Debian DSA-651-1 : squid - buffer overflow, integer overflow

Several vulnerabilities have been discovered in Squid, the internet object cache, the popular WWW proxy cache. The Common Vulnerabilities and Exposures Project identifies the following vulnerabilities : - CAN-2005-0094 'infamous41md' discovered a buffer overflow in the parser for Gopher responses...

Server crash in Breed patch #1

Luigi Auriemma Application: Breed http://www.brat-designs.com/breed.html Versions: = patch 1 Platforms: Windows Bug: access to NULL pointer Exploitation: remote, versus server Date: 13 Jan 2005 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2...

CVE-2004-1207

The Serious engine, as used in 1 Alpha Black Zero Intrepid Protocol 1.04 and earlier, 2 Nitro family, and 3 Serious Sam Second Encounter 1.07 allows remote attackers to cause a denial of service server crash via a large number of UDP join requests that exceeds the maximum player limit, as...

CVE-2004-1215

Kreed 1.05 and earlier allows remote attackers to cause a denial of service server disconnect via a long UDP packet, which causes a "message too long" socket error...

Socket unreacheable in Amp II engine

Luigi Auriemma Application: Amp II 3D engine http://www.4drulers.com/amp.html Versions: any version since there is no patch available Games: Gore: Ultimate Soldier = 1.50 ... possibly others ... Platforms: Windows Bug: socket unreacheable Exploitation: remote, versus server Date: 06 Jan 2005...

Gracebyte Network Assistant DoS

Invalid packet to UDP/50138 port causes service to crash or misbihave...

remote DoS for Nasi

oooo oooo oooooooo8 ooooooooooo 8888o 88 888 88 888 88 88 888o88 888oooooo 888 88 8888 888 888 o88o 88 o88oooo888 o888o Network security team nst.e-nex.com Title: All version = Network Assistant 3.2 build 2260 Bug found by: : Гринвуд Date: 6.01.2005 Influence: DoS URL: www.gracebyte.com Если...

CVE-2004-1524

Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service game interruption via a malformed UDP packet sent to a game port, such as port 29200...

CVE-2004-2360

Targem Battle Mages 1.0 allows remote attackers to cause a denial of service infinite loop via a UDP packet with incomplete data, which causes the server to enter an infinite loop while waiting to read the rest of the data that is not sent...

CVE-2004-2449

Roger Wilco 1.4.1.6 and earlier or Roger Wilco Base Station 0.30a and earlier allows remote attackers to cause a denial of service application crash via a long, malformed UDP datagram...

CVE-2004-2457

Unspecified vulnerability in 3Com OfficeConnect ADSL 11g Router allows remote attackers to cause a denial of service crash via a large amount of UDP traffic...

CVE-2004-1395

The Lithtech engine, as used in 1 Contract Jack 1.1 and earlier, 2 No one lives forever 2 1.3 and earlier, 3 Tron 2.0 1.042 and earlier, 4 F.E.A.R. First Encounter Assault and Recon, and possibly other games, allows remote attackers to cause a denial of service connection refused via a UDP packet...

CVE-2004-1472

Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 allow remote attackers to cause a denial of service device freeze via a fast UDP port scan on the WAN interface...

CVE-2004-1473

Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 allow remote attackers to bypass filtering and determine whether the device is running services such as tftpd, snmpd, or isakmp via a UDP...

CA BrightStor Discovery Service Stack Buffer Overflow

This module exploits a vulnerability in the CA BrightStor Discovery Service. This vulnerability occurs when a large request is sent to UDP port 41524, triggering a stack buffer overflow. Module Options msf use exploit/windows/brightstor/discovery/udp msf undefinedudp show actions ...actions... ms...

CVE-2004-1215

Kreed 1.05 and earlier is affected by CVE-2004-1215, where remote attackers can cause a denial of service (server disconnect) by sending a long UDP packet that triggers a "message too long" socket error. The public records identify the affected software and the exact failure condition, but they d...

CVE-2004-1207

The Serious engine, as used in 1 Alpha Black Zero Intrepid Protocol 1.04 and earlier, 2 Nitro family, and 3 Serious Sam Second Encounter 1.07 allows remote attackers to cause a denial of service server crash via a large number of UDP join requests that exceeds the maximum player limit, as...

CVE-2004-1215

Kreed 1.05 and earlier allows remote attackers to cause a denial of service server disconnect via a long UDP packet, which causes a "message too long" socket error...

CVE-2004-1207

CVE-2004-1207 affects the Serious engine as used in Alpha Black Zero Intrepid Protocol 1.04 and earlier, the Nitro family, and Serious Sam Second Encounter 1.07. The issue allows remote attackers to trigger a denial of service (server crash) by sending a large number of UDP join requests that exc...

CVE-2004-1207: Undefined Security Weakness

The Serious engine, as used in 1 Alpha Black Zero Intrepid Protocol 1.04 and earlier, 2 Nitro family, and 3 Serious Sam Second Encounter 1.07 allows remote attackers to cause a denial of service server crash via a large number of UDP join requests that exceeds the maximum player limit, as...