Microsoft Windows Metafile - mtNoObjects Denial of Service (MS05-053)

Microsoft Windows Metafile - mtNoObjects Denial of Service MS05-053 / Author: Winny Thomas Pune, INDIA The crafted metafile WMF from this code when viewed in explorer crashes it. The issue is seen when the field 'mtNoObjects' in the Metafile header is set to 0x0000. The code was tested on Windows...

Generic SMTP overflows

The remote SMTP server crashes when it is send a command with a too long argument. A cracker might use this flaw to kill this service or worse, execute arbitrary code on your server. OpenVAS Vulnerability Test $Id: smtpoverflows.nasl 6046 2017-04-28 09:02:54Z teissa $ Description: Generic SMTP...

AnalogX SimpleServer:WWW DoS

It was possible to kill the remote web server by sending 640 @ character to it. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Generic SMTP overflows

The remote SMTP server crashes when it is send a command with a too long argument. SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

GLSA-200510-25 : Ethereal: Multiple vulnerabilities in protocol dissectors

The remote host is affected by the vulnerability described in GLSA-200510-25 Ethereal: Multiple vulnerabilities in protocol dissectors There are numerous vulnerabilities in versions of Ethereal prior to 0.10.13, including: The SLIM3 and AgentX dissectors could overflow a buffer CVE-2005-3243...

ethereal_slimp3_bof.py.txt

Ethereal SLIMP3 Remote Buffer Overflow PoC Bug Discoverd by Vendor?2005-10-19 Coded by Sowhat http://secway.org 2005-10-20 This PoC will crash the Ethereal Tested with Ethereal 0.10.12, WinPcap 3.1 beta4, WinXP SP2 For educational purpose only, Use at your own risk! Version 0.9.1 to 0.10.12...

PHP Apache configuration files DoS

Server crashes on invalid .htaccess 'phpvalue session.savepath' value...

MultiTheftAuto 0.5 - Multiple Vulnerabilities

// source: https://www.securityfocus.com/bid/14941/info MultiTheftAuto is prone to multiple vulnerabilities. The following issues were identified: The first issue can allow an attacker to gain unauthorized access to an administrative file. The second issue can allow an attacker to trigger a crash...

Fedora Core 3 : openmotif-2.2.3-9.FC3.1 (2005-808)

Mon Apr 4 2005 Thomas Woerner 2.2.3-9.FC3.1 - fixed possible libXpm overflows 151642 - Upstream Fix: Multiscreen mode - Upstream Fix: Crash when restarting by a session manager motifzone1193 - Upstream Fix: Crash when duplicating a window menu containing f.circleup motifzone1202 - fixed divide by...

Fedora Core 2 : gaim-1.1.3-1.FC2 (2005-159)

Sat Feb 19 2005 Warren Togami 1:1.1.3-1.FC2 - FC2 - Fri Feb 18 2005 Warren Togami 1:1.1.3-2 - 1.1.3 including two security fixes CVE-2005-0472 Client freezes when receiving certain invalid messages CVE-2005-0473 Client crashes when receiving specific malformed HTML Note that Tenable Network...

[SA16463] OpenVPN Multiple DoS Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

GLSA-200507-27 : Ethereal: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200507-27 Ethereal: Multiple vulnerabilities There are numerous vulnerabilities in versions of Ethereal prior to 0.10.12, including: The SMB dissector could overflow a buffer or exhaust memory CAN-2005-2365. iDEFENSE discovered th...

ethereal -- multiple protocol dissectors vulnerabilities

An Ethreal Security Advisories reports: Our testing program has turned up several more security issues: The LDAP dissector could free static memory and crash. The AgentX dissector could crash. The 802.3 dissector could go into an infinite loop. The PER dissector could abort. The DHCP dissector...

FreeBSD : up-imapproxy -- multiple vulnerabilities (927743d4-5ca9-11d9-a9e7-0001020eed82)

Timo Sirainen reports : There are various bugs in up-imapproxy which can crash it. Since up-imapproxy runs in a single process with each connection handled in a separate thread, any crash kills all the connections and stops listening for new ones. In 64bit systems it might be possible to make it...

CVE-2005-1791

Microsoft Internet Explorer 6 SP2 6.0.2900.2180 crashes when the user attempts to add a URI to the restricted zone, in which the full domain name of the URI begins with numeric sequences similar to an IP address. NOTE: if there is not an exploit scenario in which an attacker can trigger this...

Microsoft Internet Explorer - Multiple Stack Overflows Crashs

Microsoft Internet Explorer - Multiple Stack Overflows Crashs window.onerror=new Function"history.go0"; function btfbtf; btf; milw0rm.com 2005-05-31...

CVE-2005-1791

Microsoft Internet Explorer 6 SP2 6.0.2900.2180 crashes when the user attempts to add a URI to the restricted zone, in which the full domain name of the URI begins with numeric sequences similar to an IP address. NOTE: if there is not an exploit scenario in which an attacker can trigger this...

Multiple vulnerabilities in Yager 5.24

Luigi Auriemma Application: Yager http://www.yager-game.de Versions: = 5.24 Platforms: Windows Bugs: A nickname buffer-overflow B data block buffer-overflow C freeze caused by incomplete data block D various crashes caused by corrupted data Exploitation: remote, versus server and clients Date: 14...

HP-UX PHSS_29546 : HPSBUX0310-285 SSRT3642 Potential Security Vulnerabilities Apache web server HP-UX VVOS and Webproxy.

s700800 11.04 Virtualvault 4.6 OWS update : 1. Potential Apache web server crash when it goes into an infinite loop due to too many subsequent internal redirects and nested subrequests. VU379828 2. No de-allocation of file descriptors while servicing CGI scripts through child processes...

RHEL 2.1 / 3 : ethereal (RHSA-2005:011)

Updated Ethereal packages that fix various security vulnerabilities are now available. Ethereal is a program for monitoring network traffic. A number of security flaws have been discovered in Ethereal. On a system where Ethereal is running, a remote attacker could send malicious packets to trigge...