Computer Associates BrightStor ARCserve Backup Discovery Service vulnerable to buffer overflow

Overview The Computer Associates BrightStor ARCserve Backup Discovery Service contains a buffer overflow, which may allow a remote attacker to execute arbitrary code. Description Computer Associates BrightStor ARCserve Backup is a cross-platform backup and recovery application. The ARCserve Backu...

CVE-2005-1175

Heap-based buffer overflow in the Key Distribution Center KDC in MIT Kerberos 5 krb5 1.4.1 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a certain valid TCP or UDP request...

CVE-2005-1175

Heap-based buffer overflow in the Key Distribution Center KDC in MIT Kerberos 5 krb5 1.4.1 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a certain valid TCP or UDP request...

CVE-2005-1175

CVE-2005-1175 is a heap-based buffer overflow in MIT Kerberos 5 (krb5) 1.4.1 and earlier in the KDC, exploitable by remote attackers via a certain valid TCP/UDP request to cause a denial of service and potentially execute arbitrary code. The vulnerability is unauthenticated and can impact Kerbero...

CVE-2001-1533

Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to cause a denial of service via a flood of fragmented UDP packets. NOTE: the vendor disputes this issue, saying that it requires high bandwidth to exploit, and the server does not experience any instability...

CVE-2001-1533

Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to cause a denial of service via a flood of fragmented UDP packets. NOTE: the vendor disputes this issue, saying that it requires high bandwidth to exploit, and the server does not experience any instability...

CVE-2001-1533

CVE-2001-1533 affects Microsoft Internet Security and Acceleration (ISA) Server 2000. A denial of service can be triggered by a flood of fragmented UDP packets. Several sources note the vendor disputes the issue, claiming it requires high bandwidth and does not cause instability, suggesting it ma...

CVE-2001-1533: Undefined Security Weakness

Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to cause a denial of service via a flood of fragmented UDP packets. NOTE: the vendor disputes this issue, saying that it requires high bandwidth to exploit, and the server does not experience any instability...

MITKRB5-SA-2005-002: buffer overflow, heap corruption in KDC

-----BEGIN PGP SIGNED MESSAGE----- MIT krb5 Security Advisory 2005-002 Original release: 2005-07-12 Topic: buffer overflow, heap corruption in KDC Severity: CRITICAL SUMMARY ======= The MIT krb5 Key Distribution Center KDC implementation can corrupt the heap by attempting to free memory at a rand...

Debian DSA-751-1 : squid - IP spoofing

The upstream developers have discovered a bug in the DNS lookup code of Squid, the popular WWW proxy cache. When the DNS client UDP port assigned by the operating system at startup is unfiltered and the network is not protected from IP spoofing, malicious users can spoof DNS lookups which could...

Solaris Socket Hijack

/ $ An open security advisory 7 - SUN Solaris SOREUSEADDR Local Socket Hijack Bug 1: Bug Researcher: c0ntex - c0ntexbatgmail.com 2: Bug Released: July 06 2005 3: Bug Impact Rate: Medium / Hi 4: Bug Scope Rate: Local / Remote $ This advisory and/or proof of concept code must not be used for...

CVE-2002-1768

Cisco IOS 11.1 through 12.2, when HSRP support is not enabled, allows remote attackers to cause a denial of service CPU consumption via randomly sized UDP packets to the Hot Standby Routing Protocol HSRP port 1985...

CVE-2002-1768: Undefined Security Weakness

Cisco IOS 11.1 through 12.2, when HSRP support is not enabled, allows remote attackers to cause a denial of service CPU consumption via randomly sized UDP packets to the Hot Standby Routing Protocol HSRP port 1985...

TFTPD small overflow

It is possible to crash the remote TFTP server by sending a small UDP packet. A remote attacker could exploit this to crash the service. This script was written by Josh Zlatin-Amishav GNU Public Licence GPLv2 This plugin is just a very slightly modified version of tftpdoverflow.nasl...

Microsoft Incoming SMB Packet Validation Remote Buffer Overflow Vulnerability

Description Microsoft SMB is susceptible to a remote buffer overflow vulnerability. This issue is due to a failure of the application to properly bounds check user-supplied data prior to copying it to an insufficiently sized memory buffer. Remote attackers may exploit this vulnerability to execut...

Microsoft Outlook Express NNTP Response Parsing Buffer Overflow Vulnerability

Description Microsoft Outlook Express is prone to a buffer overflow when parsing NNTP responses. Successful exploits could allow arbitrary code to run in the context of the user running the application. Technologies Affected Microsoft Outlook Express 5.0 Microsoft Outlook Express 5.5 Microsoft...

Microsoft Outlook Express vulnerable to remote code execution

Overview A vulnerability in Microsoft Outlook Express's NNTP response parsing may allow an attacker to execute arbitrary code. Description Microsoft Outlook Express contains support for Network News Transfer Protocol NNTP data, which is defined in RFC 977 and RFC 2980. A flaw in Outlook Express'...

CVE-2005-1899

Rakkarsoft RakNet network library 2.33 and earlier, when released before 30 May 2005, and as used in multiple products including nFusion Elite Warriors: Vietnam, allows remote attackers to cause a denial of service infinite loop via a zero-byte UDP packet...

CVE-2005-1899

Rakkarsoft RakNet network library 2.33 and earlier, when released before 30 May 2005, and as used in multiple products including nFusion Elite Warriors: Vietnam, allows remote attackers to cause a denial of service infinite loop via a zero-byte UDP packet...

CVE-2005-1899

Affected software: Rakkarsoft RakNet network library 2.33 and earlier. Vulnerability: remote denial of service via a zero-byte UDP packet, causing an infinite loop. Impact scope: used in multiple products (e.g., nFusion Elite Warriors: Vietnam) as of the cited CVE. Root cause/notes: the descripti...