PT-2010-3334 · Cursorarts · Zipwrangler

Name of the Vulnerable Software and Affected Versions: CursorArts ZipWrangler version 1.20 Description: The issue allows user-assisted remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename. This is due to a stack-based buffer overflow. Recommendations: F...

All Browsers - Long Unicode DoS PoC

Exploit for multiple platform in category dos / poc =================================== All Browsers - Long Unicode DoS PoC =================================== DrIDE - All Browsers - Long Unicode DoS PoC function boom //The number of strings increases the amount of memory consumed, quicker crash...

Debian DSA-2040-1 : squidguard - buffer overflow

It was discovered that in squidguard, a URL redirector/filter/ACL plugin for squid, several problems in src/sgLog.c and src/sgDiv.c allow remote users to either : - cause a denial of service, by requesting long URLs containing many slashes; this forces the daemon into emergency mode, where it doe...

All Browsers - Long Unicode Denial of Service (PoC)

All Browsers - Long Unicode Denial of Service PoC DrIDE - All Browsers - Long Unicode DoS PoC function boom //The number of strings increases the amount of memory consumed, quicker crash where applicable. var longunistring1 = unescape"%u4141%u4141"; var longunistring2 = unescape"%u4242%u4242"; va...

TFTPGUI Long Transport Mode Overflow

Exploit Title: TFTPGUI Long Transport Mode Overflow Date: 5/1/2010 Author: Jeremiah Talamantes Software Link: http://sourceforge.net/projects/tftputil/files/TFTPUtil/TFTPUtil%20Version%201.4.5/TFTPUtilGUIVersion1.4.5BinaryInstaller.exe/download Version: 1.4.5 Tested on: Windows XP, SP2 En CVE : N...

TFTPGUI - Long Transport Mode Overflow

TFTPGUI - Long Transport Mode Overflow Exploit Title: TFTPGUI Long Transport Mode Overflow Date: 5/1/2010 Author: Jeremiah Talamantes Software Link: http://sourceforge.net/projects/tftputil/files/TFTPUtil/TFTPUtil%20Version%201.4.5/TFTPUtilGUIVersion1.4.5BinaryInstaller.exe/download Version: 1.4....

TFTPGUI v1.4.5 Long Transport Mode Overflow

Exploit for windows platform in category dos / poc =========================================== TFTPGUI v1.4.5 Long Transport Mode Overflow =========================================== !/usr/bin/python print "\n" print " RedTeam Security " print " TFTPGUI Long Transport Mode Overflow " print "...

TFTPGUI - Long Transport Mode Overflow

Exploit Title: TFTPGUI Long Transport Mode Overflow Date: 5/1/2010 Author: Jeremiah Talamantes Software Link: http://sourceforge.net/projects/tftputil/files/TFTPUtil/TFTPUtil%20Version%201.4.5/TFTPUtilGUIVersion1.4.5BinaryInstaller.exe/download Version: 1.4.5 Tested on: Windows XP, SP2 En CVE : N...

VulnCheck KEV: CVE-2006-0005

Buffer overflow in the plug-in for Microsoft Windows Media Player WMP 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows remote attackers to execute arbitrary code via HTML with an EMBED element containing a long src...

VulnCheck KEV: CVE-2009-3867

Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.127, and SDK and JRE 1.4.x before 1.4.224 allows remote attackers to execute arbitrary code via a long file: URL in...

VulnCheck KEV: CVE-2007-3147

Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the send method. NOTE: some of these details are obtained from third party information...

ProSysInfo TFTP server TFTPDWIN 0.4.2 - 'Filename' Remote Buffer Overflow (Metasploit)

$Id: tftpdwinlongfilename.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CCProxy <= 6.2 - Telnet Proxy Ping Overflow

CCProxy. CVE-2004-2416. Remote exploit for windows platform $Id: ccproxytelnetping.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information...

CVE-2010-1597

Stack-based buffer overflow in zgtips.dll in ZipGenius 6.3.1.2552 allows user-assisted remote attackers to execute arbitrary code via a ZIP file containing an entry with a long filename...

CVE-2010-1158

Integer overflow in the regular expression engine in Perl 5.8.x allows context-dependent attackers to cause a denial of service stack consumption and application crash by matching a crafted regular expression against a long string...

DEBIAN-CVE-2010-1152

memcached.c in memcached before 1.4.3 allows remote attackers to cause a denial of service daemon hang or crash via a long line that triggers excessive memory allocation. NOTE: some of these details are obtained from third party information...

PT-2010-2868 · Memcached · Memcached

Name of the Vulnerable Software and Affected Versions: memcached versions prior to 1.4.3 Description: The issue allows remote attackers to cause a denial of service, resulting in the daemon hanging or crashing. This is achieved by sending a long line that triggers excessive memory allocation...

Trellian FTP Client 3.01 PASV Remote Buffer Overflow

This module exploits a buffer overflow in the Trellian 3.01 FTP client that is triggered through an excessively long PASV message. Module Options msf use exploit/windows/ftp/trellian/clientpasv msf undefinedclientpasv show actions ...actions... msf undefinedclientpasv set ACTION msf...

CVE-2010-1223

Multiple buffer overflows in CA XOsoft r12.0 and r12.5 allow remote attackers to execute arbitrary code via 1 a malformed request to the wsman/xosoapapi.asmx SOAP endpoint or 2 a long string to the entrypoint.aspx service...

Virata EmWeb R6.0.1 - Remote Crash

Virata EmWeb R6.0.1 - Remote Crash Exploit Title: Virata EmWeb R6.0.1 Remote Crash Vulnerability Date: 06/04/10 Author: Jobert Abma Online 24 Email: j.abmaatonline24dotnl Version: R6.0.1 Tested on: linux CVE : Code : This was written for educational purpose. Use it at your own risk. Author will b...