8089 matches found
Moderate: Red Hat Security Advisory: php security update for Stronghold
An updated version of PHP that addresses several security issues is now available for Stronghold 4.0 for Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language. Several security issues were...
[SECURITY] [DSA 1069-1] New Linux kernel 2.4.18 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1069-1 [email protected] http://www.debian.org/security/ Martin Schulze, Dann Frazier May 20th, 2006 http://www.debian.org/security/faq -...
DSA-1069-1 kernel-source-2.4.18 - several
Bulletin has no description...
XINE format string bugs when handling non existen file
Author : KaDaL-X email : [email protected] website : http://kandangjamur.net Software tested Version : 0.99.4 Vendor : http://xine.sourceforge.net Proof Of Concept : Type in your unix console something like this : kandangjamur$xine p-p.mp3 Then, there are two error alert box causing by this...
Vavoom <= 1.19.1 [Multiple Vulnerabilities] Denial of Service Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include time.h include zlib.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h /...
LieroX 0.62b - Remote Server/Client Denial of Service
/ by Luigi Auriemma / include include include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 10004: error =...
[Full-disclosure] DM Primer error handling weakness & an old CAM BO revisited
Apologies for the poor grammer and formatting... DM Primer is a shared service related to CA's Unicenter Remote Control. It is used in Enterprise environments to deploy URC6 from the URC v6.x Administration server. Dmprimer.exe listens on a client device for instructions from the server in a...
security flaw
Cross-site scripting XSS vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly quoted or filtered when the request handler generates an error message...
CVE-2005-4829
VirtueMart before 1.0.1 does not properly handle errors when a user is forbidden to read a requested page, which has unknown impact and remote attack vectors...
Blitzkrieg 2 < 1.21 - 'Server/Client' Denial of Service
/ by Luigi Auriemma / include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupted system...
Glider collectn kill 1.0.0.0 - Buffer Overflow (PoC)
Glider collectn kill 1.0.0.0 - Buffer Overflow PoC / by Luigi Auriemma / include include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error;...
CVE-2005-3277
The LPD service in HP-UX 10.20 11.11 11i and earlier allows remote attackers to execute arbitrary code via shell metacharacters "" or single backquote in a request that is not properly handled when an error occurs, as demonstrated by killing the connection, a different vulnerability than...
MultiTheftAuto 0.5 patch 1 - Server Crash / MOTD Deletion
/ by Luigi Auriemma / include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupted system call";...
Snort <= 2.4.0 SACK TCP Option Error Handling
Snort = 2.4.0 SACK TCP Option Error Handling Package: Snort 2.4.0 And previous versions Vendor url: http://www.snort.org Class: Error Handling Exceptional Conditions Risk: High Credits: A. Alejandro Hernndez Hernndez Contact: nitrousatvulnfactdotcom BACKGROUND Snort is an open source network...
Snort 2.4.0 - SACK TCP Option Error Handling Denial of Service
Snort 2.4.0 - SACK TCP Option Error Handling Denial of Service /------------------------------------------ ||------+ Snort thsum es 0 cero, por lo tanto, el primer Router por donde pase este paquete lo descartara por no tener una checksum valida. RFC 1072 - TCP Extensions for Long-Delay Paths 3.2...
CVE-2005-2532
OpenVPN before 2.0.1 does not properly flush the OpenSSL error queue when a packet can not be decrypted by the server, which allows remote authenticated attackers to cause a denial of service client disconnection via a large number of packets that can not be decrypted...
CVE-2005-2531
OpenVPN before 2.0.1, when running with "verb 0" and without TLS authentication, does not properly flush the OpenSSL error queue when a client fails certificate authentication to the server and causes the error to be processed by the wrong client, which allows remote attackers to cause a denial o...
NetPanzer <= 0.8 Remote Denial of Service Exploit
Exploit for unknown platform in category dos / poc ================================================= NetPanzer include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid...
netPanzer 0.8 - Remote Denial of Service
netPanzer 0.8 - Remote Denial of Service / by Luigi Auriemma / include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case...
NetPanzer <= 0.8 Remote Denial of Service Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include string.h include errno.h void stderrvoid ch...