Versions: IRIX versions 6.5.19 and earlier Description: The issue concerns the LDAP name service nsd not properly verifying if the USERPASSWORD attribute has been provided by an LDAP server. This could allow attackers to log in without a password...

VisNetic ActiveDefense 1.3.1 - GET Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/7428/info A denial of service vulnerability has been discovered in VisNetic ActiveDefense. The problem occurs when multiple HTTP requests are subsequently made to a server, containing a specific amount of data. After processing these requests, the affecte...

mod_access_referer 1.0.2 for Apache Malformed Referer DoS

The remote web server may be using a modaccessreferer apache module which contains a NULL pointer dereference bug. Abuse of this vulnerability could allow an attacker to launch a denial of service attack against affected systems. This script was written by Xue Yong Zhi [email protected] Changes by...

CVE-2002-1433

Kerio MailServer 5.0 allows remote attackers to cause a denial of service hang via SYN packets to the supported network services...

Apple Mac OSX 10.x - DirectoryService Denial of Service

// source: https://www.securityfocus.com/bid/7323/info MacOSX DirectoryService has been reported prone to a denial of service vulnerability. It has been reported that a remote attacker may trigger an exception in DirectoryService by repeatedly connecting to specific network ports. / OS X include...

Abyss Web Server 1.1.2 - Incomplete HTTP Request Denial of Service

Abyss Web Server 1.1.2 - Incomplete HTTP Request Denial of Service source: https://www.securityfocus.com/bid/7287/info A denial of service vulnerability has been reported for Abyss Web Server. The vulnerability exists when Abyss attempts to parse certain incomplete HTTP headers. GET / HTTP/1.0...