205 matches found
IBM Finds Sharp Spike in Malware on Trusted Sites
The most trusted websites, such as search engines, mainstream news sites and some blogs, are increasingly at risk of hosting malicious links that pass malicious code to their visitors, according to the latest data collected by researchers with IBM’s X-Force security team. The report ibm.com...
The return of image-based spam
After a two year absence, IBM X-Force is reporting iss.net a significant spike in image-based spam. “Since March 20th, we have been witnessing a rebirth of image-based spam. At first, we saw a small trial of image-based spam, reaching 5-10%. Then, in late April, we saw another blast this time a...
[SECURITY] [DSA 1710-1] New ganglia-monitor-core packages fix remote code execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1710-1 [email protected] http://www.debian.org/security/ Steffen Joeris January 25, 2009 http://www.debian.org/security/faq -...
ganglia -- buffer overflow vulnerability
Secunia reports: Spike Spiegel has discovered a vulnerability in Ganglia which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to a boundary error within the processpath function in gmetad/server.c. This can be exploited to cause a stack-bas...
[SECURITY] [DSA 1710-1] New ganglia-monitor-core packages fix remote code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1710-1 [email protected] http://www.debian.org/security/ Steffen Joeris January 25, 2009 http://www.debian.org/security/faq -...
Cyrus IMSPD v1.7 abook_dbname Remote Root Exploit
No description provided by source. / Cyrus IMSPD Remote Root Exploit ------------------------------- Bug found by: Felix Lindner [email protected] Exploit coded by: SpikE [email protected] Exploitation techinique: As said by Felix Lindner, the bug lies in the "abookdbname" function. To caus...
Multiple WarFTPd DoS
The remote WarFTPd server is running a 1.71 version. It is possible for a remote user to cause a denial of service on a host running Serv-U FTP Server, G6 FTP Server or WarFTPd Server. Repeatedly submitting an 'a:/' GET or RETR request, appended with arbitrary data, will cause the CPU usage to...
Multiple WarFTPd DoS
The remote WarFTPd server is running a 1.71 version. SPDX-FileCopyrightText: 2000 StrongHoldNET Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows XP SP2 - rdpwd.sys Remote Kernel Denial of Service
Microsoft Windows XP SP2 - rdpwd.sys Remote Kernel Denial of Service // get SPIKE here: http://www.immunitysec.com/resources-freesoftware.shtml /str0ke // // Windows XP SP2 'rdpwd.sys' Remote Kernel DoS // // Discovered by: // Tom Ferris // tommyatsecurity-protocolsdotcom // // Tested on: //...
MS Windows XP SP2 (rdpwd.sys) Remote Kernel DoS Exploit
Exploit for unknown platform in category dos / poc ======================================================= MS Windows XP SP2 rdpwd.sys Remote Kernel DoS Exploit ======================================================= // get SPIKE here: http://www.immunitysec.com/resources-freesoftware.shtml /str0...
MS Windows XP SP2 (rdpwd.sys) Remote Kernel DoS Exploit
No description provided by source. // get SPIKE here: http://www.immunitysec.com/resources-freesoftware.shtml /str0ke // // Windows XP SP2 'rdpwd.sys' Remote Kernel DoS // // Discovered by: // Tom Ferris // tommyatsecurity-protocolsdotcom // // Tested on: // Microsoft Windows XP SP2 // // Usage...
Microsoft Windows XP SP2 - 'rdpwd.sys' Remote Kernel Denial of Service
// get SPIKE here: http://www.immunitysec.com/resources-freesoftware.shtml /str0ke // // Windows XP SP2 'rdpwd.sys' Remote Kernel DoS // // Discovered by: // Tom Ferris // tommyatsecurity-protocolsdotcom // // Tested on: // Microsoft Windows XP SP2 // // Usage SPIKE : ./genericsendtcp 192.168.1.1...
MS02-025: Exchange 2000 Exhaust CPU Resources (320436)
The remote host is running Exchange Server 2000. The remote version of this software contains a flaw that allows an attacker to cause a temporary denial of service. To do this, the attacker needs to send an email message with malformed attributes. CPU utilization will spike at 100% until the...
Reproducing the MS DCE-RPC DOS.
Attached to this e-mail is a Java program and a data file which can be used to manually reproduce the DCE-RPC DOS from SPIKE v2.7. Compile it first with: $ javac EtherealReplay.java Then run it with: $ java EtherealReplay 192.168.x.x 135 windowsrpckill You may need to wait a few seconds before...
PPTP
For those of you who have a desire to crash Microsoft's PPTP stack, I have a pptp .spk script linked off of http://www.immunitysec.com/spike.html. It would probably be good to run against other PPTP stacks as well. Likewise, SPIKE's msrpcfuzzer takes down free software dce-rpc stacks just as fast...
cqure.net.20020408.netware_nwftpd.a
cqure.net Security Vulnerability Report No: cqure.net.20020408.netwarenwftpd.a ======================================== Vulnerability Summary --------------------- Problem: The Netware FTP server has a DOS vulnerability. Threat: An attacker could cause the server cpu to spike at 100 cpu hogging t...
KPMG-2002015: Microsoft Distributed Transaction Coordinator DoS
-------------------------------------------------------------------- Title: Microsoft Distributed Transaction Coordinator DoS BUG-ID: 2002015 Released: 19th Apr 2002 -------------------------------------------------------------------- Problem: ======== A flaw in the way MSDTC handles malformed...
SPIKE version released that detects .HTR and ISAPI overflows (see spike.sourceforge.net)
At long last, SPIKE is once again allowed to be public. This is the fuzzer creation kit I wrote that finds the .HTR and ISAPI overflow vulnerabilities discussed here: http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS02-018.asp and here:...
Bug in QPopper (All Versions?)
Description: When sending a string that has 2048+ characters in it, the in.qpopper or popper process will begin to use massive amounts of CPU and will not stop until it is manually killed. Versions Affected: I tested this on 4.0.1 and 4.0.3. 4.0.2 is probably vulnerable also. Older versions may...