[Full-disclosure] Cisco Security Advisory:Cisco 11500 Content Services Switch SSL Malformed Client Certificate Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco 11500 Content Services Switch SSL Malformed Client Certificate Vulnerability ========================================================================== Document ID: 67919 Revision 1.0 For Public Release 2005 October 19...

Microsoft IIS - SA WebAgent 5.25.3 Redirect Overflow (Metasploit)

Microsoft IIS - SA WebAgent 5.25.3 Redirect Overflow Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core...

security flaw

sshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege separation, does not properly signal the non-privileged process when a session has been terminated after exceeding the LoginGraceTime setting, which leaves the connection open and allows remote attackers to...

BusMail_SMTPDOS.pl.txt

Summary: Buffer overflow in BusinessMail email server system 4.60.00 http://www.netcplus.com/ Details: Input to the SMTP HELO and MAIL FROM: commands is not properly checked and/or filtered. Issuing a long argument to the HELO and MAIL FROM: commands will cause the corresponding process to die...

CVE-2001-1579: Undefined Security Weakness

The timed program in.timed in UnixWare 7 and OpenUnix 8.0.0 does not properly terminate certain strings with a null, which allows remote attackers to cause a denial of service...

[Full-disclosure] Buffer overflow in BusinessMail email server system 4.60.00

Summary: Buffer overflow in BusinessMail email server system 4.60.00 http://www.netcplus.com/ Details: Input to the SMTP HELO and MAIL FROM: commands is not properly checked and/or filtered. Issuing a long argument to the HELO and MAIL FROM: commands will cause the corresponding process to die...

CVE-2002-1942

Imatix Xitami 2.5 b5 is affected. The issue is that the product does not properly terminate certain Keep-Alive connections that have been broken or closed early, which can allow remote attackers to cause a denial of service (crash) through a large number of concurrent sessions. The vulnerability ...

Server termination in Raknet 2.33 (before 30 May 2005)

Luigi Auriemma Application: Raknet network library http://www.rakkarsoft.com Versions: = 2.33 before 30 May 2005 the bug has been introduced in some recent updates but is not known what is the exact first vulnerable version Platforms: Windows and Unix Bug: server termination and endless loop...

[Full-disclosure] Crash in Stronghold 2 1.2

Luigi Auriemma Application: Stronghold 2 http://www.stronghold2.com Versions: = 1.2 Platforms: Windows Bug: exception/crash Exploitation: remote, versus server Date: 30 May 2005 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2 Bug 3 The Code 4...

CVE-2004-2069

sshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege separation, does not properly signal the non-privileged process when a session has been terminated after exceeding the LoginGraceTime setting, which leaves the connection open and allows remote attackers to...

CVE-2005-0621

Scrapland 1.0 and earlier allows remote attackers to cause a denial of service server termination by triggering an error, which is treated as a fatal error by the server, as demonstrated using 1 signed integers for size values, 2 an invalid model, 3 a "newpos" value that is less than or equal to ...

CVE-2002-1603: Undefined Security Weakness

GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminated with a /, , %2f encoded /, %20 encoded space, or %00 encoded null character, which returns the ASP source code unparsed...

CVE-2005-0621: Undefined Security Weakness

Scrapland 1.0 and earlier allows remote attackers to cause a denial of service server termination by triggering an error, which is treated as a fatal error by the server, as demonstrated using 1 signed integers for size values, 2 an invalid model, 3 a "newpos" value that is less than or equal to ...

[Full-Disclosure] Server termination in Scrapland 1.0

Luigi Auriemma Application: Scrapland http://www.scrapland.com Versions: = 1.0 Platforms: Windows Bug: server termination Exploitation: remote, versus server partially in-game Date: 28 Feb 2005 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2...

Scrapland 1.0 - Server Termination Denial of Service

Scrapland 1.0 - Server Termination Denial of Service / by Luigi Auriemma / include include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error;...

Scrapland 1.0 - Server Termination Denial of Service

/ by Luigi Auriemma / include include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupte...

Scrapland <= 1.0 Server Termination Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================================= Scrapland include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h /...

CVE-2005-0279: Undefined Security Weakness

Soldner Secret Wars 30830 and earlier does not properly handle the "message too long" socket error, which allows remote attackers to cause a denial of service socket termination via a long UDP packet...

bind9 -- denial of service

Problem description A DNSSEC-related validator function in BIND 9.3.0 contains an inappropriate internal consistency test. When this test is triggered, named8 will exit. Impact On systems with DNSSEC enabled, a remote attacker may be able to inject a specially crafted packet that will cause the...

Socket termination, format string and XSS in Soldner Secret Wars 30830

Luigi Auriemma Application: SLDNER - Secret Wars http://www.secretwars.net Versions: = 30830 Platforms: Windows Bugs: A silent socket termination B in-game format string C in-game cross site scripting versus admin Exploitation: remote, versus server B and C are in-game bugs Date: 04 Jan 2005...