[NEWS] Xitami Web Server Multiple Vulnerabilities (Exploit)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

xmeasy-port-dos.txt

!/usr/bin/python XM Easy Personal FTP Server 5.4.0 PORT DoS 1 byte DoS! Elhamdulillahi Rabbil-alemin! EAX BAADF00D - bad food? : ECX BAADF00D bt ./sploit.py + Saljemo zli bafer : + Booooooooom!!!! + Finito! bt I wasn't smoking crack, ryujin gave me the red pill! : Vulnerability discovered and cod...

Fedora 8 : comix-3.6.4-6.fc8 (2008-2981)

Several security flaws are reported against comix 3.6.4. One issue is that comix uses os.popen to execute external commands without handling filenames properly. This may allow malicios users to execute arbitrary commands by opening some files with crafted names. This issue is now identified as...

Home FTP Server 1.4.5 Remote Denial of Service Exploit

No description provided by source. Discovered by 0in from DaRk-CodeRs Programming & Security Group Contact: 0indotemailatgmaildotcom Thats a very funny bug, and nobody understand how it works; When we send a python FTP retrlines function bad command and create a new connection server got DoS... o...

Galaxy FTP Server 1.0 (Neostrada Livebox DSL Router) DoS Exploit

No description provided by source. / Discovered bY 0in From DaRk-CodeRs Programming & Security Group! Contact: 0indotemailatgmaildotcom HOMEPAGE: http://dark-coders.4rh.eu DESCRIPTION: Livebox router is vulnerability to remote but from local network, because firewall working.. buffer overflow DoS...

Galaxy FTP Server 1.0 (Neostrada Livebox DSL Router) - Denial of Service

/ Discovered bY 0in From DaRk-CodeRs Programming & Security Group! Contact: 0indotemailatgmaildotcom HOMEPAGE: http://dark-coders.4rh.eu DESCRIPTION: Livebox router is vulnerability to remote but from local network, because firewall working.. buffer overflow DoS attack to FTP service. POC: /...

lighthttpd DoS

DoS on large number of connections...

Debian Security Advisory DSA 1195-1 (openssl096)

The remote host is missing an update to openssl096 announced via advisory DSA 1195-1. Multiple vulnerabilities have been discovered in the OpenSSL cryptographic software package that could allow an attacker to launch a denial of service attack by exhausting system resources or crashing processes ...

Level-One WBR-3460A Grants Root Access

Advisory: Level-One WBR-3460A Grants Root Access Risk: High Vendor Status: Vendor has not released an updated version Release Date: 08/01/2008 Last Modified: 01/01/2008 Author: Anastasios Monachos anastasiosmatgmaildotcom I Affected Products: ==================== Level-One WBR-3460A latest firmwa...

Pragma FortressSSH SSH server DoS

Multiple user-reachable assert's...

usb-blam.txt

I discovered rather inadvertently that laptops do not enjoy having their USB VCC shorted to GND one bit. It is a sure DoS, in fact if the machine has a stupid power supply, it could result in permanent damage. It is kind of scary for kiosk machines like the those ubiquitous Kodak photo centers. I...

IRC Services DoS

DoS on oversized password...

Cisco IP Phone 7940 (Reboot) Denial of Service Exploit

No description provided by source. !/usr/bin/perl This is made for trashing cisco 7940 ip phones. kokanin made/discovered this. A packetcount of 1000 and a packetdelay of 0.002 sent to port 80 makes my phone reboot - play with the settings and stuff. PRIVATE PRIVATE PRIVATE!!!...

JVN#77414947 Cybozu Office denial of service (DoS) vulnerability

Cybozu Office, web-based groupware, is vulnerable to a denial of service DoS attack because it fails to properly handle specially crafted HTTP requests. Impact A remote attacker can cause a denial of service DoS against the server. Solution Update the Software For more information, refer to the...

Cisco 7940 / Nokia N95 phones DoS

Race conditions on SIP protocol handling...

realpdos_au.txt

Type : DOS attack when processing a malformed AU file. Affected : Realplayer 11 ActiveX on Win Vista and Win XP SP2 Date : 01-12-2007 Author : Adonis, Abed safehack.com Link : http://www.safehack.com/Advisory/realpdosau.txt Disclaimer ---------- The information in this text is believed to be true...

Javamail login username and password same email problem

Javamail login username and password same email problem By Thet Aung Min Latt Yangon Myanmar 16 November 2007 1. First logon to examplemail.com http://examplemail.com/login.jsp And login with [email protected] in username and password box. User name: [email protected]...

Fedora 7 : fail2ban-0.8.0-9.fc7 (2007-0621)

This update closes a remote log injection bug which could lead to a DOS attack. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

DNS Recursion bandwidth amplification Denial of Service PoC

No description provided by source. !/usr/bin/perl Get Net::RawIP at http://search.cpan.org/CPAN/authors/id/S/SZ/SZABGAB/Net-RawIP-0.2101.tar.gz cpan Net::DNS:Resolver seems to work fine on each machine I throw it on, as well. PS: To see if you can spoof, check out the ANA Spoofer project...

Code injection

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets products allow remote attackers to cause a denial of service device hang via a flood of Mute and UnMute messages that have a spoofed source IP address for the Signaling Server...