3proxy double free vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 3proxy double free vulnerability Security Advisory Advisory: ADLAB-07006 3proxy double free vulnerability Class: Design Error DATE:10/22/2007 CVEID:CVE-2007-5622 Vulnerable: 3proxy =0.5.3i Vendor: http://www.3proxy.ru/ I.Synopsis A vulnerability has...

Code injection

rvd in TIBCO Rendezvous RV 7.5.2, when -no-lead-wc is omitted, might allow remote attackers to cause a denial of service network instability via a subject name with a leading 1 '' asterisk or 2 '' greater than wildcard character...

CVE-2007-4161

CVE-2007-4161 affects TIBCO Rendezvous (RV) 7.5.2. When -no-lead-wc is omitted, a remote attacker could cause a denial of service (network instability) by using a subject name beginning with a wildcard ("*" or ">"). The provided documents do not include concrete exploit details, affected build...

CVE-2007-4161: Undefined Security Weakness

rvd in TIBCO Rendezvous RV 7.5.2, when -no-lead-wc is omitted, might allow remote attackers to cause a denial of service network instability via a subject name with a leading 1 '' asterisk or 2 '' greater than wildcard character...

Microsoft IIS 6.0 (/AUX/. aspx) Remote Denial of Service Exploit-vulnerability warning-the black bar safety net

When sending multiple parallel GET requests to a IIS 6.0 server requesting /AUX/. aspx the server gets instable and non responsive. This happens only to servers which respond a runtime error System. Web. HttpException and take two or more seconds to respond to the /AUX/. aspx GET request. signed,...

Code injection

Unspecified vulnerability in NewzCrawler 1.8 allows remote attackers to cause a denial of service application instability via certain invalid strings in the URL attribute of an ENCLOSURE element, as demonstrated by a "%s" sequence, a "%Y" sequence, a "%%" sequence, and an "n," sequence...

CVE-2007-2722: Undefined Security Weakness

Unspecified vulnerability in NewzCrawler 1.8 allows remote attackers to cause a denial of service application instability via certain invalid strings in the URL attribute of an ENCLOSURE element, as demonstrated by a "%s" sequence, a "%Y" sequence, a "%%" sequence, and an "n," sequence...

Microsoft Windows csrss (?) memory corruption exploited in-the-wild

Dear [email protected], On one of Russian forum security vulnerability is discussed in Microsoft Windows Windows XP is tested. A vulnerability is caused by memory corruption is string beginning with "?" is send thorugh MessageBox API with MBSERVICENOTIFICATION flag. It looks like some "debug"...

CVE-2006-3465

Unspecified vulnerability in the custom tag support for the TIFF library libtiff before 3.8.2 allows remote attackers to cause a denial of service instability or crash and execute arbitrary code via unknown vectors...

CVE-2006-3465

Unspecified vulnerability in the custom tag support for the TIFF library libtiff before 3.8.2 allows remote attackers to cause a denial of service instability or crash and execute arbitrary code via unknown vectors...

w3wp-dos.txt

--0-1633069887-1142992701=:20251 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Sorry, if you are receiving multiple copies of it. Just resending as the one that I sent last night has not yet appeared. w3wp remote DoS due to improper reference of STA COM components i...

DOS во встроенном NAT сервере Windows 2000

Обнаружил dos во встроенном NAT сервере Windows 2000 Конфигурация проверенных серверов: Windows 2000 English Standard/Advanced Service Pack 4 + Update Rollup 1 for Service Pack 4 с установленным NAT сервером. При прохождении ip пакетов через сервер, с включенной опцией "Loose Source and Record...

CVE-2005-3901: Undefined Security Weakness

Macromedia Flash Communication Server MX 1.0 and 1.5 does not sufficiently validate certain RTMP data, which allows attackers to cause a denial of service instability or crash, as demonstrated using an alpha release build of Flash Player 8.5 build 133...

[[email protected]: Macromedia Security Bulletins]

Macromedia Security Bulletins: - Contribute Publishing Server - Flash Communication Server - Breeze Communication Server and Breeze Live Server MPSB05-08 Contribute Publishing Server Password Encryption Summary: Macromedia Contribute Publishing Server CPS 1.11 includes a security update that...

Veritas Backup Exec Agent 8.x/9.x Browser Overflow (c version)

No description provided by source. / Got to give it to class101 on this one. Tested and penetrated. / str0ke / / VERITAS Backup Exec v9.1.4691.SP1 v9.1.4691.SP0 v8.5.3572 Agent Browser Service, Remote Stack Overflow Highly Critical All credits to: -iDEFENSEdiscovery-www.iDEFENSE.com, -Thor...

Mandrake Linux Security Advisory : evolution (MDKSA-2003:045)

Several vulnerabilities were discovered in the Evolution email client. These problems make it possible for a carefully constructed email message to crash the program, causing general system instability by starving resources. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive tex...

MS Internet Explorer Overly Trusted Location Cache Exploit

Exploit for unknown platform in category dos / poc ========================================================== MS Internet Explorer Overly Trusted Location Cache Exploit ========================================================== Overly Trusted Location Variant Method Cache Vulnerability GO! This...

Xlight FTP Server 1.x - Long Directory Request Remote Denial of Service

source: https://www.securityfocus.com/bid/9585/info A problem in the handling of large requests has been reported to result in service instability in XLight FTP Server under some circumstances. Because of this, it may be possible for a remote attacker to deny service to legitimate users of the...

Xlight FTP Server 1.x - Long Directory Request Remote Denial of Service

Xlight FTP Server 1.x - Long Directory Request Remote Denial of Service source: https://www.securityfocus.com/bid/9585/info A problem in the handling of large requests has been reported to result in service instability in XLight FTP Server under some circumstances. Because of this, it may be...

Microsoft Windows - Workstation Service WKSSVC Remote (MS03-049)

Microsoft Windows - Workstation Service WKSSVC Remote MS03-049 / Author: snooq Date: 14 November 2003 +++++++++++++ THIS IS A PRIVATE VERSION +++++++++++++++ This is just slightly better than the one I posted to packetstorm.... The public version will crash 'services.exe' immediately while this o...