ngIRCd <= 0.8.1 Remote Denial of Service Exploit (2)

Exploit for linux platform in category dos / poc ==================================================== ngIRCd Attack Success! Lets party! The Irc Server is Killed !! Exploit: NGircd NOTE: The channel must be EMPTY to let the exploit use +I mode Example: / include include include include include...

[SA13803] Sun SMC GUI Account With Empty Password Creation Security Issue

TITLE: Sun SMC GUI Account With Empty Password Creation Security Issue SECUNIA ADVISORY ID: SA13803 VERIFY ADVISORY: http://secunia.com/advisories/13803/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote OPERATING SYSTEM: Sun Solaris 8 http://secunia.com/product/94/ Sun...

Server crash in Breed patch #1

Luigi Auriemma Application: Breed http://www.brat-designs.com/breed.html Versions: = patch 1 Platforms: Windows Bug: access to NULL pointer Exploitation: remote, versus server Date: 13 Jan 2005 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2...

squid -- confusing results on empty acl declarations

Applying an empty ACL list results in unexpected behavior: anything will match an empty ACL list. For example, The meaning of the configuration gets very confusing when we encounter empty ACLs such as acl something src "/path/to/emptyfile.txt" httpaccess allow something somewhere gets parsed with...

CUPS Internet Printing Protocol (IPP) Implementation Empty UDP Datagram Remote DoS

The target is running a CUPS server that supports browsing of network printers and that is vulnerable to a limited type of denial of service attack. Specifically, the browsing feature can be disabled by sending an empty UDP datagram to the CUPS server. %NASLMINLEVEL 70300 This script was written ...

CVE-2004-1098

MIMEDefang in MIME-tools 5.414 allows remote attackers to bypass virus scanning capabilities via an e-mail attachment with a virus that contains an empty boundary string in the Content-Type header...

CVE-2004-1098: Undefined Security Weakness

MIMEDefang in MIME-tools 5.414 allows remote attackers to bypass virus scanning capabilities via an e-mail attachment with a virus that contains an empty boundary string in the Content-Type header...

Debian DSA-144-1 : wwwoffle - improper input handling

A problem with wwwoffle has been discovered. The web proxy didn't handle input data with negative Content-Length settings properly which causes the processing child to crash. It is at this time not obvious how this can lead to an exploitable vulnerability; however, it's better to be safe than...

IBM Windows XP OEM version backdoor account

During installation backdoor account is created with administrative privileges and empty password...

TYPSoft FTP Server Empty Username DoS

The remote host seems to be running TYPSoft FTP server, version 1.10. This version is prone to a remote denial of service flaw. By sending an empty login username, an attacker can cause the FTP server to crash, denying service to legitimate users. C Tenable Network Security, Inc...

CVE-2002-1284

The wizard in KGPG 0.6 through 0.8.2 does not properly provide the passphrase to gpg when creating new keys, which causes secret keys to be created with an empty passphrase and allows local attackers to steal the keys if they can be read...

IBM DB2 DTS To String Conversion - Denial of Service

source: https://www.securityfocus.com/bid/11400/info IBM DB2 is reported prone to a denial of service vulnerability when DTS to string conversion is carried out. It is reported that during a DTS to string conversion a trap occurs if an empty formatting string is provided. The vulnerability is...

IBM DB2 DTS To String Conversion - Denial of Service

IBM DB2 DTS To String Conversion - Denial of Service source: https://www.securityfocus.com/bid/11400/info IBM DB2 is reported prone to a denial of service vulnerability when DTS to string conversion is carried out. It is reported that during a DTS to string conversion a trap occurs if an empty...

CVE-2002-1284: Undefined Security Weakness

The wizard in KGPG 0.6 through 0.8.2 does not properly provide the passphrase to gpg when creating new keys, which causes secret keys to be created with an empty passphrase and allows local attackers to steal the keys if they can be read...

CVE-2004-0724: Undefined Security Weakness

The Half-Life engine before July 7 2004 allows remote attackers to cause a denial of service server or client crash via an empty fragmented packet...

security flaw

servenotify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds" write for a single byte to execute arbitrary code or modify critical program data...

CVE-2004-0182

Mailman before 2.0.13 allows remote attackers to cause a denial of service crash via an email message with an empty subject field...

CVE-2004-0182

Removed by vendor...

CVE-2004-0182: Undefined Security Weakness

Mailman before 2.0.13 allows remote attackers to cause a denial of service crash via an email message with an empty subject field...

Important: Red Hat Security Advisory: mailman security update

An updated mailman package that closes a DoS vulnerability in mailman introduced by RHSA-2004:019 is now available. Mailman is a mailing list manager. On February 19 2004, Red Hat issued security erratum RHSA-2004:019 to correct a DoS Denial of Service vulnerability where an attacker could send a...