9971 matches found
DeleGate array index overflow
Array index overflow on large number of User-Agent in robots.txt...
zlib gzprintf() buffer overflow
Buffer overflow if resulting string exceeds 4K buffer...
Checkpoint Firewall fails on CVP scanning for large files
Subject: Checkpoint Firewall fails on CVP scanning large files Affected: Check Point FireWall-1 NG Feature Pack 3 Vendor: Check Point Author: Igor U.Miturin [email protected] Date: February, 5 2003 Risk: Low Vendor Notified: Yes I. Intro Check Point FireWall-1 is enterprise firewall...
CVE-2002-1932
Microsoft Windows XP and Windows 2000, when configured to send administrative alerts and the "Do not overwrite events clear log manually" option is set, does not notify the administrator when the log reaches its maximum size, which allows local users and remote attackers to avoid detection...
CVE-2002-2243
Akfingerd 0.5 and possibly earlier versions only allows one connection at a time and does not time out connections, which allows remote attackers to cause a denial of service refused connections by opening a connection and not closing it...
MySQL < 3.23.54 / 4.0.6 Multiple Vulnerabilities
The remote host is running a version of MySQL older than 3.23.54 or 4.0.6. The remote version of this product contains several flaw that could allow an attacker to crash this service remotely. C Tenable Network Security, Inc. Ref: From: Stefan Esser Message-ID: To: [email protected]...
CVE-2002-0964
Half-Life Server 1.1.1.0 and earlier allows remote attackers to cause a denial of service resource exhaustion via multiple responses to the initial challenge with different cdkey values, which reaches the player limit and prevents other players from connecting until the original responses have...
IBM WebSphere DoS
There is no limit for HTTP headers...
Alleged Outlook Express 5/6 Link - Denial of Service
source: https://www.securityfocus.com/bid/5682/info Reportedly, when decoding a HTML email, Outlook Express will stop responding upon encountering a link longer than 4095 characters. It is not confirmed why this behaviour occurs...
Alleged Outlook Express 56 Link - Denial of Service
Alleged Outlook Express 56 Link - Denial of Service source: https://www.securityfocus.com/bid/5682/info Reportedly, when decoding a HTML email, Outlook Express will stop responding upon encountering a link longer than 4095 characters. It is not confirmed why this behaviour occurs...
Another flaw in Apache?
Hello. While playing with the SetEnv directive with Apache, I noticed that httpd processes are dying with a signal 11 if the data stored in an environment variable was too long. I simply triggered the bug by creating a .htaccess file so a regular user can do it with : SetEnv DATELOCALE "..." The...
Half-Life Server 1.1/3.1 - New Player Flood Denial of Service
source: https://www.securityfocus.com/bid/5076/info Half-Life is a popular game distributed and maintained by Valve Software. It includes features that allow users to game locally, or in distributed network environments. Valve Software also distributes a dedicated server product. A denial of...
OpenBSD local DoS and root exploit
The following is research material from FozZy from Hackademy and Hackerz Voice newspaper http://www.hackerzvoice.org, and can be distributed modified or not if proper credits are given to them. For educational purposes only, no warranty of any kind, I may be wrong, this post could kill you mail...
3CDaemon 2.0 - Buffer Overflow (1)
3CDaemon 2.0 - Buffer Overflow 1 // source: https://www.securityfocus.com/bid/4638/info 3CDaemon is an FTP server developed by Dan Gill of 3Com. Reportedly, it is possible to initiate a buffer overflow on a host running 3CDaemon. Submitting an unusually large amount of data to the ftp server, cou...
Переполнение буфера в Ettercap (buffer overflow)
Переполнение буфера при разборе пакета если MTU 2000...
Microsoft Windows NT 4.02000 - NTFS File Hiding
Microsoft Windows NT 4.02000 - NTFS File Hiding source: https://www.securityfocus.com/bid/3989/info There exists a condition in Microsoft Windows operating systems using NTFS that may allow for files to be hidden. Though the NTFS filesystem allows for a 32000 character path, Microsoft Windows...
Microsoft Windows NT 4.0/2000 - NTFS File Hiding
source: https://www.securityfocus.com/bid/3989/info There exists a condition in Microsoft Windows operating systems using NTFS that may allow for files to be hidden. Though the NTFS filesystem allows for a 32000 character path, Microsoft Windows operating systems NT4, 2000 and XP enforce a 256...
Microsoft Windows Server 2000 - RunAs Service Denial of Service
// source: https://www.securityfocus.com/bid/3291/info The Windows 2000 RunAs service allows an application or service to be executed as a different user. It is accessed by holding down the shift key and right mouse clicking on an icon, then selecting 'Run as...' from the context menu. When the...
CVE-2001-1388
iptables before 1.2.4 does not accurately convert rate limits that are specified on the command line, which could allow attackers or users to generate more or less traffic than intended by the administrator...