558 matches found
Red Hat Linux内核路由实现多个远程拒绝服务漏洞
Bugraq ID: 37875 CVE ID：CVE-2009-4272 Red Hat是一款流行的linux发行版本。 如果攻击者能够在路由哈希表中引起足够数量的碰撞如通过特殊构建的报文，以触发紧急路由刷新，可发生死锁现象，或者如果在内核路由缓存禁用的情况下，在路由查询后会遗留未初始化指针，触发空指针应用而发生上述现象。 RedHat Enterprise Linux EUS 5.4.z server RedHat Enterprise Linux Desktop 5 client RedHat Enterprise Linux 5 server 厂商解决方案...
Researchers Show Break in Secure Data Storage System
A team of computer scientists from several universities has devised an attack that is capable of reconstructing the so-called vanishing data objects created by a system called Vanish, which was designed to create secure data objects that would expire after a set time and could never be recreated...
DEBIAN-CVE-2008-7185
GNOME Rhythmbox 0.11.5 allows remote attackers to cause a denial of service segmentation fault and crash via a playlist .pls file with a long Title field, possibly related to the ghashtablelookup function in b-playlist-manager.c...
Firefox browser engine crashes
The browser engine in Mozilla Firefox 3 before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to 1...
The use of PMK Hashes for the WPA/WPA2 high-speed hack-vulnerability warning-the black bar safety net
This article relates to the Hash key based on the Cowpatty under the genpmk tool to make, this is the ZerOnesecurityteam WisecurityGROUP BY with Aircrack-ng airolib-ng and related tools of convenience, versatility and repeated the comparison after the final decision. For the convenience of everyo...
Out-of-bounds
hook.c in BitchX 1.1-final allows remote IRC servers to execute arbitrary commands by sending a client certain data containing NICK and EXEC strings, which exceeds the bounds of a hash table, and injects an EXEC hook function that receives and executes shell commands...
CVE-2007-3360
hook.c in BitchX 1.1-final allows remote IRC servers to execute arbitrary commands by sending a client certain data containing NICK and EXEC strings, which exceeds the bounds of a hash table, and injects an EXEC hook function that receives and executes shell commands...
BitchX 1.1-final (EXEC) Remote Command Execution Exploit
No description provided by source. / Name: PBXS - Pointless BitchX Sploit Author: clarity Infected Versions: 1.1-final and others? Synopsis: BitchX suffers from a unchecked bounds in a hash table in hook.c where one can inject data structures allowing for the remote execution of commands! Usage:...
BitchX 1.1-final (EXEC) Remote Command Execution Exploit
Exploit for linux platform in category remote exploits ======================================================== BitchX 1.1-final EXEC Remote Command Execution Exploit ======================================================== / Name: PBXS - Pointless BitchX Sploit Author: clarity Infected Versions:...
PHP invalid has table value deletion vulnerability
Wrong element with same hash value but different class may be removed from hash table...
CVE-2005-3945
The SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4 with Update Roll-up uses a hash of predictable data, which allows remote attackers to cause a denial of service CPU consumption via a flood of SYN packets that produce identical hash values, which slo...
PHP 4.3.75.0.0RC3 - memory_limit Remote Overflow
PHP 4.3.75.0.0RC3 - memorylimit Remote Overflow / Remote exploit for the php memorylimit vulnerability found by Stefan Esser in php 4 include include include include include define IP "127.0.0.1" define PORT 80 int sock; struct sockaddrin...
PHP <= 4.3.7/ 5.0.0RC3 memory_limit Remote Exploit
Exploit for linux platform in category remote exploits ================================================== PHP = 4.3.7/ 5.0.0RC3 memorylimit Remote Exploit ================================================== / Remote exploit for the php memorylimit vulnerability found by Stefan Esser in php 4 = 4.3...
security flaw
The memorylimit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when registerglobals is enabled, allows remote attackers to execute arbitrary code by triggering a memorylimit abort during execution of the zendhashinit function and overwriting a...
CVE-2003-0364
The TCP/IP fragment reassembly handling in the Linux kernel 2.4 allows remote attackers to cause a denial of service CPU consumption via certain packets that cause a large number of hash table collisions...
CVE-2003-0364
The TCP/IP fragment reassembly handling in the Linux kernel 2.4 allows remote attackers to cause a denial of service CPU consumption via certain packets that cause a large number of hash table collisions...
CVE-2003-0244
The route cache implementation in Linux 2.4, and the Netfilter IP conntrack module, allows remote attackers to cause a denial of service CPU consumption via packets with forged source addresses that cause a large number of hash table collisions...
CVE-2003-0244
The route cache implementation in Linux 2.4, and the Netfilter IP conntrack module, allows remote attackers to cause a denial of service CPU consumption via packets with forged source addresses that cause a large number of hash table collisions...