Novell iManager Multiple Vulnerabilities

Novell iManager Multiple Vulnerabilities 1. Advisory Information Title: Novell iManager Multiple Vulnerabilities Advisory Id: CORE-2010-0316 Advisory URL: http://www.coresecurity.com/content/novell-imanager-buffer-overflow-off-by-one-vulnerabilities Date published: 2010-06-23 Date of last update:...

Wireshark SigComp Universal Decompressor Virtual Machine dissector DOS Vulnerability (Windows)

This host is installed with Wireshark and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodwiresharksigcompdissectordosvulnwin.nasl 5401 2017-02-23 09:46:07Z teissa $ Wireshark SigComp Universal Decompressor Virtual Machine dissector DOS Vulnerability Windows...

ftp-libopie NSE Script

Checks if an FTPd is prone to CVE-2010-1938 OPIE off-by-one stack overflow, a vulnerability discovered by Maksymilian Arciemowicz and Adam "pi3" Zabrocki. See the advisory at . Be advised that, if launched against a vulnerable host, this script will crash the FTPd. Script Arguments vulns.short,...

Command injection

Off-by-one error in the opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a long username, as...

CVE-2010-1938

The CVE-2010-1938 issue affects OPIE’s library (libopie) used by OPIE up to version 2.4.1-test1, on FreeBSD 6.4–8.1-PRERELEASE and other platforms. The vulnerability is an off-by-one error in __opiereadrec/readrec.c that can be triggered by a long USER command to FTP servers linked against libopi...

FreeBSD 8.0 ftpd Off-By-One Proof Of Concept

libopie readrec off-by one FreeBSD ftpd remote PoC Authors: - Maksymilian Arciemowicz - Adam 'pi3' Zabrocki http://securityreason.com/achievementsecurityalert/87 http://site.pi3.com.pl/adv/libopie-adv.txt http://blog.pi3.com.pl/?p=111 Date: - Dis.: 04.05.2010 - Pub.: 27.05.2010 CVE: CVE-2010-1938...

FreeBSD 8.0 ftpd off-by one PoC (FreeBSD-SA-10:05)

No description provided by source. FreeBSD 8.0 ftpd off-by one PoC FreeBSD-SA-10:05 CVE-2010-1938 FreeBSD-SA-10:05 Credit: Maksymilian Arciemowicz and Adam Zabrocki http://securityreason.com/achievementsecurityalert/87 http://security.freebsd.org/advisories/FreeBSD-SA-10:05.opie.asc...

CVE-2010-1938: Undefined Security Weakness

Off-by-one error in the opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a long username, as...

FreeBSD 8.0 ftpd off-by one PoC (FreeBSD-SA-10:05)

Exploit for freebsd platform in category dos / poc ================================================== FreeBSD 8.0 ftpd off-by one PoC FreeBSD-SA-10:05 ================================================== PoC: Connected to localhost. Escape character is '^'. 220 127.cx FTP server Version 6.00LS read...

FreeBSD-SA-10:05.opie

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-10:05.opie Security Advisory The FreeBSD Project Topic: OPIE off-by-one stack overflow Category: contrib Module: contribopie Announced: 2010-05-27 Credits:...

FreeBSD 8.0 - ftpd (FreeBSD-SA-10:05) Off-By-One (PoC)

FreeBSD 8.0 - ftpd FreeBSD-SA-10:05 Off-By-One PoC FreeBSD 8.0 ftpd off-by one PoC FreeBSD-SA-10:05 CVE-2010-1938 FreeBSD-SA-10:05 Credit: Maksymilian Arciemowicz and Adam Zabrocki http://securityreason.com/achievementsecurityalert/87 http://security.freebsd.org/advisories/FreeBSD-SA-10:05.opie.a...

FreeBSD 8.0 - 'ftpd' (FreeBSD-SA-10:05) Off-By-One (PoC)

FreeBSD 8.0 ftpd off-by one PoC FreeBSD-SA-10:05 CVE-2010-1938 FreeBSD-SA-10:05 Credit: Maksymilian Arciemowicz and Adam Zabrocki http://securityreason.com/achievementsecurityalert/87 http://security.freebsd.org/advisories/FreeBSD-SA-10:05.opie.asc http://blog.pi3.com.pl/?p=111 PoC: Connected to...

CVE-2010-1640

CVE-2010-1640 is an off-by-one/read out-of-bounds vulnerability in ClamAV 0.96 (parseicon in libclamav/pe_icons.c) that can cause a remote denial of service via a crafted PE icon. Connected advisories and public feeds corroborate the issue as a remote DoS, tied to improper rounding during scaling...

CVE-2010-1640

Off-by-one error in the parseicon function in libclamav/peicons.c in ClamAV 0.96 allows remote attackers to cause a denial of service crash via a crafted PE icon that triggers an out-of-bounds read, related to improper rounding during scaling...

PT-2010-3302 · Cisco · Clamav

Name of the Vulnerable Software and Affected Versions: ClamAV version 0.96 Description: The issue is related to an off-by-one error in the parseicon function, which can cause a denial of service crash when processing a crafted PE icon. This occurs due to an out-of-bounds read triggered by imprope...

CVE-2010-1640: Undefined Security Weakness

Off-by-one error in the parseicon function in libclamav/peicons.c in ClamAV 0.96 allows remote attackers to cause a denial of service crash via a crafted PE icon that triggers an out-of-bounds read, related to improper rounding during scaling...

Windows NT NNTP Component Buffer Overflow

The Network News Transfer Protocol NNTP component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an...

Windows NT NNTP Component Buffer Overflow

The Network News Transfer Protocol NNTP component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an...

Debian DSA-1902-1 : elinks - buffer overflow

Jakub Wilk discovered an off-by-one buffer overflow in the charset handling of elinks, a feature-rich text-mode WWW browser, which might lead to the execution of arbitrary code if the user is tricked into opening a malformed HTML page. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Debian DSA-1907-1 : kvm - several vulnerabilities

Several vulnerabilities have been discovered in kvm, a full virtualization system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-5714 Chris Webb discovered an off-by-one bug limiting KVM's VNC passwords to 7 characters. This flaw might make it...