SOL1989 - Apache/mod_ssl Worm vulnerability CA-2002-27

CERT Advisory CA-2002-27 reports a vulnerability that affects many operating systems. For more information about the vulnerability, refer to the following CERT website:...

Bypassing PFW/HIPS open process control with uncommon identifier

Hello, We would like to inform you about a vulnerability in personal firewalls and HIPS software. Description: Windows operating systems with NT kernel version 5.0 and higher i.e. Windows 2000, XP, 2003 use integer numbers divisible by four to identify processes. Internal implementation of system...

file integer overflow vulnerability

Overview The file program contains a vulnerability that may allow an attacker to execute arbitrary code or create a denial-of-service condition. Description file is a program for Unix-like operating systems that is used to determine what type of data is contained in a file.file contains a buffer...

Heap overflow

Heap-based buffer overflow in the kernel in NetBSD 3.0, certain versions of FreeBSD and OpenBSD, and possibly other BSD derived operating systems allows local users to have an unknown impact. NOTE: this information is based upon a vague pre-advisory with no actionable information. Details will be...

Rhapsody IRC 0.28b (NICK) Multiple fs and bof vulnerability

Rhapsody IRC 0.28b NICK Multiple fs and bof vulnerability Description: Rhapsody is a text console IRC client for Unix operating systems. It is small, fast, portable, easy to use and full featured. An intuitive menu-driven user interface makes rhapsody ideal for beginner to intermediate users. Fou...

Integer overflow

Integer overflow in Apple QuickTime before 7.1.5, when installed on Windows operating systems, allows remote user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted 3GP video file...

CVE-2007-0711

Integer overflow in Apple QuickTime before 7.1.5, when installed on Windows operating systems, allows remote user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted 3GP video file...

Apple Mac OSX 10.4.8 - QuickDraw GetSrcBits32ARGB Remote Memory Corruption

Apple Mac OSX 10.4.8 - QuickDraw GetSrcBits32ARGB Remote Memory Corruption source: https://www.securityfocus.com/bid/22207/info Mac OS X QuickDraw is prone to a remote memory-corruption vulnerability because the software fails to properly handle malformed PICT image files. Successfully exploiting...

Apple Mac OSX 10.4.8 - QuickDraw GetSrcBits32ARGB Remote Memory Corruption

source: https://www.securityfocus.com/bid/22207/info Mac OS X QuickDraw is prone to a remote memory-corruption vulnerability because the software fails to properly handle malformed PICT image files. Successfully exploiting this issue allows remote attackers to corrupt memory and crash the affecte...

TIBCO RendezVous Buffer Overflow (Exploit)

No description provided by source. / Exploit: TIBCO RendezVous remote buffer overflow exploit for Win32 public version Affected products: Tibco RendezOVous version =7.4.11 Multiple Vulnerabilities Author: Andres Tarasco Acu a atarasco @ sia.es Advisory: http://www.514.es Url: http://www.sia.es...

TIBCO Rendezvous <= 7.4.11 (add router) Remote BOF Exploit

Exploit for unknown platform in category remote exploits ========================================================== TIBCO Rendezvous = 7.4.11 add router Remote BOF Exploit ========================================================== / Exploit: TIBCO RendezVous remote buffer overflow exploit for Win...

Mozilla Firefox JavaScript Navigator object vulnerability

Added: 08/14/2006 CVE: CVE-2006-3677 BID: 19192 OSVDB: 27559 Background When used in a web page, Java references properties of the window.navigator object as it starts up in Firefox or SeaMonkey. Problem If a web page replaces the navigator object before starting Java, then the page could cause t...

Sendmail <= 8.13.5 Remote Signal Handling Exploit PoC

Exploit for linux platform in category dos / poc ===================================================== Sendmail 1: IP = sys.argv1 ifargc 2: defarch = intsys.argv2 ifargc 3: PORT = intsys.argv3 def ia32o: s='' w=chri % 256 o = o 8 x=chri % 256 o = o 8 y=chri % 256 o =...

Microsoft SMB Driver Local Denial Of Service Vulnerability

Description The Microsoft SMB driver is prone to a local denial-of-service vulnerability. A local attacker can exploit this issue to create processes that cannot be killed in affected operating systems, potentially denying service to legitimate users and other software on affected computers. This...

Microsoft SMB Driver - Local Denial of Service

Microsoft SMB Driver - Local Denial of Service // source: https://www.securityfocus.com/bid/18357/info The Microsoft SMB driver is prone to a local denial-of-service vulnerability. A local attacker can exploit this issue to create processes that cannot be killed in affected operating systems,...

Internet Explorer Javaprxy.dll heap overflow

Added: 06/05/2006 CVE: CVE-2005-2087 BID: 14087 OSVDB: 17680 Background Windows operating systems use the Component Object Model COM to allow various program components to be run within different applications. One such object, the JView Profiler Javaprxy.dll, is a debugger interface for Microsoft...

Internet Explorer IFRAME buffer overflow

Added: 05/03/2006 CVE: CVE-2004-1050 BID: 11515 OSVDB: 11337 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem A buffer overflow when processing the name attribute in an IFRAME tag allows command execution when a malformed web page ...

CVE-2006-1206

Matt Johnston Dropbear SSH server 0.47 and earlier, as used in embedded Linux devices and on general-purpose operating systems, allows remote attackers to cause a denial of service connection slot exhaustion via a large number of connection attempts that exceeds the MAXUNAUTHCLIENTS defined value...

CVE-2006-1206

Matt Johnston Dropbear SSH server 0.47 and earlier, as used in embedded Linux devices and on general-purpose operating systems, allows remote attackers to cause a denial of service connection slot exhaustion via a large number of connection attempts that exceeds the MAXUNAUTHCLIENTS defined value...

Microsoft Visual Studio .dbp and .sln buffer overflow

Added: 03/07/2006 CVE: CVE-2006-1043 BID: 16953 OSVDB: 23711 Background Microsoft Visual Studio is a product for facilitating software development on Windows operating systems. Problem A buffer overflow vulnerability leads to command execution when a specially crafted Database Project .dbp or...