Citect SCADA ODBC Service Overflow

Added: 03/10/2009 CVE: CVE-2008-2639 BID: 29634 OSVDB: 46105 Background The CitectSCADA and CitectFacilities applications include ODBC server capabilities to provide remote SQL access to a relational database. The ODBC Server component listens on port 20222/tcp by default. Problem A buffer overfl...

Can we learn from Microsoft and Google on security?

Tech security company Fortify and security consulting firm Cigital are getting ready to release a set of best practices that tech companies and other businesses can follow to ensure that the software they develop is secure. The authors developed the model by studying the security practices at...

Unfixed XSS vulnerability at www.suretechindustries.com

Security researcher GeNkStAr, has submitted on 12/07/2008 a cross-site-scripting XSS vulnerability affecting www.suretechindustries.com, which at the time of submission ranked 16154799 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/07/2008...

Ventrilo Server Detection

A VoIP service is listening on the remote host. Description : The remote host is running Ventrilo, a voice over IP VoIP software developed by Flagship Industries. SPDX-FileCopyrightText: 2008 Tenable Network Security Some text descriptions might be excerpted from a referenced sources, and are...

Null pointer dereference

The decryption function in Flagship Industries Ventrilo 3.0.2 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and server crash by sending a type 0 packet with an invalid version followed by another packet to TCP port 3784...

CVE-2008-3680

The decryption function in Flagship Industries Ventrilo 3.0.2 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and server crash by sending a type 0 packet with an invalid version followed by another packet to TCP port 3784...

CVE-2008-3680

The CVE-2008-3680 issue affects Flagship Industries’ Ventrilo server (versions 3.0.2 and earlier). The vulnerability is a NULL pointer dereference triggered when the server processes a type 0 packet with an invalid version, followed by another packet, over TCP port 3784, which can cause a remote ...

CVE-2008-3680: Improper Input Validation

The decryption function in Flagship Industries Ventrilo 3.0.2 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and server crash by sending a type 0 packet with an invalid version followed by another packet to TCP port 3784...

Telnet Banner Reporting

This scripts reports the received banner of a Telnet service. SPDX-FileCopyrightText: 2005 SecuriTeam SPDX-FileCopyrightText: Reworked, improved and extended detection code and pattern since 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C...

Ventrilo Server Detection

The remote host is running Ventrilo, a voice over IP VoIP software developed by Flagship Industries. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid19717; scriptversion"1.17"; scriptcvsdate"Date: 2019/11/22"; name"english" = "Ventrilo Server Detection";...