3544 matches found
Counter Strike 2D <= 0.1.0.1 - Denial of Service Vulnerability
No description provided by source. / Counter Strike 2D DoS Affected versions: 0.1.0.1 and prior CS2D Developer: http://www.cs2d.com/ by Iman Karim [email protected] http://home.inf.fh-rhein-sieg.de/ikarim2s/ Written in Borland C++ Builder 6 20.09.2005 / include winsock.h...
Dnsmasq < 2.50 - Heap Overflow & Null pointer Dereference Vulns
No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server 1. Advisory Information Title: Dnsmasq Heap Overflow and...
FreeBSD 2.x,HP-UX 9/10/11,kernel 2.0.3,Windows NT 4.0/Server 2003,NetBSD 1 loopback (land.c) DoS (3)
No description provided by source. source: http://www.securityfocus.com/bid/2666/info A number of TCP/IP stacks are vulnerable to a loopback condition initiated by sending a TCP SYN packet with the source address and port spoofed to equal the destination source and port. When a packet of this sor...
iOS FTP On The Go 2.1.2 - HTTP Remote DoS
No description provided by source. !/usr/bin/python Apple Iphone/Ipod - FTP On The Go 2.1.2 - HTTP Remote Denial-of-Service Attack Found by: TecR0c Homepage: http://www.ftponthego.com/ Download: From the Apple App Store - http://app2.it/topapp/286479936 Tested on: IPhone 3G - firmware 3.1.2...
Menasoft SPHEREserver 0.99 Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4258/info Menasoft SPHEREserver .99 is an online role playing game server. It is vulnerable to a denial of service; multiple connections to the server can be made from a single machine, exhausting available connections an...
OpenSLP 1.2.1 & < 1647 trunk - Denial of Service Exploit
No description provided by source. !/usr/bin/python Title: OpenSLP DoS Author: Nicolas Gregoire @AgarriFR CVE: 2010-3609 Software download: http://www.openslp.org/download.html Version: v1.2.1 and trunk before revision 1647 Tested on: Linux Ubuntu 10.04, VMware ESX 4.0 Notes: It affects some othe...
McMurtrey/Whitaker & Associates Cart32 3.0/3.1/3.5 DoS Vulnerability
No description provided by source. source : http://www.securityfocus.com/bid/1934/info Cart32 is a shopping cart application for e-commerce enabled sites. Cart32 is subject to a denial of service. When requesting a specially formed URL the application will cause the CPU utilization to spike to...
VMCPlayer 1.0 - Denial of Service
No description provided by source. done by BraniX [email protected] www.hackers.org.pl found: 2011.03.22 published: 2011.03.22 tested on: Windows XP SP3 Home Edition App: VMCPlayer 1.0 App Url: http://files.videomobileconverter.com/vmcplayer.exe VMCPlayer.exe MD5:...
MediaHouse Software Statistics Server 4.28/5.1 "Server ID" Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/734/info The web interface for Statistics Server contains an unchecked buffer which accepts input from the Server ID field of the login webpage. While the login webpage has a 16 character restriction, this is easily...
Ascend R 4.5 Ci12 Denial of Service Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/1855/info A vulnerability exists in the operating system of some Ascend routers. If an invalid TCP packet of zero length is sent to the administration port of Ascend Routers 4.5Ci12 or earlier, the result will be a crash...
Firefox 3.6.3 Fork Bomb DoS
No description provided by source. html script var a = 'javascript:htmlheadtitleDrIDE\s FireFox Fork Bomb!/title/headbody onunload=\javascript:window.openwindow.location;window.openwindow.location\ onload=\javascript:window.openwindow.location;window.openwindow.location\/body/html'; loop1;...
Fedora 19 : dovecot-2.2.13-1.fc19 (2014-6331)
Fixed a DoS attack against imap/pop3-login processes. If SSL/TLS handshake was started but wasn't finished, the login process attempted to eventually forcibly disconnect the client, but failed to do it correctly. This could have left the connections hanging arond for a long time. Affected Dovecot...
[oss-security] CVE request: PowerDNS in default configuration is vulnerable to DoS attack
It was found 1 that in default configuration PowerDNS is allowed to consume more file descriptors than is available for a default installation of many Linux distributions. Default configuration is: 2 threads / 2048 max-mthreads, which leads to a theoretical FD consumption of 4096. Default FD limi...
squid DoS
DoS via Range: request if SSL-Bump is allowed...
ZTE TP-Link RomPager - Denial of Service
ZTE TP-Link RomPager - Denial of Service !/usr/bin/env python -- coding: utf-8 -- Exploit Title: ZTE and TP-Link RomPager DoS Exploit Date: 10-05-2014 Server Version: RomPager/4.07 UPnP/1.0 Tested Routers: ZTE ZXV10 W300 TP-Link TD-W8901G TP-Link TD-W8101G TP-Link TD-8840G Firmware:...
openSUSE Security Update : libopenssl-devel (openSUSE-SU-2012:0083-1)
Various security vulnerabilities have been fixed in openssl : - DTLS plaintext recovery attack CVE-2011-4108 - uninitialized SSL 3.0 padding CVE-2011-4576 - malformed RFC 3779 data can cause assertion failures CVE-2011-4577 - SGC restart DoS attack CVE-2011-4619 - invalid GOST parameters DoS atta...
openSUSE Security Update : hostapd (openSUSE-SU-2012:1371-1)
This patch validated the message length of EAP-TLS to avoid the potential DoS attack %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-718. The text description of this plugin is C...
Linux Kernel Vulnerable to Privilege Escalation and DoS Attack
Multiple flaws have been identified in Linux Kernel and related software could allow hackers to hack your Linux machines, shared hosting and websites hosted on them. PRIVILEGE ESCALATION VULNERABILITY IN LINUX KERNEL A privilege escalation vulnerability has been identified in the widely used Linu...
FreeBSD : OpenSSL -- multiple vulnerabilities (5ac53801-ec2e-11e3-9cf3-3c970e169bc2)
The OpenSSL Project reports : An attacker using a carefully crafted handshake can force the use of weak keying material in OpenSSL SSL/TLS clients and servers. This can be exploited by a Man-in-the-middle MITM attack where the attacker can decrypt and modify traffic from the attacked client and...
OpenSSL Vulnerable to Man-in-the-Middle Attack and Several Other Bugs
Remember OpenSSL Heartbleed vulnerability? Several weeks ago, the exposure of this security bug chilled the Internet, revealed that millions of websites were vulnerable to a flaw in the OpenSSL code which they used to encrypt their communications. Now once again the OpenSSL Foundation has issued...