Multiple Samba bugs

DoS against NetBIOS name service nmbd, endless loop in SMBD...

GLSA-200406-20 : FreeS/WAN, Openswan, strongSwan: Vulnerabilities in certificate handling

The remote host is affected by the vulnerability described in GLSA-200406-20 FreeS/WAN, Openswan, strongSwan: Vulnerabilities in certificate handling All these IPsec implementations have several bugs in the verifyx509cert function, which performs certificate validation, that make them vulnerable ...

Mandrake Linux Security Advisory : super-freeswan (MDKSA-2004:070-1)

Thomas Walpuski discovered a vulnerability in the X.509 handling of super-freeswan, openswan, strongSwan, and FreeS/WAN with the X.509 patch applied. This vulnerability allows an attacker to make up their own Certificate Authority that can allow them to impersonate the identity of a valid DN. As...

XITAMI invalid request endless loop

If HTTP header doesn't contain ':' server goes into endless loop...

PureFTPd DoS

There is an endless loop on specific condition with 0 written to memory...

compaq.txt

SSI vulnerability in Compaq Web Based Management Agent ====================================================== Type of vulnerabilities: Server Side Include injection. Exploitable. Stack overflows and access violations. Exploitable? Creation of script objects. Exploitable? Affected Software: Compaq...

tcpdump ISAKMP DoS

Endless loop on malcrafted ISAKMP packet UDP/500...

nylon 0.2 (0.3?) DoS

Dear bugtraq@, I found this bug in nylon 0.2, but according to CVS logs it was already fixed in nylon project Tue Jun 25 00:27:07 2002 UTC 3 months, 2 weeks ago, http://mesh.eecs.umich.edu/cvsweb/nylon/ So, just update to newer version. Details: if definedSENDN || definedRECVN ssizet if...

DoS против HSLCTF для AIX (endless HTTP request)

Бесконечный HTTP-запрос приводит к полному потреблению ресурсов сервера...

Infinite loop in LOTUS NOTE 5.0.3. SMTP SERVER

Maybe this is a configuration error in the server where I tryed this but anyway here is the message that I sent : helo xpto.pt mail from: non-existant-user@ipadressoflotusserver mail to : non-existant-user data testing123 . So Lotus Notes SMTP Server now will loop forever trying to tell to the...

browser.forkbomb.txt

Jim Paris http://home.jtan.com/jim/bugs/both/fork.html Repeated Browser Spawning New browser windows can be opened automatically with Javascript's window.open command. This page simply spawns a neverending supply of windows. This is similar to the Unix "while1fork;" attack. Any browser that...