idauto-dos.txt

2007/05/13 -------------------------------------------------------------------------------------------------- ID Automation Linear Barcode ActiveX Control IDAutomationLinear6.dll v. 1.6.0.5 DoS url: http://www.idautomation.com/ price: from $199 to $3,570 author: shinnai mail:...

CVE-2007-2658

Unspecified vulnerability in the ID Automation Linear Barcode 1.6.0.5 ActiveX control in IDAutomationLinear6.dll allows remote attackers to cause a denial of service via a long argument to the SaveEnhWMF method...

CVE-2007-2658

CVE-2007-2658 affects the ID Automation Linear Barcode 1.6.0.5 ActiveX control (IDAutomationLinear6.dll). The issue is an unspecified flaw in the SaveEnhWMF method that allows remote attackers to cause a denial of service by passing a long argument. The provided documents do not include remediati...

ID Automation Linear Barcode ActiveX Denial of Service Exploit

No description provided by source. span style="font: 14pt Courier New;"p align="center"b2007/05/13/b/p/span pre codespan style="font: 10pt Courier New;"span class="general1-symbol"-------------------------------------------------------------------------------------------------- bID Automation...

ID Automation Linear Barcode ActiveX Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================================== ID Automation Linear Barcode ActiveX Denial of Service Exploit ============================================================== 2007/05/13...

ID Automation Linear Barcode - ActiveX Denial of Service

ID Automation Linear Barcode - ActiveX Denial of Service 2007/05/13 -------------------------------------------------------------------------------------------------- ID Automation Linear Barcode ActiveX Control IDAutomationLinear6.dll v. 1.6.0.5 DoS url: http://www.idautomation.com/ price: from...

Jetty可预测随机会话ID漏洞

Jetty是一款流行的Java Web服务器。 Jetty的会话ID随机生成实现上存在漏洞，远程攻击者可能利用此漏洞获取非授权访问。 Jetty使用java.util.Random生成会话ID。java.util.random实现以下形式的线性同余随机数生成器： synchronized protected int nextint bits seed = seed 0x5DEECE66DL + 0xBL & 1L 48 - 1; return intseed 48 - bits;...

CVE-2006-0037

ipnatpptp in the PPTP NAT helper netfilter/ipnathelperpptp.c in Linux kernel 2.6.14, and other versions, allows local users to cause a denial of service memory corruption or crash via a crafted outbound packet that causes an incorrect offset to be calculated from pointer arithmetic when non-linea...

CVE-2006-0037

ipnatpptp in the PPTP NAT helper netfilter/ipnathelperpptp.c in Linux kernel 2.6.14, and other versions, allows local users to cause a denial of service memory corruption or crash via a crafted outbound packet that causes an incorrect offset to be calculated from pointer arithmetic when non-linea...

CVE-1999-1111

The CVE-1999-1111 entry describes a vulnerability in StackGuard before 1.21 where an attacker can bypass Random and Terminator Canary protections by a non-linear attack that directly modifies the return-address pointer instead of overflowing a buffer. Documents do not provide exploitation details...

Новый вид сканирования - Pixie scan

Используется факт линейного изменения IP ID, что позволяет просканировать открытые порты даже за маскарирующим сервером используя пакет с внутреннего адреса и проверяя прирощение IP ID...

Catastrophic failure of Strip password generation.

Executive summary: If you have ever used Strip for the Palm to generate your passwords, change them. Change them NOW. Strip Secure Tool for Recalling Important Passwords is a nice encrypted password notebook for the Palm; see http://www.zetetic.net/products.html for details. Strip-0.5 also featur...