Gentoo Security Advisory GLSA 200505-03 (Ethereal)

The remote host is missing updates announced in advisory GLSA 200505-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200507-27 (Ethereal)

The remote host is missing updates announced in advisory GLSA 200507-27. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

OpenLDAP BER Decoding Remote DoS Vulnerability

This vulnerability allows remote attackers to deny services on vulnerable installations of OpenLDAP. Authentication is not required to exploit this vulnerability. The specific flaw exists in the decoding of ASN.1 BER network datagrams. When the size of a BerElement is specified incorrectly, the...

CORE-2008-0129 - Wonderware SuiteLink Denial of Service vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Wonderware SuiteLink Denial of Service vulnerability Advisory Information Title: Wonderware SuiteLink Denial of Service vulnerability Advisory ID: CORE-2008-0129...

On the Expliot the guidelines for the preparation of the PNP the overflow vulnerability analysis and exploit-vulnerability warning-the black bar safety net

First, the vulnerability causes and impact of the range of Vulnerability causes as already briefly mentioned, we can see the vulnerability announcement. From the vulnerability announcement, we can see two points: 1． Vulnerability causes: Windows 2 0 0 0 version more than the PNP service remote...

SurgeMail畸形HOST头字段数据拒绝服务漏洞

SurgeMail是一款WEB MAIL应用程序。 SurgeMail不正确处理HTTP POST请求，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 由于不正确处理HTTP POST提交的HOST字段数据，可导致应用程序崩溃，造成拒绝服务攻击。 NetWin SurgeMail 38k4 目前没有解决方案提供： http://www.netwinsite.com/surgemail/ ?php / SurgeMail v.38k4 webmail Host header denial of service exploit tested against the windows...

GLSA-200711-08 : libpng: Multiple Denials of Service

The remote host is affected by the vulnerability described in GLSA-200711-08 libpng: Multiple Denials of Service An off-by-one error when handling ICC profile chunks in the pngsetiCCP function was discovered CVE-2007-5266. George Cook and Jeff Phillips reported several errors in pngrtran.c, the u...

libpng: Multiple Denials of Service

Background libpng is a free ANSI C library used to process and manipulate PNG images. Description An off-by-one error when handling ICC profile chunks in the pngsetiCCP function was discovered CVE-2007-5266. George Cook and Jeff Phillips reported several errors in pngrtran.c, the use of logical...

CVE-2007-4293

Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service device crash via 1 "abnormal" MGCP messages, aka CSCsd81407; and 2 a large facsimile packet, aka CSCej20505...

Atheros无线驱动拒绝服务漏洞

BUGTRAQ ID: 25160 CVE ID:CVE-2007-2927 CNCVE ID:CNCVE-20072927 Atheros Wireless Drivers是一款无线网卡的驱动程序。 部分版本的Atheros 802.11 a/b/g无线适配器版本不正确处理畸形报文，远程攻击者可以利用漏洞对驱动进行拒绝服务攻击。 问题是由于驱动不正确处理管理帧，在频率范围的攻击者可以通过发送畸形802.11管理帧来触发溢出，导致设备驱动崩溃。 Atheros Communications Wireless Driver 802.11 a/b/g 0 可联系供应商获得最新的程序：...

GLSA-200705-24 : libpng: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200705-24 libpng: Denial of Service Mats Palmgren fixed an error in file pngrutil.c in which the trans array might be not allocated because of images with a bad tRNS chunk CRC value. Impact : A remote attacker could craft an image...

DNS RPC analysis-vulnerability warning-the black bar safety net

Author: cloud Shu Date: 2007-04-27 http://www.ph4nt0m.org According to the security Bulletin for the vulnerability description, vulnerability occurs in the dns. exe program in the DnssrvQuery Function, This function is an RPC function, allows clients to make remote calls. First with IDA on dns. e...

McAfee e-Business Server无效数据长度拒绝服务漏洞

McAfee e-Business Server用于为存储和共享文档的企业和个人提供透明加密。 McAfee e-Business Server在处理畸形的认证请求时存在漏洞，远程攻击者可能利用此漏洞导致服务器崩溃。 如果攻击者在认证到McAfee e-Business Server期间发送了畸形认证报文的话就会导致服务器崩溃。收到报文后服务器会读取其长度，然后试图从缓冲区读取该长度的字节。如果攻击者能够指定很大的长度值但发送了很小的报文，就会导致服务器读取到所映射堆内存之外，触发无法处理的异常，管理服务器会崩溃。 0 McAfee E-Business Server 8.5.1.101...

GLSA-200704-15 : MadWifi: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200704-15 MadWifi: Multiple vulnerabilities The driver does not properly process Channel Switch Announcement Information Elements, allowing for an abnormal channel change. The ieee80211input function does not properly handle AUTH...

MadWifi: Multiple vulnerabilities

Background The MadWifi driver provides support for Atheros based IEEE 802.11 Wireless Lan cards. Description The driver does not properly process Channel Switch Announcement Information Elements, allowing for an abnormal channel change. The ieee80211input function does not properly handle AUTH...

Sami HTTP Server 2.0.1 - POST Denial of Service

usr/bin/python import socket print "-------------------------------------------------------------------------" print " Sami HTTP Server 2.0.1 POST request Denial of Service" print " url: http://www.karjasoft.com" print " author: shinnai" print " mail: shinnaiatautisticidotorg" print " site:...

Sami HTTP Server 2.0.1 POST Request Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================================= Sami HTTP Server 2.0.1 POST Request Denial of Service Exploit ============================================================= usr/bin/python import socket print...

Sami HTTP Server 2.0.1 - POST Denial of Service

Sami HTTP Server 2.0.1 - POST Denial of Service usr/bin/python import socket print "-------------------------------------------------------------------------" print " Sami HTTP Server 2.0.1 POST request Denial of Service" print " url: http://www.karjasoft.com" print " author: shinnai" print " mai...

Debian DSA-1137-1 : tiff - several vulnerabilities

Tavis Ormandy of the Google Security Team discovered several problems in the TIFF library. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2006-3459 Several stack-buffer overflows have been discovered. - CVE-2006-3460 A heap overflow vulnerability in the...

USN-2-1: xpdf vulnerabilities

Chris Evans discovered several integer overflow vulnerabilities in xpdf, a viewer for PDF files. The Common UNIX Printing System CUPS also uses the same code to print PDF files. In either case, these vulnerabilities could be exploited by an attacker by providing a specially crafted PDF file which...