Design/Logic Flaw

setup.exe before 2.573.2.3 in Cygwin does not properly verify the authenticity of packages, which allows remote Cygwin mirror servers or man-in-the-middle attackers to execute arbitrary code via a package list containing the MD5 checksum of a Trojan horse package...

CVE-2008-3323

setup.exe before 2.573.2.3 in Cygwin does not properly verify the authenticity of packages, which allows remote Cygwin mirror servers or man-in-the-middle attackers to execute arbitrary code via a package list containing the MD5 checksum of a Trojan horse package...

CVE-2008-3323: Improper Input Validation

setup.exe before 2.573.2.3 in Cygwin does not properly verify the authenticity of packages, which allows remote Cygwin mirror servers or man-in-the-middle attackers to execute arbitrary code via a package list containing the MD5 checksum of a Trojan horse package...

DEBIAN-CVE-2008-1353

zabbixagentd in ZABBIX 1.4.4 allows remote attackers to cause a denial of service CPU and connection consumption via multiple vfs.file.cksum commands with a special device node such as /dev/urandom or /dev/zero...

Zabbix (zabbix_agentd) denial of service

Hello, There is some DoS issue with zabbix which can be exploited by a malicious user from an authorized host. ------------------------ An attacker on the authorized host can cause the zabbixagentd to hang, overconsuming CPU resources. This can be triggered by sending the agent a file checksum...

Zabbix 1.1x/1.4.x - File Checksum Request Denial of Service

source: https://www.securityfocus.com/bid/28244/info ZABBIX is prone to a denial-of-service vulnerability when handling specially crafted requests for file checksums. An attacker can exploit this issue to cause the affected application to stop responding, denying service to legitimate users. echo...

暴风影音3.7.11.13 远程拒绝服务漏洞

No description provided by source. ifndef WIN32LEANANDMEAN define WIN32LEANANDMEAN endif include winsock2.h include ws2tcpip.h include stdio.h pragma commentlib, "ws232" // Set the packing to a 1 byte boundary include pshpack1.h // // Define the IPv4 header. Make the version and length field one...

WinRAR 7z-compressed packet processing overflow analysis and use-vulnerability and early warning-the black bar safety net

This article has been published in the hacker line of Defense of the 2 0 0 7 year 4 monthly. The author and the hacker line of Defense on the retention of copyright, reproduced, please indicate the original source. For the reader: overflow of lovers Pre-knowledge: Assembly language, buffer overfl...

Code injection

Distributed Checksum Clearinghouse DCC 1.3.65 allows remote attackers to cause a denial of service crash via a "SOCKS flood."...

CVE-2007-5481

Distributed Checksum Clearinghouse DCC 1.3.65 allows remote attackers to cause a denial of service crash via a "SOCKS flood."...

CVE-2007-5481

Distributed Checksum Clearinghouse DCC 1.3.65 allows remote attackers to cause a denial of service crash via a "SOCKS flood."...

CVE-2007-5481

CVE-2007-5481 affects Distributed Checksum Clearinghouse (DCC) 1.3.65. The vulnerability allows remote attackers to cause a denial of service (crash) via a "SOCKS flood" over the network. The provided documents do not include exploitation details or a listed remediation/patch.

CVE-2007-5481: Undefined Security Weakness

Distributed Checksum Clearinghouse DCC 1.3.65 allows remote attackers to cause a denial of service crash via a "SOCKS flood."...

CVE-2007-3849: Undefined Security Weakness

Red Hat Enterprise Linux RHEL 5 ships the rpm for the Advanced Intrusion Detection Environment AIDE before 0.13.1 with a database that lacks checksum information, which allows context-dependent attackers to bypass file integrity checks and modify certain files...

Rebase aide to 0.13.1

Red Hat Enterprise Linux RHEL 5 ships the rpm for the Advanced Intrusion Detection Environment AIDE before 0.13.1 with a database that lacks checksum information, which allows context-dependent attackers to bypass file integrity checks and modify certain files...

Moderate: Red Hat Security Advisory: aide security update

An updated aide package that fixes various bugs is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Advanced Intrusion Detection Environment AIDE is a file integrity checker and intrusion detection...

Design/Logic Flaw

eyeOS uses predictable checksum values in the checknum parameter for access control, which allows remote attackers to register many accounts via doCreateUser actions, add many eyeBoard messages via addMsg actions, and cause a denial of service or conduct certain unauthorized activities, by guessi...

CVE-2007-4609

eyeOS uses predictable checksum values in the checknum parameter for access control, which allows remote attackers to register many accounts via doCreateUser actions, add many eyeBoard messages via addMsg actions, and cause a denial of service or conduct certain unauthorized activities, by guessi...

CVE-2007-4609

eyeOS is affected by CVE-2007-4609 due to predictable checksum values in the checknum parameter used for access control. This allows remote attackers to abuse doCreateUser to register many accounts and add many eyeBoard messages via addMsg, potentially causing denial of service or enabling unauth...

CVE-2007-4609

eyeOS uses predictable checksum values in the checknum parameter for access control, which allows remote attackers to register many accounts via doCreateUser actions, add many eyeBoard messages via addMsg actions, and cause a denial of service or conduct certain unauthorized activities, by guessi...