DEBIAN-CVE-2011-3369

The addconversation function in conversations.c in EtherApe before 0.9.12 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an RPC packet, related to the getrpc function in decodeproto.c...

OnStar to Track Speed, Location of Cars, Even After Users Opt Out

Cars with OnStar’s built-in technology will begin having their where-abouts monitored in December, even if their owners opt-out of the service, according to a new privacy statement issued by the vehicle navigation and emergency notification service this week. The document, available here in .PDF...

The Infosec Industry Isn't Evolving

I engaged in a long twitter conversation with Daniel Kennedy the other day, and it made me realize that I have little faith in the information security industry right now. The industry does not seem to be evolving as fast as the threats against information security are. I engaged with Daniel afte...

MSN Messenger视频对话堆溢出漏洞(MS07-054)

BUGTRAQ ID: 25461 CVECAN ID: CVE-2007-2931 MSN Messenger是微软发布的非常流行的即时通讯聊天工具。 MSN VIDEO处理用户请求时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 MSN VIDEO的协议分为两个大部分：webcam和video conversation，其中webcam带有一个9个字节的头： （UDP header）9d 49 e1 8e 4a 09 be 09 0a payload 第1、2个字节代表payload长度（0x499d & 2047 = 413），后面的payload长度就为413了。...

Heap overflow

Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving video conversation handling in Web Cam and video chat sessions...

CVE-2007-2931

Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving video conversation handling in Web Cam and video chat sessions...

Cross site scripting

Cross-site scripting XSS vulnerability in Bandersnatch 0.4 allows remote attackers to inject arbitrary JavaScript via a Jabber resource name and possibly other data items, which are stored in conversation logs...

CVE-2007-3910

Cross-site scripting XSS vulnerability in Bandersnatch 0.4 allows remote attackers to inject arbitrary JavaScript via a Jabber resource name and possibly other data items, which are stored in conversation logs...

CVE-2007-3910

Bandersnatch 0.4 is affected by an XSS vulnerability (CVE-2007-3910) where remote attackers can inject arbitrary JavaScript via a Jabber resource name (and possibly other data items) that are stored in conversation logs. Multiple sources in the connected set corroborate the issue and describe the...

CVE-2007-3910

Cross-site scripting XSS vulnerability in Bandersnatch 0.4 allows remote attackers to inject arbitrary JavaScript via a Jabber resource name and possibly other data items, which are stored in conversation logs...

SOL5873 - PAM conversation stack corruption in OpenSSH - CVE-2003-0787

Information about this advisory is available at the following location: Note: This link takes you to a resource outside of AskF5, and it is possible that the information may be removed without our knowledge...

Detect talkd server port and protocol version

The remote host is running a SPDX-FileCopyrightText: 2005 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10168";...

CVE-2005-2225

Microsoft MSN Messenger allows remote attackers to cause a denial of service via a plaintext message containing the ".pif" string, which is interpreted as a malicious file extension and causes users to be kicked from a group conversation. NOTE: it has been reported that Gaim is also affected, so...

DEBIAN-CVE-2003-0787

The PAM conversation function in OpenSSH 3.7.1 and 3.7.1p1 interprets an array of structures as an array of pointers, which allows attackers to modify the stack and possibly gain privileges...

CVE-2003-0787

OpenSSH CVE-2003-0787 affects OpenSSH 3.7.1 and 3.7.1p1 where the PAM conversation function mishandles an array of structures as an array of pointers, allowing stack modification and potential privilege escalation. The linked F5 advisory acknowledges PAM conversation stack corruption but does not...

Yahoo! Messenger 4.0/5.0 - Remote Denial of Service

source: https://www.securityfocus.com/bid/8523/info It has been reported that multiple PC2Phone products are prone to a remote denial of service condition. The problem is said to occur when processing excessive data passed to the programs via a UDP packet and could result in the product crashing...