5060 matches found
ngIRCd <= 0.8.1 Remote Denial of Service Exploit (2)
Exploit for linux platform in category dos / poc ==================================================== ngIRCd Attack Success! Lets party! The Irc Server is Killed !! Exploit: NGircd NOTE: The channel must be EMPTY to let the exploit use +I mode Example: / include include include include include...
ngIRCd <= 0.8.1 Remote Denial of Service Exploit (2)
No description provided by source. / Ip under usage is actually port /str0ke / / -=x0n3-h4ck=--=00:48:19=--=/root=--=Account: root=- -= ./ngircddos x0n3-h4ck.org 12345 Angel DarkChan -= NGircd = 0.8.1 Remote DoS ::: Coded by Expanders =- Connecting to target ...Done Building evil buffer ...Done...
[SA13803] Sun SMC GUI Account With Empty Password Creation Security Issue
TITLE: Sun SMC GUI Account With Empty Password Creation Security Issue SECUNIA ADVISORY ID: SA13803 VERIFY ADVISORY: http://secunia.com/advisories/13803/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote OPERATING SYSTEM: Sun Solaris 8 http://secunia.com/product/94/ Sun...
Server crash in Breed patch #1
Luigi Auriemma Application: Breed http://www.brat-designs.com/breed.html Versions: = patch 1 Platforms: Windows Bug: access to NULL pointer Exploitation: remote, versus server Date: 13 Jan 2005 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2...
squid -- confusing results on empty acl declarations
Applying an empty ACL list results in unexpected behavior: anything will match an empty ACL list. For example, The meaning of the configuration gets very confusing when we encounter empty ACLs such as acl something src "/path/to/emptyfile.txt" httpaccess allow something somewhere gets parsed with...
CUPS Internet Printing Protocol (IPP) Implementation Empty UDP Datagram Remote DoS
The target is running a CUPS server that supports browsing of network printers and that is vulnerable to a limited type of denial of service attack. Specifically, the browsing feature can be disabled by sending an empty UDP datagram to the CUPS server. %NASLMINLEVEL 70300 This script was written ...
CVE-2004-1098
MIMEDefang in MIME-tools 5.414 allows remote attackers to bypass virus scanning capabilities via an e-mail attachment with a virus that contains an empty boundary string in the Content-Type header...
Debian DSA-144-1 : wwwoffle - improper input handling
A problem with wwwoffle has been discovered. The web proxy didn't handle input data with negative Content-Length settings properly which causes the processing child to crash. It is at this time not obvious how this can lead to an exploitable vulnerability; however, it's better to be safe than...
IBM Windows XP OEM version backdoor account
During installation backdoor account is created with administrative privileges and empty password...
TYPSoft FTP Server Empty Username DoS
The remote host seems to be running TYPSoft FTP server, version 1.10. This version is prone to a remote denial of service flaw. By sending an empty login username, an attacker can cause the FTP server to crash, denying service to legitimate users. C Tenable Network Security, Inc...
CVE-2002-1284
The wizard in KGPG 0.6 through 0.8.2 does not properly provide the passphrase to gpg when creating new keys, which causes secret keys to be created with an empty passphrase and allows local attackers to steal the keys if they can be read...
IBM DB2 DTS To String Conversion - Denial of Service
IBM DB2 DTS To String Conversion - Denial of Service source: https://www.securityfocus.com/bid/11400/info IBM DB2 is reported prone to a denial of service vulnerability when DTS to string conversion is carried out. It is reported that during a DTS to string conversion a trap occurs if an empty...
IBM DB2 DTS To String Conversion - Denial of Service
source: https://www.securityfocus.com/bid/11400/info IBM DB2 is reported prone to a denial of service vulnerability when DTS to string conversion is carried out. It is reported that during a DTS to string conversion a trap occurs if an empty formatting string is provided. The vulnerability is...
security flaw
servenotify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds" write for a single byte to execute arbitrary code or modify critical program data...
CVE-2004-0182
Removed by vendor...
CVE-2004-0182
Mailman before 2.0.13 allows remote attackers to cause a denial of service crash via an email message with an empty subject field...
Important: Red Hat Security Advisory: mailman security update
An updated mailman package that closes a DoS vulnerability in mailman introduced by RHSA-2004:019 is now available. Mailman is a mailing list manager. On February 19 2004, Red Hat issued security erratum RHSA-2004:019 to correct a DoS Denial of Service vulnerability where an attacker could send a...
Proofpoint protection server unauthorized access
User root with empty password can access mySQL...
TypSoft FTP DoS
DoS on empty username...
TYPSoft FTP Server 1.10 may be crashed
Application: TYPSoft FTP Server http://www.typsoft.com Version: 1.10 Bug: Denial Of Service Author: intuit e-mail: [email protected] web/forum: http://code.unixserver.at 1. Description 2. The bug 3. The code 4. The fix ^^^^^^^^^^^^^^^^ 1. Description: ^^^^^^^^^^^^^^^^ Vendor's Description:...