4809 matches found
CVE-2004-0062: Undefined Security Weakness
Integer overflow in the rnd arithmetic rounding function for various versions of FishCart before 3.1 allows remote attackers to "cause negative totals" via an order with a large quantity...
CVE-2003-0914
ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL time-to-live value...
CVE-2003-0914: Undefined Security Weakness
ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL time-to-live value...
ISC BIND 8 vulnerable to cache poisoning via negative responses
Overview The BIND 8 name server contains a cache poisoning vulnerability that allows attackers to conduct denial-of-service attacks on specific target domains. Description Several versions of the BIND 8 name server are vulnerable to cache poisoning via negative responses. To exploit this...
bind negative response cache poisoning
By spoofing negative reply it's possible to DoS name resolution while spoofed reply doesn't expire from cash...
bind8 negative cache poison attack
A programming error in BIND 8 named can result in a DNS message being incorrectly cached as a negative response. As a result, an attacker may arrange for malicious DNS messages to be delivered to a target name server, and cause that name server to cache a negative response for some target domain...
FreeBSD-SA-03:19.bind
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-03:19.bind Security Advisory The FreeBSD Project Topic: bind8 negative cache poison attack Category: contrib Module: contribbind Announced: 2003-11-28 Credits:...
ISC BIND < 8.3.7 / 8.4.3 Negative Record Cache Poisoning
The remote BIND server, according to its version number, is vulnerable to a negative cache poison bug that may allow an attacker to disable this service remotely. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11932; scriptversion"1.19"; scriptcvsdate"Date: 2018/06/2...
DEBIAN-CVE-2003-1084
Monit 1.4 to 4.1 allows remote attackers to cause a denial of service daemon crash via an HTTP POST request with a negative Content-Length field...
CVE-2003-0848: Undefined Security Weakness
Heap-based buffer overflow in main.c of slocate 2.6, and possibly other versions, may allow local users to gain privileges via a modified slocate database that causes a negative "pathlen" value to be used...
BaSoMail 1.24 - POP3 Server Denial of Service
BaSoMail 1.24 - POP3 Server Denial of Service source: https://www.securityfocus.com/bid/7724/info BaSoMail POP3 server has been reported prone to a remote denial of service vulnerability. It has been reported that a remote authenticated attacker, may supply negative value integers to several POP3...
DEBIAN-CVE-2003-0213
ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length field of 0 or 1, which causes a negative value to be fed into a read operation, leading to a buffer overflow...
Cisco Content Service Switch 11000 Series DNS Negative Cache of Information Denial-of-Service Vulnerability
...
Multiple bugs in MDaemon
IMAP4 buffer overflow, negative array indexes problem in POP3...
CVE-2003-0163: Undefined Security Weakness
decryptmsg for the Gaim-Encryption GAIM plugin 1.15 and earlier does not properly validate a message length parameter, which allows remote attackers to cause a denial of service crash via a negative length, which overwrites arbitrary heap memory with a zero byte...
Poptop < 1.1.3-b3 and 1.1.3-20030409 Negative Read Overflow
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
PoPToP < 1.1.3-b3/1.1.3-20030409 - Negative Read Overflow (Metasploit)
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Poptop...
PoPToP 1.1.3-b31.1.3-20030409 - Negative Read Overflow (Metasploit)
PoPToP 1.1.3-b31.1.3-20030409 - Negative Read Overflow Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Poptop Negative Read Overflow
This is an exploit for the Poptop negative read overflow. This will work against versions prior to 1.1.3-b3 and 1.1.3-20030409, but I currently do not have a good way to detect Poptop versions. The server will by default only allow 4 concurrent manager processes what we run our code in, so you...
CVE-2002-0818: Undefined Security Weakness
wwwoffled in World Wide Web Offline Explorer WWWOFFLE allows remote attackers to cause a denial of service and possibly execute arbitrary code via a negative Content-Length value...