freeradius -- denial-of-service vulnerability

A remote attacker may be able to crash the freeRADIUS Server due to three independant bugs in the function which does improper checking values while processing RADIUS attributes...

CVE-2003-0145

CVE-2003-0145 : In tcpdump before 3.7.2, the RADIUS attribute handling can fail to process unknown attributes, allowing remote attackers to cause a denial of service via an infinite loop. This is evidenced by the CVE record and related entries (e.g., Debian/OpenVAS advisories). Upgrade to tcpdump...

CVE-2003-0145

Unknown vulnerability in tcpdump before 3.7.2 related to an inability to "Handle unknown RADIUS attributes properly," allows remote attackers to cause a denial of service infinite loop, a different vulnerability than CAN-2003-0093...

GLSA-200407-16 : Linux Kernel: Multiple DoS and permission vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200407-16 Linux Kernel: Multiple DoS and permission vulnerabilities The Linux kernel allows a local attacker to mount a remote file system on a vulnerable Linux host and modify files' group IDs. On 2.4 series kernels this...

Linux Kernel: Multiple DoS and permission vulnerabilities

Background The Linux kernel is responsible for managing the core aspects of a GNU/Linux system, providing an interface for core system applications as well as providing the essential structure and capability to access hardware that is needed for a running system. Description The Linux kernel allo...

RHEL 2.1 : tcpdump (RHSA-2003:151)

Updated tcpdump packages that fix an infinite loop vulnerability and drop privileges on startup are now available. Tcpdump is a command-line tool for monitoring network traffic. A vulnerability exists in tcpdump before 3.7.2 and is related to an inability to handle unknown RADIUS attributes...

CVE-2003-0145

Unknown vulnerability in tcpdump before 3.7.2 related to an inability to "Handle unknown RADIUS attributes properly," allows remote attackers to cause a denial of service infinite loop, a different vulnerability than CAN-2003-0093...

DEBIAN-CVE-2003-0145

Unknown vulnerability in tcpdump before 3.7.2 related to an inability to "Handle unknown RADIUS attributes properly," allows remote attackers to cause a denial of service infinite loop, a different vulnerability than CAN-2003-0093...

CVE-2003-0145

Unknown vulnerability in tcpdump before 3.7.2 related to an inability to "Handle unknown RADIUS attributes properly," allows remote attackers to cause a denial of service infinite loop, a different vulnerability than CAN-2003-0093...

CVE-2002-1495

Cross-site scripting XSS vulnerability in JAWmail 1.0-rc1 allows remote attackers to insert arbitrary script or HTML via 1 attached file names in the Read Mail feature, 2 text/html mails that are displayed in a pop-up window, and 3 certain malicious attributes within otherwise safe tags, such as...

Buffer overflow in Microsoft Windows Shell

Overview A remotely exploitable buffer overflow exists in the Microsoft Windows Shell. This buffer overflow is present in all versions of Windows XP, but it is not present in other versions of Windows. Description There is a buffer overflow in the Microsoft Windows Shell. The Shell provides the...

IRC Daemon Version Detection

This plugin determines the version of the IRC daemon. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11156; scriptversion"$Revision: 1.15 $"; scriptcvsdate"$Date: 2016/01/08 15:38:43 $"; scriptnameenglish:"IRC Daemon Version Detection"; scriptsummaryenglish:"IRCD...

Xoops 1.3.5 - Private Message System Font Attributes HTML Injection

Xoops 1.3.5 - Private Message System Font Attributes HTML Injection source: https://www.securityfocus.com/bid/6344/info Xoops includes a Private Message System for users, so that they may send messages to one another. HTML tags used for font attributes are not sufficiently filtered of malicious...

MS02-025: Exchange 2000 Exhaust CPU Resources (320436)

The remote host is running Exchange Server 2000. The remote version of this software contains a flaw that allows an attacker to cause a temporary denial of service. To do this, the attacker needs to send an email message with malformed attributes. CPU utilization will spike at 100% until the...

Geeklog 1.3.5 - HTML Attribute Cross-Site Scripting

Geeklog 1.3.5 - HTML Attribute Cross-Site Scripting source: https://www.securityfocus.com/bid/5270/info A cross site scripting vulnerability has been reported for Geeklog. Reportedly, Geeklog does not properly sanitize user supplied input before being included when posting comments or writing...

CVE-2002-0045

slapd in OpenLDAP 2.0 through 2.0.19 allows local users, and anonymous users before 2.0.8, to conduct a "replace" action on access controls without any values, which causes OpenLDAP to delete non-mandatory attributes that would otherwise be protected by ACLs...

WU-IMAPd 2000/2001 - Partial Mailbox Attribute Remote Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/4713/info Wu-imapd is vulnerable to a buffer overflow condition. This has been reported to occur when a valid user requests partial mailbox attributes. Exploitation may result in the execution of arbitrary code as the server process. An attacker may al...

WU-IMAPd 20002001 - Partial Mailbox Attribute Remote Buffer Overflow (1)

WU-IMAPd 20002001 - Partial Mailbox Attribute Remote Buffer Overflow 1 // source: https://www.securityfocus.com/bid/4713/info Wu-imapd is vulnerable to a buffer overflow condition. This has been reported to occur when a valid user requests partial mailbox attributes. Exploitation may result in th...

SSH Protocol Versions Supported

This plugin determines the versions of the SSH protocol supported by the remote SSH daemon. TRUSTED...

Multiple implementations of the RADIUS protocol do not adequately validate the vendor-length of the vendor-specific attributes

Overview Various RADIUS servers and clients permit the passing of vendor-specific and user-specific attributes. Several implementations of RADIUS fail to check the Vendor-Length of the Vendor-Specific attribute. It's possible to cause a denial of service against RADIUS servers with a malformed...