Ubuntu 4.10 : gaim vulnerabilities (USN-8-1)

A buffer overflow and two remote crashes were recently discovered in gaim's MSN protocol handler. An attacker could potentially execute arbitrary code with the user's privileges by crafting and sending a particular MSN message. Note that Tenable Network Security has extracted the preceding...

Ubuntu 5.04 : wget bug fix (USN-145-2)

USN-145-1 fixed several vulnerabilities in wget. However, Ralph Corderoy discovered some regressions that caused wget to crash in some cases. The updated version fixes this flaw. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security...

Mandrake Linux Security Advisory : libungif (MDKSA-2005:207)

Several bugs have been discovered in the way libungif decodes GIF images. These allow an attacker to create a carefully crafted GIF image file in such a way that it could cause applications linked with libungif to crash or execute arbitrary code when the file is opened by the user. The updated...

gpdf security update

CentOS Errata and Security Advisory CESA-2006:0177 An updated gpdf package that fixes several security issues is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. gpdf is a GNOME based viewer for...

Multiple Sun Solaris vulnerabilities

Different bugs lead to system crash and privilege escalation...

milter-bogom -- headerless message crash

Juan J. Marítnez reports: The milter crashes while processing a headerless message Impact: bogom crashes and sendmail moves it to error state...

Microsoft Windows Metafile - mtNoObjects Denial of Service (MS05-053)

Microsoft Windows Metafile - mtNoObjects Denial of Service MS05-053 / Author: Winny Thomas Pune, INDIA The crafted metafile WMF from this code when viewed in explorer crashes it. The issue is seen when the field 'mtNoObjects' in the Metafile header is set to 0x0000. The code was tested on Windows...

MS Windows Metafile (mtNoObjects) Denial of Service Exploit (MS05-053)

Exploit for unknown platform in category dos / poc ====================================================================== MS Windows Metafile mtNoObjects Denial of Service Exploit MS05-053 ====================================================================== / Author: Winny Thomas Pune, INDIA Th...

Generic SMTP overflows

The remote SMTP server crashes when it is send a command with a too long argument. A cracker might use this flaw to kill this service or worse, execute arbitrary code on your server. OpenVAS Vulnerability Test $Id: smtpoverflows.nasl 6046 2017-04-28 09:02:54Z teissa $ Description: Generic SMTP...

AnalogX SimpleServer:WWW DoS

It was possible to kill the remote web server by sending 640 @ character to it. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Generic SMTP overflows

The remote SMTP server crashes when it is send a command with a too long argument. SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

GLSA-200510-25 : Ethereal: Multiple vulnerabilities in protocol dissectors

The remote host is affected by the vulnerability described in GLSA-200510-25 Ethereal: Multiple vulnerabilities in protocol dissectors There are numerous vulnerabilities in versions of Ethereal prior to 0.10.13, including: The SLIM3 and AgentX dissectors could overflow a buffer CVE-2005-3243...

ethereal_slimp3_bof.py.txt

Ethereal SLIMP3 Remote Buffer Overflow PoC Bug Discoverd by Vendor?2005-10-19 Coded by Sowhat http://secway.org 2005-10-20 This PoC will crash the Ethereal Tested with Ethereal 0.10.12, WinPcap 3.1 beta4, WinXP SP2 For educational purpose only, Use at your own risk! Version 0.9.1 to 0.10.12...

PHP Apache configuration files DoS

Server crashes on invalid .htaccess 'phpvalue session.savepath' value...

MultiTheftAuto 0.5 - Multiple Vulnerabilities

// source: https://www.securityfocus.com/bid/14941/info MultiTheftAuto is prone to multiple vulnerabilities. The following issues were identified: The first issue can allow an attacker to gain unauthorized access to an administrative file. The second issue can allow an attacker to trigger a crash...

Fedora Core 3 : openmotif-2.2.3-9.FC3.1 (2005-808)

Mon Apr 4 2005 Thomas Woerner 2.2.3-9.FC3.1 - fixed possible libXpm overflows 151642 - Upstream Fix: Multiscreen mode - Upstream Fix: Crash when restarting by a session manager motifzone1193 - Upstream Fix: Crash when duplicating a window menu containing f.circleup motifzone1202 - fixed divide by...

Fedora Core 2 : gaim-1.1.3-1.FC2 (2005-159)

Sat Feb 19 2005 Warren Togami 1:1.1.3-1.FC2 - FC2 - Fri Feb 18 2005 Warren Togami 1:1.1.3-2 - 1.1.3 including two security fixes CVE-2005-0472 Client freezes when receiving certain invalid messages CVE-2005-0473 Client crashes when receiving specific malformed HTML Note that Tenable Network...

[SA16463] OpenVPN Multiple DoS Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

GLSA-200507-27 : Ethereal: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200507-27 Ethereal: Multiple vulnerabilities There are numerous vulnerabilities in versions of Ethereal prior to 0.10.12, including: The SMB dissector could overflow a buffer or exhaust memory CAN-2005-2365. iDEFENSE discovered th...

ethereal -- multiple protocol dissectors vulnerabilities

An Ethreal Security Advisories reports: Our testing program has turned up several more security issues: The LDAP dissector could free static memory and crash. The AgentX dissector could crash. The 802.3 dissector could go into an infinite loop. The PER dissector could abort. The DHCP dissector...