CVE-2004-1501

The CVE-2004-1501 entry concerns the webmail service in Lan Suite 602, versions up to 2004.0.04.0909 and earlier. The vulnerability allows remote attackers to cause a denial of service (CPU and memory consumption) by sending a POST request with a large Content-Length value and then disconnecting ...

CVE-2004-1502

CVE-2004-1502 refers to the Telnet proxy in 602 Lan Suite 2004.0.04.0909 and earlier. The issue allows remote attackers to cause a denial of service (socket exhaustion) by sending a Telnet request to an IP address of the proxy’s network interface, which triggers a loop. The available sources do n...

security flaw

The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service crash via a malformed NTLM type 3 message that triggers a NULL dereference...

CVE-2005-0328

Zyxel P310, P314, P324 and Netgear RT311, RT314 running the latest firmware, allows remote attackers on the WAN to obtain the IP address of the LAN side interface by pinging a valid LAN IP address, which generates an ARP reply from the WAN address side that maps the LAN IP address to the WAN's MA...

squid -- denial-of-service vulnerabilities

The Squid team reported several denial-of-service vulnerabilities related to the handling of DNS responses and NT Lan Manager messages. These may allow an attacker to crash the Squid cache...

CVE-2004-2549

Nortel Wireless LAN WLAN Access Point AP 2220, 2221, and 2225 allow remote attackers to cause a denial of service service crash via a TCP request with a large string, followed by 8 newline characters, to 1 the Telnet service on TCP port 23 and 2 the HTTP service on TCP port 80, possibly due to a...

curl -- authentication buffer overflow vulnerability

Two iDEFENSE Security Advisories reports: An exploitable stack-based buffer overflow condition exists when using NT Lan Manager NTLM authentication. The problem specifically exists within Curlinputntlm defined in lib/httpntlm.c. Successful exploitation allows remote attackers to execute arbitrary...

CVE-2004-0335

LAN SUITE Web Mail 602Pro, when configured to use the "Directory browsing" feature, allows remote attackers to obtain a directory listing via an HTTP request to 1 index.html, 2 cgi-bin/, or 3 users/...

CVE-2004-0337

Cross-site scripting XSS vulnerability in LAN SUITE Web Mail 602Pro allows remote attackers to execute arbitrary script or HTML as other users via a URL to index.html, followed by a / slash and the desired script. NOTE: the vendor states that this bug could not be reproduced, so this issue may be...

Resources consumption in 602 Lan Suite 2004.0.04.0909

Luigi Auriemma Application: 602 Lan Suite http://www.software602.com/products/ls/ Versions: = 2004.0.04.0909 Platforms: Windows Bugs: A resources consumption through webmail B sockets consuption through telnet proxy loop Exploitation: remote Date: 06 November 2004 Author: Luigi Auriemma e-mail:...

Buffer-overflow in ShixxNOTE 6.net

Luigi Auriemma Application: ShixxNote 6.net http://www.shixxnote.com Versions: 6.net, doesn't exist a specific version or build number but the latest change in Readme.txt something similar to a changelog is 117 Platforms: Windows Bug: buffer-overflow Exploitation: remote Date: 13 October 2004...

Cisco VPN Concentrator LAN-to-LAN IPSEC Tunnel Termination DoS (Bug ID CSCdx54675)

Binary data 2237.prm...

Cisco VPN Concentrator LAN-to-LAN IPSEC Tunnel Termination DoS (Bug ID CSCdx54675)

Binary data 2239.prm...

CVE-2002-1102

The LAN-to-LAN IPSEC capability for Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.4, allows remote attackers to cause a denial of service via an incoming LAN-to-LAN connection with an existing security association with another device on the remote network, which causes the concentrator to...

CVE-2002-1102

CVE-2002-1102 affects Cisco VPN 3000 Concentrator LAN-to-LAN IPSEC capability (versions 2.2.x and 3.x before 3.5.4). A remote attacker can trigger a denial of service by initiating a LAN-to-LAN connection that conflicts with an existing security association, causing the concentrator to terminate ...

CVE-2004-0336

The CVE-2004-0336 issue affects LAN SUITE Web Mail 602Pro, where a vulnerability in the mail login form allows remote attackers to obtain the path to the mail directory, exposing sensitive information. The core cause is disclosure of internal file paths via the login interface. Impact is informat...

CVE-2004-0336

LAN SUITE Web Mail 602Pro allows remote attackers to gain sensitive information via the mail login form, which contains the path to the mail directory...

Policy - Halo LAN Gaming Client Detection

Binary data 1197.prm...

CVE-2004-0735

CVE-2004-0735 describes a stack-based buffer overflow in the getinfo command of Medal of Honor Allied Assault (and related Breakthrough/Spearhead versions) that enables remote code execution over UDP. Public exploit/publication artifacts exist (Metasploit module, PacketStorm release) and link to ...

CVE-2004-0391

Cisco Wireless LAN Solution Engine WLSE 2.0 through 2.5 and Hosting Solution Engine HSE 1.7 through 1.7.3 have a hardcoded username and password, which allows remote attackers to add new users, modify existing users, and change configuration...