CVE-2005-2674

Note: the vendor has disputed this issue. Multiple cross-site scripting XSS vulnerabilities in Land Down Under LDU 800 allow remote attackers to inject arbitrary web script or HTML via the 1 c or 2 m parameters to index.php or 3 w parameter to journal.php. NOTE: this issue has been disputed by th...

CVE-2005-2675

Note: the vendor has disputed this issue. Multiple SQL injection vulnerabilities in Land Down Under LDU 800 allow remote attackers to execute arbitrary SQL commands via the 1 s or 2 m parameter to forums.php, 3 o, 4 w, 5 s, or 6 p parameter to list.php, 7 m parameter to journal.php, 8 x or 9 n...

PT-2005-3560 · Land Down Under · Land Down Under (Ldu) 800

Name of the Vulnerable Software and Affected Versions: Land Down Under LDU 800 Description: Multiple cross-site scripting XSS vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the c or m parameters to "index.php" or the w parameter to "journal.php". The vendor has...

Land Down Under 800801 - forums.php Multiple SQL Injections

Land Down Under 800801 - forums.php Multiple SQL Injections source: https://www.securityfocus.com/bid/14618/info Land Down Under is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successful...

Land Down Under 800/801 - 'journal.php?m' SQL Injection

source: https://www.securityfocus.com/bid/14618/info Land Down Under is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation may allow the attacker to compromise the...

Windows (XP, 2k3, Longhorn) is vulnerable to IpV6 Land attack.

Hi! The land attack described in - http://www.securityfocus.com/archive/1/392354 - is fixed for ipv4 by last security updates, but not for ipv6 protocol. As in IpV4 version of the attack, the build-in firewall has to be turned off to experience the result 1-5 seconds of DoS condition. Tools used:...

CVE-2004-2038

CVE-2004-2038 concerns a cross-site scripting (XSS) vulnerability in Land Down Under (LDU) prior to version 700. The issue allows remote attackers to inject arbitrary web script or HTML via a BBCode img tag in one of three PHP files: functions.php , header.php , or auth.inc.php . The provided doc...

CVE-2004-2038

Cross-site scripting XSS vulnerability in Land Down Under LDU before LDU 700 allows remote attackers to inject arbitrary web script or HTML via a BBcode img tag in 1 functions.php, 2 header.php or 3 auth.inc.php...

Microsoft Windows vulnerable to DoS via LAND attack

Overview A vulnerability in Microsoft Windows may allow a remote attacker to cause a denial of service. Description Microsoft Windows XP SP2 and Windows Server 2003 are vulnerable to a denial-of-service attack via a crafted TCP packet. The packet is spoofed in a manner such that the source and...

Microsoft Windows TCP/IP stack multiple vulnerabilities

Memory corruption on IP packets handling, TCP connection reset with spoofed TCP and ICMP packets, a varinat of LAND attack...

CVE-2005-0688

Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service CPU consumption via a TCP packet with the SYN flag set and the same destination and source address and port, aka a reoccurrence of the "Land" vulnerability CVE-1999-0016...

Windows Server 2003 and XP SP2 LAND attack vulnerability

Hello, everyone. Windows Server 2003 and XP SP2 with Windows Firewall turned off are vulnerable to LAND attack. LAND attack: Sending TCP packet with SYN flag set, source and destination IP address and source and destination port as of destination machine, results in 15-30 seconds DoS condition...

CVE-2004-2669

Multiple SQL injection vulnerabilities in Land Down Under LDU v701 allow remote attackers to execute arbitrary SQL commands or obtain the installation path via parameters including 1 s, w, and d in users.php, 2 id in comments.php, 3 rusername in auth.php, or 4 h in plug.php...

mp-ldu.txt

Multiple SQL-injections in Land Down Under v701 Date: 30.10.04 Application: Land Down Under v701 Platform: PHP Severity: Medium Link: http://www.neocrome.net Vendor Status Vulnerabilities have been fixed. Details An input validation vulnerability was reported in Land Down Under v701. A remote use...

[SA13034] Land Down Under SQL Injection Vulnerabilities

TITLE: Land Down Under SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA13034 VERIFY ADVISORY: http://secunia.com/advisories/13034/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Land Down Under LDU http://secunia.com/product/2612/ DESCRIPTION: Positiv...

CVE-2004-2038

Cross-site scripting XSS vulnerability in Land Down Under LDU before LDU 700 allows remote attackers to inject arbitrary web script or HTML via a BBcode img tag in 1 functions.php, 2 header.php or 3 auth.inc.php...

CVE-2003-1315

SQL injection vulnerability in auth.php in Land Down Under LDU v601 and earlier allows remote attackers to execute arbitrary SQL commands...

[UNIX] Land Down Under auth.php SQL Injection

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-1999-0016

CVE-1999-0016 describes a land IP denial-of-service condition: a TCP packet with SYN set and identical source/destination addresses and ports can exhaust the target’s CPU. Connected records confirm the same issue reappears in later advisories (e.g., CVE-2005-0688) and is observed in Windows XP SP...

annex-DoS.txt

Date: Sun, 26 Jul 1998 18:45:44 +1000 From: Matt Carter Subject: Re: Annex DoS i made a post about some time ago. a simple 'strobe' will bring a bay terminal server crashing to it's knees. i notified bay years ago .. hell lets go something even simpler. 1 x 32k ping packet ever second at a annex...