Mandrake Linux Security Advisory : mgetty (MDKSA-2003:053-1)

Two vulnerabilities were discovered in mgetty versions prior to 1.1.29. An internal buffer could be overflowed if the caller name reported by the modem, via Caller ID information, was too long. As well, the faxspool script that comes with mgetty used a simple permissions scheme to allow or deny f...

CVE-2004-0459

The Clear Channel Assessment CCA algorithm in the IEEE 802.11 wireless protocol, when using DSSS transmission encoding, allows remote attackers to cause a denial of service via a certain RF signal that causes a channel to appear busy aka "jabber", which prevents devices from transmitting data...

CVE-2004-0459

The Clear Channel Assessment CCA algorithm in the IEEE 802.11 wireless protocol, when using DSSS transmission encoding, allows remote attackers to cause a denial of service via a certain RF signal that causes a channel to appear busy aka "jabber", which prevents devices from transmitting data...

IEEE 802.11 collision avoidance procedure weakness

By using Clear Channel Assessment procedure weakness attacker equipped with standard client card can prevent data transmission over network...

IEEE 802.11 wireless network protocol DSSS CCA algorithm vulnerable to denial of service

Overview The IEEE 802.11 wireless networking protocol contains a vulnerability that could allow a remote attacker to cause a denial of service to any wireless device within range. Description IEEE 802.11 wireless network protocols use a Clear Channel Assessment CCA algorithm to determine whether ...

The Border Gateway Protocol relies on persistent TCP sessions without specifying authentication requirements

Overview A vulnerability exists in the reliance of the Border Gateway Protocol BGP on the Transmission Control Protocol TCP to maintain persistent sessions. Sustained exploitation of this vulnerability could lead to a denial-of-service condition affecting a large segment of the Internet community...

RealSecure Blackice - iss_pam1.dll Remote Overflow

RealSecure Blackice - isspam1.dll Remote Overflow / 557isspamexp - RealSecure / Blackice ICQ isspam1.dll remote overflow exploit Copyright c SST 2004 All rights reserved. Public version code by Sam Sam@efnet and 2004/03/26 Compile: gcc -o 557isspamexp 557isspamexp.c how works? root@core exp...

Weak DameWare encryption

Weak PRNG is used for symmetric key generation, key is self is sent in cleartext among data...

Dameware Passes Weak File Encryption Key in the Clear

Dameware Mini Remote Control version 4.1.0.0 and presumably other versions pass a Blowfish encryption key over the wire in the clear. It is bad enough that they appear to be using Blowfish in Electronic Codebook Mode; but they compound their errors by the following two vulnerabilities. The Damewa...

CVE-2004-1852

DameWare Mini Remote Control 3.x before 3.74 and 4.x before 4.2 transmits the Blowfish encryption key in plaintext, which allows remote attackers to gain sensitive information...

leafnode fetchnews denial-of-service triggered by truncated transmission

When a downloaded news article ends prematurely, i. e. when the server sends CRLF.CRLF before sending a blank line, fetchnews may wait indefinitely for data that never arrives. Workaround: configure "minlines=1" or use a bigger value in the configuration file. Found by Toni Viemerö...

KaZaA Media Desktop discloses username to remote users

Overview The usernames disclosed by the KaZaA Media Desktop peer-to-peer file sharing application do not present a security vulnerability. Description The KaZaA Media Desktop is a peer-to-peer file sharing application that allows users to search for and download files from other KaZaA users. This...

OpenOffice 1.0.1 - Remote Access Denial of Service

OpenOffice 1.0.1 - Remote Access Denial of Service source: https://www.securityfocus.com/bid/8794/info OpenOffice provides functionality so that it can be configured to listen on a designated network port for incoming communications. OpenOffice is prone to a remote denial of service vulnerability...

OpenOffice 1.0.1 - Remote Access Denial of Service

source: https://www.securityfocus.com/bid/8794/info OpenOffice provides functionality so that it can be configured to listen on a designated network port for incoming communications. OpenOffice is prone to a remote denial of service vulnerability under certain circumstances. The issue presents...

DEBIAN-CVE-2003-0251

ypserv NIS server before 2.7 allows remote attackers to cause a denial of service via a TCP client request that does not respond to the server, which causes ypserv to block...

Activity Monitor buffer overflow

Buffer overflow on sending large data to TCP/15163...

Remote PC Access Server detection.

The remote host is running Remote PC Access Server. It is, therefore, affected by an information disclosure vulnerability due to the protocol transmitting username and passwords in cleartext. A man-in-the-middle attacker can exploit this to disclose the credentials and then take control of the...

3com RAS 1500 Configuration Disclosure

The remote 3com SuperStack II Remote Access System 1500 discloses its user configuration usersettings.cfg when the file is requested through the web interface. The file is transmitted in cleartext and contains the password of the device as well as other sensitive information. An attacker may use...

802.11b DoS exploit

While working to develop code for WIDZ that is equivalent to a standard Intrusion Detection system’s RESET or SHUN functionality, an effective 802.11b disruption of service attack has been discovered. I haven’t spotted any other postings so here we go…. FATA-jack - a modified version of the...

WihPhoto (PHP)

Informations : °°°°°°°°°°°°°° Version : 0.86-dev Website : http://www.wihsy.com problem : All files from the hard disk can be send by mail PHP Code/Location : °°°°°°°°°°°°°°°°°°° util/email.php : ------------------------------------------------------------------------ ? class CMailFile var...