security flaw

Memory leak in the ipoptionsget function in the Linux kernel before 2.6.10 allows local users to cause a denial of service memory consumption by repeatedly calling the ipcmsgsend function...

Snort 2.12.2 - DecodeTCPOptions Remote Denial of Service (1)

Snort 2.12.2 - DecodeTCPOptions Remote Denial of Service 1 // source: https://www.securityfocus.com/bid/12084/info Snort is reported prone to a remote denial of service vulnerability. The vulnerability is reported to exist in the DecodeTCPOptions function of 'decode.c', and is as a result of a...

Gadu-Gadu Remote DoS (all versions)

Product: Gadu-Gadu, all available versions including the latest 6.1 build156 Vendor: SMS-EXPRESS.COM http://www.gadu-gadu.pl Impact: Remote Denial of Service Severity: Important Author: Maciej Soltysiak [email protected] Advisory: http://www.soltysiak.com/gg-dos.txt ISSUE It is possible to...

PT-2004-2256 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.10 Description: The issue is related to an integer overflow in the ip options get function, which can be exploited by local users to cause a denial of service, resulting in a kernel crash. This is achieved b...

Hydra (NASL wrappers options)

This plugin sets options for the Hydra tests. Hydra finds passwords by brute force. To use the Hydra plugins, enter the 'Logins file' and the 'Passwords file under the 'Hydra NASL wrappers options' advanced settings block. TRUSTED...

atari800 - Local Privilege Escalation

/ Exploit for atari800 by pi3 pi3ki31ny pi3@pi3:$ ./p ...::: -= exploit for Atari800 by pi3 pi3ki31ny =- :::... Ussage: + ./p options -? -v choose a bug: 1 - first bug in all versions Atari800 2 - second bug in older Atari800 - modiy argv0 3 - third bug in config file - OS/AROM 4 - fourth bug in...

viewcvs -- information leakage

The hidecvsroot and forbidden configuration options are not properly honored by viewcvs when exporting to a tar file which can lead to information leakage...

atari800 Local Root Exploit

No description provided by source. / Exploit for atari800 by pi3 pi3ki31ny pi3@pi3:$ ./p ...::: -= exploit for Atari800 by pi3 pi3ki31ny =- :::... Ussage: + ./p options -? this help screen -v choose a bug: 1 - first bug in all versions Atari800 2 - second bug in older Atari800 - modiy argv0 3 -...

Kerio Personal Firewall 4.1.1 - Multiple IP Options Denial of Service Vulnerabilities

Kerio Personal Firewall 4.1.1 - Multiple IP Options Denial of Service Vulnerabilities / HOD-kerio-firewall-DoS-expl.c: 2004-11-10 Copyright c 2004 houseofdabus Kerio Personal Firewall Multiple IP Options Denial of Service PoC Coded by .:: houseofdabus ::. Bug discoveried by eEye:...

Kerio Firewall DoS

Problem with IP options processing allow to crash firewall with single packet...

CVE-2004-1625

pGina 1.7.6 and possibly older versions, when the Restart or Shutdown options are enabled on the login screen, allows remote attackers to cause a denial of service by connecting via Remote Desktop and clicking restart or shutdown...

PT-2004-2532 · Pgina · Pgina

Name of the Vulnerable Software and Affected Versions: pGina versions 1.7.6 and possibly older Description: The issue allows remote attackers to cause a denial of service by connecting via Remote Desktop and clicking restart or shutdown when the Restart or Shutdown options are enabled on the logi...

Microsoft Internet Explorer does not properly handle cached HTTPS contents

Overview Microsoft Internet Explorer fails to properly validate cached HTTPS contents, allowing an attacker to obtain information or spoof information on a secure web site. Description The HTTPS protocol is used to provide authentication, encryption, integrity, and non-repudiation services to web...

GLSA-200410-08 : ncompress: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200410-08 ncompress: Buffer overflow compress and uncompress do not properly check bounds on command line options, including the filename. Large parameters would trigger a buffer overflow. Impact : By supplying a carefully crafted...

Debian DSA-377-1 : wu-ftpd - insecure program execution

wu-ftpd, an FTP server, implements a feature whereby multiple files can be fetched in the form of a dynamically constructed archive file, such as a tar archive. The names of the files to be included are passed as command line arguments to tar, without protection against them being interpreted as...

Mozilla allows signed scripts calling "enablePrivilege" to change contents of a "grant" dialog

Overview A vulnerability in the way Mozilla and its derived programs display dialogs in some circumstances could allow a remote attacker to install and run software on a vulnerable system. Description The Mozilla web browser and related Mozilla products support the ability to run signed scripts...

Inkra 1504GX DoS

Invalid IP options handling...

GLSA-200409-08 : Ruby: CGI::Session creates files insecurely

The remote host is affected by the vulnerability described in GLSA-200409-08 Ruby: CGI::Session creates files insecurely The CGI::Session::FileStore implementation and presumably CGI::Session::PStore, which allow data associated with a particular Session instance to be written to a file, writes t...

amap (NASL wrapper)

This plugin runs amap to find open ports and identify applications on the remote host. See the section 'plugins options' to configure it. TRUSTED...

CVE-2003-0125: Undefined Security Weakness

Buffer overflow in the web interface for SOHO Routefinder 550 before firmware 4.63 allows remote attackers to cause a denial of service reboot and execute arbitrary code via a long GET /OPTIONS value...