63 matches found
Дырки в клиентских утилитах под BeOS
Дырки в различных клиентских утилитах...
Kenny Carruthers Postmaster 1.0 Buffer Overflow Vulnerability
Description Postmaster is a GUI based email client for the BeOS platform. In the event that Postmaster receives an email containing a URL consisting of over 512 bytes, the application will crash when attempting to create a link within the body of the message. Postmaster will continue to crash upo...
beos vulnerabilities
This advisory was actually written by me back in febuary this year, only to be misplaced and forgotten about until now. Some of the applications listed, most noteably baxter and the other irc clients, were patched earlier this year as a result of me informing the relevant developers. These...
Joe Kloss RobinHood 1.1 - Remote Buffer Overflow
Joe Kloss RobinHood 1.1 - Remote Buffer Overflow source : https://www.securityfocus.com/bid/1944/info RobinHood is a HTTP/1.1 web server based upon libHTTP and is designed for the BeOS platform. Improper bounds checking exists in code that handles requests RHCWindow.cpp and RHLogger.cpp. The...
CVE-2000-0279
BeOS allows remote attackers to cause a denial of service via malformed packets whose length field is less than the length of the headers...
CVE-2000-0463
BeOS 5.0 is affected by CVE-2000-0463. The vulnerability allows remote denial of service via fragmented TCP packets, as described in the CVE entry. The connected documents corroborate the BeOS 5.0 DoS impact but do not provide additional technical details, affected subcomponents, exploit vectors,...
CVE-2000-0463
BeOS 5.0 allows remote attackers to cause a denial of service via fragmented TCP packets...
CVE-2000-0279
CVE-2000-0279 affects BeOS. A remote attacker can cause denial of service by sending malformed network packets whose length field is shorter than the headers. The available details in connected documents reiterate this description with no vendor/version-specific remediation or fix information pro...
[JOLT2] Remote Denial of Service against Be/OS.
AUX Technologies - Brazil. Security Advisory. Advisory: JOLT2 Remote Denial of Service against Be/OS. Release Date: Jun 1, 2000. Status: No fix yet. Vulnerable version: Be/OS Personal 5.0 build feb 212000 4:43:00. Shoutz: AUX aghi, obiwan ksyms and awgnantifork. Description: If someone run jolt2...
Серьезный DoS против BeOS
Большое количество некорректно смещенных фрагментированных TCP-пакетов вызывает крах системы...
CVE-2000-0463
BeOS 5.0 allows remote attackers to cause a denial of service via fragmented TCP packets...
BeOS 5.0 - TCP Fragmentation Remote Denial of Service
source: https://www.securityfocus.com/bid/1222/info BeOS is vulnerable to a remote TCP fragmentation attack that will crash the target system, requiring a reboot. root@localhost isic-0.05 ./tcpsic -s 1.1.1.1 -d 10.0.1.46 -r 31337 -F100 -V0 -I0 -T0 -u0 -t0 Compiled against Libnet 1.0.1b Installing...
BeOS 5.0 - TCP Fragmentation Remote Denial of Service
BeOS 5.0 - TCP Fragmentation Remote Denial of Service source: https://www.securityfocus.com/bid/1222/info BeOS is vulnerable to a remote TCP fragmentation attack that will crash the target system, requiring a reboot. root@localhost isic-0.05 ./tcpsic -s 1.1.1.1 -d 10.0.1.46 -r 31337 -F100 -V0 -I0...
BeOS syscall bug
Summary: BeOS crashes when system call with invalid parameters is issued. Details: When using direct kernel calls through int 0x25 not libroot.so functions BeOS dies on most system calls with invalid parameters/stack. Allthough Be has registered this bug before R5.0, it is present in R5.0, and is...
Локальная DoS против BeOS
Прямое обращение к функциям ядра через прерывание 0x25 с некорректным аргументом приводит к краху системы...
CVE-2000-0276
BeOS 4.5 and 5.0 allow local users to cause a denial of service via malformed direct system calls using interrupt 37...
Be BeOS 4.55.0 - Invalid System Call
Be BeOS 4.55.0 - Invalid System Call source: https://www.securityfocus.com/bid/1098/info A direct system call containing invalid parameters through int 0x25 will cause the BeOS to crash. Reboot of the machine is required in order to regain normal functionality...
Be BeOS 4.5/5.0 - Invalid System Call
source: https://www.securityfocus.com/bid/1098/info A direct system call containing invalid parameters through int 0x25 will cause the BeOS to crash. Reboot of the machine is required in order to regain normal functionality...
beos.dos.txt
Problem: It is possible to crash the BeOS networking process. Discussion: The BeOS networking stack crashes when certain malformed packets are sent to it. This document explains two such packets. The first is an IP packet with the protocol field set to TCP. If the IP length field is set to be...