CVE-2002-0400

ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service shutdown via a malformed DNS packet that triggers an error condition that is not properly handled when the rdataset parameter to the dnsmessagefindtype function in message.c is not NULL, aka DoSfindtype...

CVE-2002-0400

The CVE-2002-0400 issue affects ISC BIND 9 up to 9.2.0 (pre-9.2.1). A remote attacker can cause a DoS shutdown by sending a malformed DNS packet that triggers an internal error in dns_message_findtype() when the rdataset parameter is not NULL. Impact is denial of service (availability impact: par...

security flaw

Double free vulnerabilities in the error handling code for ASN.1 decoders in the 1 Key Distribution Center KDC library and 2 client library for MIT Kerberos 5 krb5 1.3.4 and earlier may allow remote attackers to execute arbitrary code...

LibPNG 1.2.5 - png_jmpbuf() Local Buffer Overflow

LibPNG 1.2.5 - pngjmpbuf Local Buffer Overflow include include include "png.h" / The pngjmpbuf macro, used in error handling, became available in libpng version 1.0.6. If you want to be able to run your code with older versions of libpng, you must define the macro yourself but only if it is not...

LibPNG <= 1.2.5 png_jmpbuf() Local Buffer Overflow Exploit

Exploit for linux platform in category local exploits ========================================================== LibPNG include include "png.h" / The pngjmpbuf macro, used in error handling, became available in libpng version 1.0.6. If you want to be able to run your code with older versions of...

LibPNG 1.2.5 - 'png_jmpbuf()' Local Buffer Overflow

include include include "png.h" / The pngjmpbuf macro, used in error handling, became available in libpng version 1.0.6. If you want to be able to run your code with older versions of libpng, you must define the macro yourself but only if it is not already defined by libpng!. / ifndef pngjmpbuf...

CVS < 1.11.17 / 1.12.9 Multiple Vulnerabilities

The remote CVS server, according to its version number, might allow an attacker to execute arbitrary commands on the remote system because of a flaw relating to malformed Entry lines which lead to a missing NULL terminator. Among the issues deemed likely to be exploitable were: - A double-free...

[UNIX] Sun Management Console Directory Traversal Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

NetBSD systrace privilege escalation

By using invalid handling of error condition it's possible to obtain superuser privileges...

DSA-498 libpng - out of bound access

Bulletin has no description...

Alpha Black Zero 1.04 - Remote Denial of Service

Alpha Black Zero 1.04 - Remote Denial of Service / by Luigi Auriemma / include include include ifdef WIN32 include include include void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupted system call"; break; case 10009: error = "Bad file number"; break; case 10013: erro...

Age of Sail II 1.04.151 - Remote Buffer Overflow

/ by Luigi Auriemma / include include include include ifdef WIN32 include include include void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupted system call"; break; case 10009: error = "Bad file number"; break; case 10013: error = "Permission denied"; break; case 1001...

Alpha Black Zero 1.04 - Remote Denial of Service

/ by Luigi Auriemma / include include include ifdef WIN32 include include include void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupted system call"; break; case 10009: error = "Bad file number"; break; case 10013: error = "Permission denied"; break; case 10014: error...

Chatman 1.5.1 RC1 - Broadcast Crash

/ by Luigi Auriemma / include include include ifdef WIN32 include include include void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupted system call"; break; case 10009: error = "Bad file number"; break; case 10013: error = "Permission denied"; break; case 10014: error...

Courier mail services: remotely exploitable buffer overflows

The Courier set of mail services use a common Unicode library. This library contains buffer overflows in the converters for two popular Japanese character encodings. These overflows may be remotely exploitable, triggered by a maliciously formatted email message that is later processed by one of t...

CVE-2003-0253

The prefork MPM in Apache 2 before 2.0.47 does not properly handle certain errors from accept, which could lead to a denial of service...

CVE-2003-0253

The prefork MPM in Apache 2 before 2.0.47 does not properly handle certain errors from accept, which could lead to a denial of service...

Stellar Docs 1.2 - Full Path Disclosure

Stellar Docs 1.2 - Full Path Disclosure source: https://www.securityfocus.com/bid/8385/info Stellar Docs will disclose path information in an error page in response to a request for an invalid request for a web resource. This could disclose information that could be useful in further attacks...

CVE-2003-0253

The prefork MPM in Apache 2 before 2.0.47 does not properly handle certain errors from accept, which could lead to a denial of service...

Cerberus FTP Server 2.1 - Information Disclosure

source: https://www.securityfocus.com/bid/7369/info It has been reported that Cerberus FTP Server is prone to an information disclosure weakness. The problem exists in the way the FTP server handles the authentication procedure. An attacker may exploit a weakness in error handling to disclose val...