iDEFENSE Security Advisory 09.15.04: GNU Radius SNMP String Length Integer Overflow Denial of Service Vulnerability

GNU Radius SNMP String Length Integer Overflow Denial of Service Vulnerability iDEFENSE Security Advisory 09.15.04 www.idefense.com/application/poi/display?id=141&type=vulnerabilities September 15, 2004 I. BACKGROUND Radius is used for remote user authentication and accounting. For more informati...

DoS in Crackalaka 1.0.8

Donato Ferrante Application: Crackalaka http://www.stalphonsos.com/attila/crackalaka Version: 1.0.8 Bug: Denial Of Service Date: 09-Apr-2004 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx...

Remote crash in Etherlords I 1.07 and II 1.03

Luigi Auriemma Application: - Etherlords I http://www.etherlords.com/etherlords1/ - Etherlords II http://www.etherlords.com Versions: Etherlords I = 1.07 Etherlords II = 1.03 Platforms: Windows Bug: reading of unallocated memory crash Risk: medium Exploitation: remote, versus server and client...

Chrome 1.2.0.0 server crash

Luigi Auriemma Application: Chrome http://www.chromethegame.com Versions: = 1.2.0.0 Platforms: Windows Bug: reading and writing into unallocated memory crash Risk: medium/high Exploitation: remote, versus server Date: 18 Mar 2004 Author: Luigi Auriemma e-mail: [email protected] web:...

CVE-2004-0321

Team Factor 1.25 and earlier allows remote attackers to cause a denial of service crash via a packet that uses a negative number to specify the size of the data block that follows, which causes Team Factor to read unallocated memory...

Remote server crash in Haegemonia <= 1.07

Luigi Auriemma Application: Haegemonia http://www.haegemonia.com Versions: = 1.07 Platforms: Windows Bug: reading of unallocated memory crash Risk: high Exploitation: remote, versus server Date: 24 Feb 2004 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1...

Remote server crash in Team Factor <= 1.25

Luigi Auriemma Application: Team Factor aka US Special Forces http://www.teamfactor.co.uk/ http://ms7fx.iccc.cz/teamfactor/ Versions: = 1.25 note: 1.25 and 1.25m uses the same vulnerable exe Platforms: Windows and Linux Bug: reading of unallocated memory crash Risk: high Exploitation: remote,...

BSD smat privilege escalation

It's possible to access unallocated page of phisical memory...

Remote crash of Chaser game <= 1.50

Luigi Auriemma Application: Chaser http://www.chasergame.com Versions: = 1.50 Platforms: Windows Bug: crash reading of unallocated memory Risk: high Exploitation: remote, both server and client are vulnerables Date: 03 Feb 2004 Author: Luigi Auriemma e-mail: [email protected] web:...

Cauldron Chaser 1.41.5 - Remote Denial of Service (2)

Cauldron Chaser 1.41.5 - Remote Denial of Service 2 source: https://www.securityfocus.com/bid/9567/info Chaser has been reported to be prone to a denial of service vulnerability. This issue is caused by a lack of input validation of a size parameter specified in UDP network communication packets...

LBL Traceroute 1.4 a5 - Heap Corruption (3)

LBL Traceroute 1.4 a5 - Heap Corruption 3 // source: https://www.securityfocus.com/bid/1739/info Traceroute is a well-known network diagnostic tool used for analyzing the path on a network between two hosts. On unix systems, traceroute is typically installed setuid root because of its use of raw...

LBL Traceroute 1.4 a5 - Heap Corruption (1)

LBL Traceroute 1.4 a5 - Heap Corruption 1 // source: https://www.securityfocus.com/bid/1739/info Traceroute is a well-known network diagnostic tool used for analyzing the path on a network between two hosts. On unix systems, traceroute is typically installed setuid root because of its use of raw...