VMSA-2006-0010 - SSL sessions not authenticated by VC Clients

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2006-0010 Synopsis: SSL sessions not authenticated by VC Clients Patch URL:http://www.vmware.com/download/vi/vc-201-200611-patch.html...

D-Link DWL-G132 Wireless Driver Beacon Rates Overflow Exploit (meta)

No description provided by source. require 'msf/core' module Msf class Exploits::Windows::Driver::DLinkDWLG132WiFiRates Msf::Exploit::Remote include Exploit::Lorcon include Exploit::KernelMode def initializeinfo = superupdateinfoinfo, 'Name' = 'D-Link DWL-G132 Wireless Driver Beacon Rates...

bind9 -- Denial of Service in named(8)

Problem Description For a recursive DNS server, a remote attacker sending enough recursive queries for the replies to arrive after all the interested clients have left the recursion queue will trigger an INSIST failure in the named8 daemon. Also for a recursive DNS server, an assertion failure ca...

CVE-2006-4357: Undefined Security Weakness

PHP remote file inclusion vulnerability in clients/index.php in Diesel Smart Traffic allows remote attackers to execute arbitrary PHP code via a URL in the src parameter...

Asterisk IAX2 VoIP PBX and multiple IAX clients DoS

DoS on IAX2 channel processing...

CVE-2006-2707

Secure Elements Class 5 AVR server aka C5 EVM before 2.8.1 does not validate the peer certificate when obtaining an update, which could allow remote attackers to distribute malicious updates to clients...

CVE-2006-2707

Secure Elements Class 5 AVR server aka C5 EVM before 2.8.1 does not validate the peer certificate when obtaining an update, which could allow remote attackers to distribute malicious updates to clients...

CVE-2006-2471: Undefined Security Weakness

Multiple vulnerabilities in BEA WebLogic Server 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 leak sensitive information to remote attackers, including 1 DNS and IP addresses to address to T3 clients, 2 internal sensitive information using GetIORServlet, 3 certain "server details" in...

[Full-disclosure] Novell NDPS Remote Vulnerability (Server & Client)

Summary: There's an integer overflow present that affects Novell Windows clients and Novell Netware server and Novell Open Enterprise server. Impact: Remote, unauthenticated, super-user privileges. Affected software: Novell Netware All versions Novell Open Enterprise Server All NetWare based...

FreeBSD : openvpn -- multiple TCP clients connecting with the same certificate at the same time can crash the server (5ad3e437-e527-4514-b9ed-280b2ca1a8c9)

James Yonan reports : If two or more client machines try to connect to the server at the same time via TCP, using the same client certificate, and when --duplicate-cn is not enabled on the server, a race condition can crash the server with 'Assertion failed at mtcp.c:411' %NASLMINLEVEL 70300 C...

FreeBSD : openvpn -- denial of service: undecryptable packet from authorized client can disconnect unrelated clients (d1c39c8e-05ab-4739-870f-765490fa2052)

James Yonan reports : If the client sends a packet which fails to decrypt on the server, the OpenSSL error queue is not properly flushed, which can result in another unrelated client instance on the server seeing the error and responding to it, resulting in disconnection of the unrelated client...

Update Protection against Microsoft Exchange Vulnerability (MS06-019)

A vulnerability exists in Microsoft Exchange Server that could allow an attacker to take complete control of the affected system. To exploit the vulnerability, an attacker would have to construct a specially crafted message that could potentially allow remote code execution when an Exchange Serve...

JVN#84775942 Multiple email clients vulnerable to directory traversal due to inappropriate unicode handling

Impact Actual impact could differ depending on the email clients though, an attacker coulld possibly forge a file name or a email client could handle a file inappropriately which may result in a file being overwritten or an arbitray file being created and saved in an arbitrary directory. Solution...

Quake 3 Engine 1.32b R_RemapShader() Remote Client BoF Exploit

Exploit for linux platform in category remote exploits ============================================================== Quake 3 Engine 1.32b RRemapShader Remote Client BoF Exploit ============================================================== // remapthis.c - "RRemapShader" q3 engine 1.32b client...

Quake 3 Engine 1.32b - 'R_RemapShader()' Remote Client Buffer Overflow

// remapthis.c - "RRemapShader" q3 engine 1.32b client remote bof exploit // by landser - landser at hotmail.co.il // // this code works as a preloaded shared library on a game server, // it hooks two functions on the running server: // svcdirectconnect that is called when a client connects, // a...

NeonResponder-5.4.txt

Author: Stefan Lochbihler Date: 17.04.2006 Affected Software: Neon Responder for Windows Software 5.4 Software http://www.neon.com/NRwin.shtml Attack: Dos Overview: Neon Responders greatly enhance the functionality of LANsurveyor by providing LANsurveyor with direct access to computers with the...

OpenTTD <= 0.4.7 (multiple vulnerabilities) Denial of Service Exploit

Exploit for multiple platform in category dos / poc ===================================================================== OpenTTD = 0.4.7 multiple vulnerabilities Denial of Service Exploit ===================================================================== Luigi Auriemma Application: OpenTTD...

OpenTTD 0.4.7 - Multiple Vulnerabilities

Luigi Auriemma Application: OpenTTD http://www.openttd.org Versions: = 0.4.7 Platforms: Windows, nix, BSD, Mac and others Bugs: A program termination through big error number B broadcast clients disconnection in multiplayer menu Exploitation: A remote, versus server and client in-game B remote,...

[Full-disclosure] Format string in Doomsday 1.8.6

Luigi Auriemma Application: Doomsday engine http://www.doomsdayhq.com http://deng.sourceforge.net Versions: = 1.8.6 and current SVN 1.9.0 Platforms: Windows, nix, BSD, Mac and others Bug: format string bug in ConMessage and ConPrintf Exploitation: remote, versus server and clients Date: 03 Apr 20...

Multiple vulnerabilities in Cube engine 2005_08_29

Luigi Auriemma Application: Cube engine http://www.cubeengine.com Versions: = 20050829 Platforms: Windows, nix, BSD and MacOS Bugs: A sgetstr buffer-overflow B invalid memory access C clients crash through invalid map Exploitation: remote, versus both server and clients Date: 06 Mar 2006 Author:...