WinFTP Server 1.6 Denial of Service Exploit

Exploit for unknown platform in category dos / poc =========================================== WinFTP Server 1.6 Denial of Service Exploit =========================================== !/usr/local/bin/perl -w WinFTP server ver 1.6 D.o.S Exploit Discovered,exploited by KaGra Tested on WinXP SP1...

CVE-2004-0785

Multiple buffer overflows in Gaim before 0.82 allow remote attackers to cause a denial of service and possibly execute arbitrary code via 1 Rich Text Format RTF messages, 2 a long hostname for the local system as obtained from DNS, or 3 a long URL that is not properly handled by the URL decoder...

CVE-2004-0785

Multiple buffer overflows in Gaim before 0.82 allow remote attackers to cause a denial of service and possibly execute arbitrary code via 1 Rich Text Format RTF messages, 2 a long hostname for the local system as obtained from DNS, or 3 a long URL that is not properly handled by the URL decoder...

Mozilla Browser 1.7.x - Non-ASCII Hostname Heap Overflow

Mozilla Browser 1.7.x - Non-ASCII Hostname Heap Overflow source: https://www.securityfocus.com/bid/11169/info Mozilla is prone to a remotely exploitable heap overflow that is exposed when the browser handles non-ASCII characters in URIs. This issue could be exploited by enticing a user to open a...

CVE-2004-0785

Multiple buffer overflows in Gaim before 0.82 allow remote attackers to cause a denial of service and possibly execute arbitrary code via 1 Rich Text Format RTF messages, 2 a long hostname for the local system as obtained from DNS, or 3 a long URL that is not properly handled by the URL decoder...

CVE-2004-0765

The certTestHostName function in Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, only checks the hostname portion of a certificate when the hostname portion of the URI is not a fully qualified domain name FQDN, which allows remote attackers to spoof trusted certificates...

Mandrake Linux Security Advisory : xchat (MDKSA-2002:051)

In versions of the xchat IRC client prior to version 1.8.9, xchat does not filter the response from an IRC server when a /dns query is executed. xchat resolves hostnames by passing the configured resolver and hostname to a shell, so an IRC server may return a malicious response formatted so that...

CVE-2004-0615

Cross-site scripting XSS vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router running firmware 2.60B2, and DI-624, allows remote attackers to inject arbitrary script or HTML via the DHCP HOSTNAME option in a DHCP request...

CVE-2004-0615: Undefined Security Weakness

Cross-site scripting XSS vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router running firmware 2.60B2, and DI-624, allows remote attackers to inject arbitrary script or HTML via the DHCP HOSTNAME option in a DHCP request...

PT-2004-1707 · D Link · D-Link Di-624 +2

Name of the Vulnerable Software and Affected Versions: D-Link DI-614+ SOHO router version 2.30 D-Link DI-704 SOHO router version 2.60B2 D-Link DI-624 affected versions not specified Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote...

CVE-2004-0606: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Infoblox DNS One running firmware 2.4.0-8 and earlier allows remote attackers to execute arbitrary scripts as other users via the 1 CLIENTID or 2 HOSTNAME option of a DHCP request...

ISC DHCP buffer overflow

Buffer overflow on oversized hostname in DHCP query, if hostname is splitted to few attributes...

CVE-2004-0460

Buffer overflow in the logging capability for the DHCP daemon DHCPD for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via multiple hostname options in 1 DISCOVER, 2 OFFER, 3 REQUEST, 4 ACK, or 5 NAK messages,...

CVE-2004-0460: Undefined Security Weakness

Buffer overflow in the logging capability for the DHCP daemon DHCPD for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via multiple hostname options in 1 DISCOVER, 2 OFFER, 3 REQUEST, 4 ACK, or 5 NAK messages,...

mozilla -- hostname spoofing bug

When processing URIs that contain an unqualified host name-- specifically, a domain name of only one component-- Mozilla will perform matching against the first component of the domain name in SSL certificates. In other words, in some situations, a certificate issued to "www.example.com" will be...

CVE-2003-1377

Buffer overflow in the reverse DNS lookup of Smart IRC Daemon SIRCD 0.4.0 and 0.4.4 allows remote attackers to execute arbitrary code via a client with a long hostname...

CVE-2003-0976

NFS Server XNFS.NLM for Novell NetWare 6.5 does not properly enforce sys:\etc\exports when hostname aliases from sys:etc\hosts file are used, which could allow users to mount file systems when XNFS should deny the host...

sipD DoS

Because of insufficient check of gethostbynamer results is's possible to crash service with unresolvable hostname...

CVE-2003-0976

NFS Server XNFS.NLM for Novell NetWare 6.5 does not properly enforce sys:\etc\exports when hostname aliases from sys:etc\hosts file are used, which could allow users to mount file systems when XNFS should deny the host...

CVE-2003-0976: Undefined Security Weakness

NFS Server XNFS.NLM for Novell NetWare 6.5 does not properly enforce sys:\etc\exports when hostname aliases from sys:etc\hosts file are used, which could allow users to mount file systems when XNFS should deny the host...