1161 matches found
Cisco IOS多播虚拟专用网MDT Data Join消息处理数据泄露漏洞
BUGTRAQ ID: 28464 CVECAN ID: CVE-2008-1156 Cisco IOS是思科网络设备所使用的互联网操作系统。 Cisco IOS在实现多播虚拟专用网（MVPN）时存在漏洞，允许攻击者发送特制的多播分布树（MDT）Data Join消息导致在核心路由器上创建额外的多播状态。 这个漏洞还允许泄露其他MPLS VPN的多播通讯，可以接收连接到同一供应商边界（PE）路由器的VPN的多播通讯。如果要成功利用这个漏洞，攻击者必须知道或猜测到远程PE路由器的边界网管协议（BGP）同层IP地址，以及其他MPLS VPN所使用的多播组的地址。 Cisco IOS 12.4...
PYSEC-2008-14
Multiple cross-site request forgery CSRF vulnerabilities in Plone CMS 3.0.5 and 3.0.6 allow remote attackers to 1 add arbitrary accounts via the joinform page and 2 change the privileges of arbitrary groups via the prefsgroupsoverview page...
CVE-2007-6062
irc-channel.c in ngIRCd before 0.10.3 allows remote attackers to cause a denial of service crash via a JOIN command without a channel argument...
DEBIAN-CVE-2007-6062
irc-channel.c in ngIRCd before 0.10.3 allows remote attackers to cause a denial of service crash via a JOIN command without a channel argument...
CVE-2007-6062
irc-channel.c in ngIRCd before 0.10.3 allows remote attackers to cause a denial of service crash via a JOIN command without a channel argument...
Command injection
irc-channel.c in ngIRCd before 0.10.3 allows remote attackers to cause a denial of service crash via a JOIN command without a channel argument...
CVE-2007-6062
irc-channel.c in ngIRCd before 0.10.3 allows remote attackers to cause a denial of service crash via a JOIN command without a channel argument...
CVE-2007-6062
irc-channel.c in ngIRCd before 0.10.3 allows remote attackers to cause a denial of service crash via a JOIN command without a channel argument...
CVE-2007-6062
irc-channel.c in ngIRCd before 0.10.3 allows remote attackers to cause a denial of service crash via a JOIN command without a channel argument...
ngIRCd JOIN命令解析拒绝服务漏洞
ngIRCd是一款流行的IRC聊天服务程序。 ngIRCd处理JOIN命令存在问题，远程攻击者可以利用漏洞对系统进行拒绝服务攻击。 目前没有详细漏洞细节提供。 ngIRCd ngIRCd 0.10.2 ngIRCd ngIRCd 0.8.2 ngIRCd ngIRCd 0.8.1 ngIRCd ngIRCd 0.8 ngIRCd ngIRCd 0.7.7 ngIRCd ngIRCd 0.7.6 ngIRCd ngIRCd 0.7.5 ngIRCd ngIRCd 0.7.1 ngIRCd ngIRCd 0.7 ngIRCd ngIRCd 0.6.1 ngIRCd ngIRCd 0.6...
Code injection
Soldat game server 1.4.2 and earlier, and dedicated server 2.6.2 and earlier, allows remote attackers to cause a denial of service client lockout via a series of UDP join packets from a spoofed IP address, which triggers temporary blacklisting of this IP address...
CVE-2007-4532
Soldat game server 1.4.2 and earlier, and dedicated server 2.6.2 and earlier, allows remote attackers to cause a denial of service client lockout via a series of UDP join packets from a spoofed IP address, which triggers temporary blacklisting of this IP address...
CVE-2007-4532
Soldat game server 1.4.2 and earlier, and dedicated server 2.6.2 and earlier, allows remote attackers to cause a denial of service client lockout via a series of UDP join packets from a spoofed IP address, which triggers temporary blacklisting of this IP address...
CVE-2007-4358
Zoidcom 0.6.7 and earlier allows remote attackers to cause a denial of service application crash via a JOIN packet aka connection packet containing 0x69 in the ninth byte, which triggers a "double-delete" of trace data, a different vulnerability than CVE-2005-1643...
Design/Logic Flaw
Zoidcom 0.6.7 and earlier allows remote attackers to cause a denial of service application crash via a JOIN packet aka connection packet containing 0x69 in the ninth byte, which triggers a "double-delete" of trace data, a different vulnerability than CVE-2005-1643...
CVE-2007-4358
Zoidcom 0.6.7 and earlier allows remote attackers to cause a denial of service application crash via a JOIN packet aka connection packet containing 0x69 in the ninth byte, which triggers a "double-delete" of trace data, a different vulnerability than CVE-2005-1643...
CVE-2007-4358
CVE-2007-4358 affects Zoidcom 0.6.7 and earlier. A JOIN/connection packet containing 0x69 in the ninth byte triggers a double-delete of trace data, leading to denial of service (application crash). This is described as a separate issue from CVE-2005-1643. Affected component: Zoidcom’s handling of...
Visual IRC Join命令响应远程栈溢出漏洞
BUGTRAQ ID: 24798 Visual IRC（ViRC）是一个聊天客户端软件，可以进行仿真的语音聊天和图象传输。 Visual IRC在处理服务器回应数据时存在缓冲区溢出漏洞，远程恶意IRC服务器可能利用此漏洞控制用户机器。 如果Visual IRC用户受骗连接到了恶意的IRC服务器的话，则客户端在处理服务器所发送的超长JOIN命令响应时可能会触发栈溢出，导致执行任意指令。 Jesse McGrew Visual IRC 2.0 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.visualirc.net/...
ViRC 2.0 (JOIN Response) Remote SEH Overwrite Exploit 0day
No description provided by source. !/usr/bin/python ViRC 2.0 'JOIN Response' 0day Remote SEH Overwrite PoC Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on Visual IRC 2.0 / 2k SP4 Polish Shellcode type: Windows Execute Command calc.exe How stuff works ? .. ViRC -----...