Sysinternals Regmon 6.11 - Local Denial of Service

// source: https://www.securityfocus.com/bid/11042/info Regmon is reported prone to a local denial of service vulnerability. This issue presents itself because the application fails to handle exceptional conditions and references unvalidated pointers to kernel functions. Successful exploitation m...

Sysinternals Regmon 6.11 - Local Denial of Service

Sysinternals Regmon 6.11 - Local Denial of Service // source: https://www.securityfocus.com/bid/11042/info Regmon is reported prone to a local denial of service vulnerability. This issue presents itself because the application fails to handle exceptional conditions and references unvalidated...

PHP < 4.3.2 Multiple Function Remote Overflows

Binary data 1484.prm...

Delegate Multiple Function Remote Overflows

Binary data 1791.prm...

XV 3.x BMP Parsing Local Buffer Overflow Exploit

Exploit for linux platform in category remote exploits ======================================== Qt BMP Parsing Bug Heap Overflow Exploit ======================================== / heap overflow exploit for qt bmp parsing bug infamous42md AT hotpop DOT com shouts to mitakeet, MB, and peeps...

PHP < 4.1.0 Safe Mode Mail Function Command Execution

Binary data 1483.prm...

Mandrake Linux Security Advisory : postgresql (MDKSA-2002:062-1)

Vulnerabilities were discovered in the Postgresql relational database by Mordred Labs. These vulnerabilities are buffer overflows in the rpad, lpad, repeat, and cashwords functions. The Postgresql developers also fixed a buffer overflow in functions that deal with time/date and timezone. Finally,...

Mandrake Linux Security Advisory : zlib (MDKSA-2003:033)

Richard Kettlewell discovered a buffer overflow vulnerability in the zlib library's gzprintf function. This can be used by attackers to cause a denial of service or possibly even the execution of arbitrary code. Our thanks to the OpenPKG team for providing a patch which adds the necessary configu...

SuSE-SA:2003:051: lftp

The remote host is missing the patch for the advisory SuSE-SA:2003:051 lftp. The the flexible and powerful FTP command-line client lftp is vulnerable to two remote buffer overflows. When using lftp via HTTP or HTTPS to execute commands like 'ls' or 'rels' specially prepared directories on the...

Fedora Core 1 2003-026-1: kernel

The remote host is missing the patch for the advisory FEDORA-2003-026-1 kernel. The kernel package contains the Linux kernel vmlinuz, the core of your Red Hat Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device inpu...

moinmoin -- ACL group bypass

The moinmoin package contains two bugs with ACLs and anonymous users. Both bugs may permit anonymous users to gain access to administrative functions; for example the delete function. There is no known workaround, the vulnerability exists regardless if a site is using ACLs or not...

DSA-521 sup - format string vulnerability

Bulletin has no description...

Asterisk PBX 0.7.x - Multiple Logging Format String Vulnerabilities

source: https://www.securityfocus.com/bid/10569/info It is reported that Asterisk is susceptible to format string vulnerabilities in its logging functions. An attacker may use these vulnerabilities to corrupt memory, and read or write arbitrary memory. Remote code execution is likely possible. Du...

PHP 4.3.x - Microsoft Windows Shell Escape functions Command Execution

source: https://www.securityfocus.com/bid/10471/info PHP is reportedly prone to a command execution vulnerability in its shell escape functions. This issue is due to a failure of PHP to properly sanitize function arguments. This issue might allow an attacker to execute arbitrary shell commands on...

CVE-2004-0401

Unknown vulnerability in libtasn1 0.1.x before 0.1.2, and 0.2.x before 0.2.7, related to the DER parsing functions...

Microsoft Windows XP2000 - TCP Connection Reset

Microsoft Windows XP2000 - TCP Connection Reset AFX TCP Reset by Aphex http://www.iamaphex.cjb.net [email protected] Compile with Delphi 5/6/7 program Project1; $APPTYPE CONSOLE uses Windows; type TBufferArray = array0..65535 of byte; type iph = record ipverlen: byte; iptos: byte; iplen: word;...

phpx324.txt

PHPX 3.2.4 http://www.phpx.org Versions Affected: PHPX 2.x - 3.2.4 Type of bug: Session Hi-jacking/Admin Access via Cookies Impact: Ability to steal another users account Found-by: HelloWorld Ryan Wray Vendor: Notified Table Of Contents ===================== 1 The Program 2 The Problem 3 The Proo...

0verkill - little simple vulnerability.

0verkill - little simple vulnerability. I. Entry. Vulnerability is game 0verkill. There is some little bugs in clinet / server. II. Vulnerability details. a client: Vulnerability function is loadcfg, savecfg and maybe sendmessage. There is simple buffer overflow bugs: "in file client.c" void...

0verkill 0.16 - Game Client Multiple Local Buffer Overflow Vulnerabilities

// source: https://www.securityfocus.com/bid/9550/info // The 0verkill game client has been reported prone to multiple instances of exploitable buffer overrun vulnerabilities. The functions that have been reported to be affected are loadcfg, savecfg and sendmessage. It has been reported that due ...

TOCTOU with NT System Service Hooking

TOCTOU Time-Of-Check-to-Time-Of-Use problem is known for a while 1. Nevertheless such bugs are still not uncommon. That is more or less acceptable for general software but not for security products. I believe there are drivers that hook kernel system services by well known technique 2,3,4. Those...