CVE-2006-6827: Undefined Security Weakness

Flash8b.ocx in Macromedia Flash 8 allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long string in the Flash8b.AllowScriptAccess method...

CVE-2006-5395

Buffer overflow in Microsoft Class Package Export Tool aka clspack.exe allows context-dependent attackers to execute arbitrary code via a long string. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-5395

Buffer overflow in Microsoft Class Package Export Tool aka clspack.exe allows context-dependent attackers to execute arbitrary code via a long string. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-5395: Undefined Security Weakness

Buffer overflow in Microsoft Class Package Export Tool aka clspack.exe allows context-dependent attackers to execute arbitrary code via a long string. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-5196

The HTTP interface in the Motorola SURFboard SB4200 Cable Modem allows remote attackers to cause a denial of service device crash via a request with MfcISAPICommand set to SecretProc and a long string in the Secret parameter...

ZDI-06-029: Ipswitch WS_FTP Server Checksum Command Parsing Buffer Overflow Vulnerabilities

ZDI-06-029: Ipswitch WSFTP Server Checksum Command Parsing Buffer Overflow Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-06-029.html September 26, 2006 -- CVE ID: CVE-2006-5000 -- Affected Vendor: Ipswitch -- Affected Products: Ipswitch WSFTP Server v5.04, v5.05 -- TippingPointT...

CVE-2006-3575: Undefined Security Weakness

Unknown vulnerability in the Buffer Overflow Protection in McAfee VirusScan Enterprise 8.0.0 allows local users to cause a denial of service unstable operation via a long string in the 1 "Process name", 2 "Module name", or 3 "API name" fields...

CVE-2006-2402

Buffer overflow in the changeRegistration function in servernet.cpp for Outgun 1.0.3 bot 2 and earlier allows remote attackers to change the registration information of other players via a long string...

Command injection

acFTP 1.4 allows remote attackers to cause a denial of service application crash via a long string with "" brace characters to the USER command...

CVE-2006-2242

acFTP 1.4 allows remote attackers to cause a denial of service application crash via a long string with "" brace characters to the USER command...

CVE-2006-1147: Undefined Security Weakness

The Comsprintf function in qshared.c in Alien Arena 2006 Gold Edition 5.00 does not properly NULL terminate certain long strings, which allows remote attackers possibly authenticated to cause a denial of service application crash via a long skin, weapon, or model name...

CVE-2006-0867

Buffer overflow in certain versions of South River aka SRT WebDrive, possibly version 6.08 build 1131 and version 8, allows remote attackers to cause a denial of service application crash and persistent erratic behavior via a long string in the name entry field...

CVE-2006-0357

Grant Averett Cerberus FTP Server 2.32, and possibly earlier versions, allows remote attackers to cause an unspecified denial of service via a long string that does not contain a valid FTP command...

CVE-2006-0357: Undefined Security Weakness

Grant Averett Cerberus FTP Server 2.32, and possibly earlier versions, allows remote attackers to cause an unspecified denial of service via a long string that does not contain a valid FTP command...

CVE-2006-0089

Buffer overflow in ESRI ArcPad 7.0.0.156 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a .amp file with a COORDSYS tag with a long string attribute...

CVE-2005-2141

TCP Chat 1.0 allows remote attackers to cause a denial of service crash via a long string to the chat service, possibly triggering a buffer overflow...

CVE-2004-1904

Buffer overflow in ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to execute arbitrary code via the Internacional property followed by a long string...

CVE-2004-1910: Undefined Security Weakness

rufsi.dll in Symantec Virus Detection allows remote attackers to cause a denial of service crash via a long string to the GetPrivateProfileString function. NOTE: this issue was originally reported as a buffer overflow, but that specific claim is disputed by the vendor, although a crash is...

CVE-2005-0892

Buffer overflow in smail 3.2.0.120 allows remote attackers or local users to execute arbitrary code via a long string in the MAIL FROM command and possibly other SMTP commands...

GoodTech Telnet Server < 5.0.7 - Buffer Overflow Crash

/ GoodTech Telnet Server Buffer Overflow Crash POC created by Komrade e-mail: unsecureataltervistadotorg web: http://unsecure.altervista.org Tested on GoodTech Telnet Server versions 4.0 - 5.0 versions prior to 5.0.7 on a Windows XP Professional sp2 operating system. This exploit connects to the...