143 matches found
OpenSSL multiple security vulnerabilities
DoS and protocol version downgrades in client and server code, memory corruptions and information leaks in client code...
DEBIAN-CVE-2011-5280
Multiple stack-based buffer overflows in BOINC 6.13.x allow remote attackers to cause a denial of service crash via a long trickle-up to 1 client/cstrickle.cpp or 2 db/dbbase.cpp...
Oracle Linux 4 : kernel (ELSA-2009-0459)
From Red Hat Security Advisory 2009:0459 : Updated kernel packages that fix several security issues and various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain...
CVE-2013-0884
Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly load Native Client aka NaCl code, which has unspecified impact and attack vectors...
CVE-2013-0886
Google Chrome before 25.0.1364.99 on Mac OS X does not properly implement signal handling for Native Client aka NaCl code, which has unspecified impact and attack vectors...
FreeBSD UIPC socket stack overflow-vulnerability warning-the black bar safety net
!/ bin/sh fbsd-uipcsock-heap.sh, by Shaun Colley a, 29/09/11 proof-of-concept crash for the freebsd unix domain sockets heap overflow. this was tested on freebsd 8.2-RELEASE. just a PoC for now. see advisory & patches for details: http://www.securityfocus.com/archive/1/519864/30/0/threaded this P...
FreeBSD UIPC socket heap overflow proof-of-concept
Exploit for freebsd platform in category dos / poc !/bin/sh fbsd-uipcsock-heap.sh, by Shaun Colley , 29/09/11 proof-of-concept crash for the freebsd unix domain sockets heap overflow. this was tested on freebsd 8.2-RELEASE. just a PoC for now. see advisory & patches for details:...
Fedora 11 : alienarena-7.32-3.fc11 (2010-6132)
Fixes the following security issues: - By supplying various invalid parameters to the download command, it is possible to cause a DoS condition by causing the server to crash. A path ending in . or / will crash on Linux. Supplying a negative offset will cause a crash on all platforms. - Fix buffe...
Fedora 12 : alienarena-7.32-3.fc12.2 (2010-6068)
Fixes the following security issues: - By supplying various invalid parameters to the download command, it is possible to cause a DoS condition by causing the server to crash. A path ending in . or / will crash on Linux. Supplying a negative offset will cause a crash on all platforms. - Fix buffe...
CVE-2009-1886
Multiple format string vulnerabilities in client/client.c in smbclient in Samba 3.2.0 through 3.2.12 might allow context-dependent attackers to execute arbitrary code via format string specifiers in a filename...
Samba buffer overflow
Buffer overflow in receivesmbraw SMB client code...
CVE-2006-6551
PHP remote file inclusion vulnerability in libs/tucows/api/cartridges/crtTUCOWSdomains/lib/domainutils.inc.php in Tucows Client Code Suite CCS 1.2.1015 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ENVTCAHOME parameter...
CVE-2006-6551
PHP remote file inclusion vulnerability in libs/tucows/api/cartridges/crtTUCOWSdomains/lib/domainutils.inc.php in Tucows Client Code Suite CCS 1.2.1015 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ENVTCAHOME parameter...
CVE-2006-6551
The CVE-2006-6551 entry concerns a PHP remote file inclusion vulnerability in Tucows Client Code Suite (CCS) 1.2.1015 and earlier. The flaw is in libs/tucows/api/cartridges/crt_TUCOWS_domains/lib/domainutils.inc.php where an attacker can trigger RFI by supplying a URL via the _ENV[TCA_HOME] param...
Tucows Client Code Suite (CSS) <= 1.2.1015 File Include Vulnerability
Exploit for unknown platform in category web applications ===================================================================== Tucows Client Code Suite CSS $cmd=$; chomp$cmd; $xpl = LWP::UserAgent-new or die; $req =...
Tucows Client Code Suite (CSS) <= 1.2.1015 File Include Vulnerability
No description provided by source. !/usr/bin/perl Tucows Open Project --Remote File Inclusion Vulnerablity Bug Found & Exploit coded By Dr Max Virus Download:http://developer.tucows.com/code/ccs/downloads/ccs-open-1.2.1015-2006-209-1337.zip use LWP::UserAgent; $target=@ARGV0; $shellsite=@ARGV1;...
Tucows Client Code Suite (CSS) 1.2.1015 - Remote File Inclusion
!/usr/bin/perl Tucows Open Project --Remote File Inclusion Vulnerablity Bug Found & Exploit coded By Dr Max Virus Download:http://developer.tucows.com/code/ccs/downloads/ccs-open-1.2.1015-2006-209-1337.zip use LWP::UserAgent; $target=@ARGV0; $shellsite=@ARGV1; $cmdv=@ARGV2; if$target!/http:/// ||...
CVE-2006-4343
The getserverhello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service client crash via unknown vectors that trigger a null pointer dereference...
Security fix for the ALT Linux 9 package openssl1.1 version 0.9.7g-alt5
Sept. 27, 2006 Dmitry V. Levin 0.9.7g-alt5 - Applied upstream fixes for DoS bugs in ASN1 parser CVE-2006-2937, CVE-2006-2940. - Applied fix for buffer overflow in SSLgetsharedciphers, discovery and patch from Tavis Ormandy and Will Drewry of the Google Security Team CVE-2006-3738. - Applied fix f...
Security fix for the ALT Linux 8 package openssl10 version 0.9.7g-alt5
Sept. 27, 2006 Dmitry V. Levin 0.9.7g-alt5 - Applied upstream fixes for DoS bugs in ASN1 parser CVE-2006-2937, CVE-2006-2940. - Applied fix for buffer overflow in SSLgetsharedciphers, discovery and patch from Tavis Ormandy and Will Drewry of the Google Security Team CVE-2006-3738. - Applied fix f...