CVE-2007-4404

ircu 2.10.12.01 allows remote attackers to 1 cause a denial of service flood wallops by joining two channels with certain long names that differ in the final character, which triggers a protocol violation and 2 cause a denial of service daemon crash via a "J 0:channel" message on a channel withou...

Design/Logic Flaw

Fedora Commons before 2.2.1 does not properly handle certain authentication requests involving Java Naming and Directory Interface JNDI, related to 1 a nonexistent account name in combination with an empty password, which allows remote attackers to trigger a certain "unexpected / strange response...

Analysis upload vulnerability-vulnerability warning-the black bar safety net

This article sent to the hacker line of Defense of 2006.4 period, reproduced please indicate the Analysis upload vulnerability in the form English / the loneliness of the hedgehog In a brief introduction through the injection vulnerability check and fill, following the coupling re-introduce a...

RMI Registry Detection

The remote host is running an RMI registry, which acts as a bootstrap naming service for registering and retrieving remote objects with simple names in the Java Remote Method Invocation RMI system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid22227;...

Construct a special file name to bypass multiple anti-virus engine-vulnerability warning-the black bar safety net

Category: design error Threat level: medium BUGTRAQ ID: 1 5 4 2 3 Affected by the anti-virus engine: Kaspersky Antivirus Symantec AntiVirus F-Prot Antivirus ClamWin Antivirus Avast Antivirus RAV AntiVirus Microsoft AntiSpyware Tested version: Symantec AntiVirus Corporate 8.0 Kaspersky Antivirus...

CVE-2003-1290

BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, with RMI and anonymous admin lookup enabled, allows remote attackers to obtain configuration information by accessing MBeanHome via the Java Naming and Directory Interface JNDI...

Construct a special file name to bypass multiple anti-virus engine-vulnerability warning-the black bar safety net

The author of the article: root webmasteratxfocus.org Category: design error Threat level: medium BUGTRAQ ID: 1 5 4 2 3 Affected by the anti-virus engine: Kaspersky Antivirus Symantec AntiVirus F-Prot Antivirus ClamWin Antivirus Avast Antivirus RAV AntiVirus Microsoft AntiSpyware Tested version:...

Construct a special file name to bypass multiple anti-virus engine-vulnerability warning-the black bar safety net

Affected by the anti - virusengine: Kaspersky Antivirus Symantec AntiVirus F-Prot Antivirus ClamWin Antivirus Avast Antivirus RAV AntiVirus Microsoft AntiSpyware Tested version: Symantec AntiVirus Corporate 8.0 Kaspersky Antivirus Personal Pro 4.5.0.104 Kaspersky Antivirus For MS NTServer 4.5.0.1...

DNS Zone Transfer (AXFR) Test - Active Check

The remote name server allows DNS zone transfers to be performed. SPDX-FileCopyrightText: 2005 [email protected] Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2005-0395

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate has been revoked by its Candidate Numbering Authority CNA because it was initially assigned to a problem that was not a security issue. Notes: none...

Solaris 8 (sparc) : 116997-01

SunOS 5.8: Federated Naming Service FNS X500 patch. Date this patch was last updated by Sun : May/04/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'...

CVE-2005-1518

Unknown vulnerability in Solaris 7 through 9, when using Federated Naming Services FNS, autofs, and FNS X.500 configuration, allows local users to cause a denial of service automountd crash when "accessing" /xfn/x500...

CVE-2005-1518

Unknown vulnerability in Solaris 7 through 9, when using Federated Naming Services FNS, autofs, and FNS X.500 configuration, allows local users to cause a denial of service automountd crash when "accessing" /xfn/x500...

CVE-2004-0567

The Windows Internet Naming Service WINS in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and Windows Server 2003 does not properly validate the computer name value in a WINS packet, which allows remote attackers to execute arbitrary code or cause a...

Microsoft Windows Internet Naming Service (WINS) replication protocol contains a heap-based buffer overflow

Overview A buffer overflow vulnerability in the Microsoft Windows Internet Naming Service WINS replication protocol may allow a remote attacker to execute arbitrary code or cause a denial-of-service condition. Description The Microsoft WINS service maps IP addresses to NETBIOS computer names. WIN...

CVE-2003-0825

The Windows Internet Naming Service WINS for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets, which allows attackers to cause a denial of service and possibly execute arbitrary code...

mysql -- GRANT access restriction problem

When a user is granted access to a database with a name containing an underscore and the underscore is not escaped then that user might also be able to access other, similarly named, databases on the affected system. The problem is that the underscore is seen as a wildcard by MySQL and therefore ...

Microsoft Windows Internet Naming Service (WINS) fails to properly validate the length of specially crafted packets

Overview Microsoft Windows Internet Naming Service WINS fails to properly validate the length of specially crafted packets which could allow an unauthenticated, remote attacker to cause a denial-of-service condition. Description The Windows Internet Naming Service WINS maps IP addresses to NETBIO...

Microsoft Windows Internet Naming Service Buffer Overflow Vulnerability

Description The Microsoft Windows Internet Name Service WINS is prone to a remotely exploitable buffer overflow condition. Sending a series of specially crafted packets to the service could cause it to fail. On some Windows platforms, this could also lead to execution of arbitrary code...

SnortCenter 0.9.5 temp file naming problems...

Hello. I am releasing this very late, as SnortCenter v0.9.6 has been released for a few weeks now. This bug was discovered a couple of months ago, but not released at the request of Stefan Dens, the author of SnortCenter. SnortCenter is a php based tool for aggregating many snort sensors into one...