CVE-2007-4293

Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service device crash via 1 "abnormal" MGCP messages, aka CSCsd81407; and 2 a large facsimile packet, aka CSCej20505...

Atheros无线驱动拒绝服务漏洞

BUGTRAQ ID: 25160 CVE ID:CVE-2007-2927 CNCVE ID:CNCVE-20072927 Atheros Wireless Drivers是一款无线网卡的驱动程序。 部分版本的Atheros 802.11 a/b/g无线适配器版本不正确处理畸形报文，远程攻击者可以利用漏洞对驱动进行拒绝服务攻击。 问题是由于驱动不正确处理管理帧，在频率范围的攻击者可以通过发送畸形802.11管理帧来触发溢出，导致设备驱动崩溃。 Atheros Communications Wireless Driver 802.11 a/b/g 0 可联系供应商获得最新的程序：...

GLSA-200705-24 : libpng: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200705-24 libpng: Denial of Service Mats Palmgren fixed an error in file pngrutil.c in which the trans array might be not allocated because of images with a bad tRNS chunk CRC value. Impact : A remote attacker could craft an image...

DNS RPC analysis-vulnerability warning-the black bar safety net

Author: cloud Shu Date: 2007-04-27 http://www.ph4nt0m.org According to the security Bulletin for the vulnerability description, vulnerability occurs in the dns. exe program in the DnssrvQuery Function, This function is an RPC function, allows clients to make remote calls. First with IDA on dns. e...

McAfee e-Business Server无效数据长度拒绝服务漏洞

McAfee e-Business Server用于为存储和共享文档的企业和个人提供透明加密。 McAfee e-Business Server在处理畸形的认证请求时存在漏洞，远程攻击者可能利用此漏洞导致服务器崩溃。 如果攻击者在认证到McAfee e-Business Server期间发送了畸形认证报文的话就会导致服务器崩溃。收到报文后服务器会读取其长度，然后试图从缓冲区读取该长度的字节。如果攻击者能够指定很大的长度值但发送了很小的报文，就会导致服务器读取到所映射堆内存之外，触发无法处理的异常，管理服务器会崩溃。 0 McAfee E-Business Server 8.5.1.101...

GLSA-200704-15 : MadWifi: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200704-15 MadWifi: Multiple vulnerabilities The driver does not properly process Channel Switch Announcement Information Elements, allowing for an abnormal channel change. The ieee80211input function does not properly handle AUTH...

MadWifi: Multiple vulnerabilities

Background The MadWifi driver provides support for Atheros based IEEE 802.11 Wireless Lan cards. Description The driver does not properly process Channel Switch Announcement Information Elements, allowing for an abnormal channel change. The ieee80211input function does not properly handle AUTH...

Sami HTTP Server 2.0.1 POST Request Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================================= Sami HTTP Server 2.0.1 POST Request Denial of Service Exploit ============================================================= usr/bin/python import socket print...

Sami HTTP Server 2.0.1 - POST Denial of Service

usr/bin/python import socket print "-------------------------------------------------------------------------" print " Sami HTTP Server 2.0.1 POST request Denial of Service" print " url: http://www.karjasoft.com" print " author: shinnai" print " mail: shinnaiatautisticidotorg" print " site:...

Sami HTTP Server 2.0.1 - POST Denial of Service

Sami HTTP Server 2.0.1 - POST Denial of Service usr/bin/python import socket print "-------------------------------------------------------------------------" print " Sami HTTP Server 2.0.1 POST request Denial of Service" print " url: http://www.karjasoft.com" print " author: shinnai" print " mai...

Debian DSA-1137-1 : tiff - several vulnerabilities

Tavis Ormandy of the Google Security Team discovered several problems in the TIFF library. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2006-3459 Several stack-buffer overflows have been discovered. - CVE-2006-3460 A heap overflow vulnerability in the...

USN-2-1: xpdf vulnerabilities

Chris Evans discovered several integer overflow vulnerabilities in xpdf, a viewer for PDF files. The Common UNIX Printing System CUPS also uses the same code to print PDF files. In either case, these vulnerabilities could be exploited by an attacker by providing a specially crafted PDF file which...

[Opera 7] Five DoS codes on general web sites

--------------------------------------------------------------------------------- TITLE :Opera 7 Five DoS codes on general web sites -= Fastest browser on earth, Fastest crash on earth too =- PRODUCT : Opera for Windows VERSIONS : 7.11b build 2887 7.11 build 2880 7.10 build 2840 7.03 build 2670...

Opera 7 - Denial of Service

Opera 7 - Denial of Service source: https://www.securityfocus.com/bid/8066/info Opera has been reported to be prone to five denial of service vulnerabilities. These issues can be triggered when the browser attempts to interpret a document with malformed code. Exploitation could cause the browser ...