Code injection

Foxy P2P software allows remote attackers to cause a denial of service memory consumption via a foxy URI with a download action and a large fs value...

CVE-2008-6742

Foxy P2P software allows remote attackers to cause a denial of service memory consumption via a foxy URI with a download action and a large fs value...

CVE-2008-6742

Foxy P2P software allows remote attackers to cause a denial of service memory consumption via a foxy URI with a download action and a large fs value...

CVE-2008-6742

The CVE-2008-6742 entry describes a DoS in Foxy P2P software caused by processing a foxy URI with a download action and an excessively large fs parameter, leading to memory consumption. The vulnerability is network-exploitable, with no authentication required, and the available documents do not s...

SRI releases Conficker scanner source code

The experts at SRI International, who have been tracking the Conficker worm as closely as anyone, have released the source code to the scanner they wrote to detect the active P2P scanning that Conficker-infected machines perform. The Conficker worm exhibits a number of interesting characteristics...

Honeynet Project finds way to fingerprint Conficker infections

Just days ahead of an April 1st activation date for the Conficker worm, a pair of security researchers from the Honeynet Project have scored a major breakthrough, finding a way to remotely and anonymously fingerprint the malware on infected networks. Now, with the help of Dan Kaminsky and Rich...

PPLive 1.9.21 - '/LoadModule' URI Handlers Argument Injection

-------------------------------------------------------------------------------- PPLive = 1.9.21 uri handlers "/LoadModule" remote argument injection by Nine:Situations:Group::strawdog -------------------------------------------------------------------------------- software...

[SECURITY] [DSA 1739-1] New mldonkey packages fix information disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1739-1 [email protected] http://www.debian.org/security/ Florian Weimer March 13, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1739-1] New mldonkey packages fix information disclosure

------------------------------------------------------------------------ Debian Security Advisory DSA-1739-1 [email protected] http://www.debian.org/security/ Florian Weimer March 13, 2009 http://www.debian.org/security/faq -...

DSA-1739-1 mldonkey - information disclosure

Bulletin has no description...

Thunder

Thunder AKA Xunlei is a popular peer to peer Chinese download manager and file sharing client that supports BitTorrent, eDonkey, Kad, and FTP. Thunder accelerates downloads by accessing its proprietary P2P network in addition to the given HTTP download. There are cases in which certain traffic,...

ooVoo URI处理器远程栈溢出漏洞

BUGTRAQ ID: 32251 ooVoo是免费的视频聊天工具。 ooVoo在处理命令行参数时存在栈溢出漏洞。如果用户受骗访问了恶意网页并向ooVoo: URI处理器传送了超长字符串的话，就可能触发这个溢出，导致执行任意指令。 ooVoo LLC ooVoo 1.7.1.57 ooVoo LLC ooVoo 1.7.1.35 ooVoo LLC --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.oovoo.com ?php / ooVoo 1.7.1.35 URL Protocol remote...

Gentoo Security Advisory GLSA 200710-25 (mldonkey)

The remote host is missing updates announced in advisory GLSA 200710-25. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

P2P Share Spy 2.2 Local Password Disclosure Exploit

No description provided by source. / P2P Share Spy 2.2 Local Exploit by Kozan Application: P2P Share Spy 2.2 Vendor: Rebrand Software - www.rebrandsoftware.com Vulnerable Description: P2P Share Spy 2.2 discloses passwords to local users. Discovered & Coded by: Kozan Credits to ATmaCA Web :...

eMule操作系统用户帐户信息泄漏漏洞

BUGTRAQ ID: 30224 CNCAN ID：CNCAN-2008071508 eMule是一款流行的P2P下载软件。 eMule在发送共享文件列表时会泄漏操作系统用户帐户信息，远程攻击者可以利用漏洞借此这些敏感信息进行工程学等攻击。 当用户请求其他用户的共享文件列表时，文件夹的全路径会被发送，并在Emule日志中完全可见，如： Requesting shared files from 'yohan' User yohan 1507... shares directory 'C:\Documents and Settings\Jean-Denis\My documents...'...

Microsoft Malware Protection Engine TWO DoS Vulnerabilities

CVE-2008-1437 CVE-2008-1438 There are two vulnerabilities idenitified in Microsoft Antivirus product. These vulnerabilities can be exploited to cause Denial of service. 1. CVE-2008-1437 PE Parsing Memory Corruption While scanning a specially crafted PE file, Malware orotection engine...

DC++私密消息远程拒绝服务漏洞

BUGTRAQ ID: 30037 CVE ID：CVE-2008-2954 CNCVE ID：CNCVE-20082954 DC++是一款开放源码的免费的P2P客户端软件。 DC++不正确处理私密消息，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 DC++ 0.706 可参考如下补丁信息： http://cvs.berlios.de/cgi-bin/viewcvs.cgi/linuxdcpp/linuxdcpp/client/NmdcHub.cpp.diff?r1=1.14&r2=1.15&sortby=date...

P2P Foxy Out of Memory Denial of Service Exploit

No description provided by source. P2P Foxy Out of memory Exploit Vulnerability Discovered by Styxosaurus Styxosaurus at gmail dot com Foxy is one of the most popular P2P software in Chinese users http://tw.gofoxy.net/ It starts to request more memory and freeze as when "&fs=" meet some large mag...

P2P Foxy - Out of Memory Denial of Service

P2P Foxy Out of memory Exploit Vulnerability Discovered by Styxosaurus Styxosaurus at gmail dot com Foxy is one of the most popular P2P software in Chinese users http://tw.gofoxy.net/ It starts to request more memory and freeze as when "&fs=" meet some large magic point. Music.wmv milw0rm.com...

P2P Foxy Out of Memory Denial of Service Exploit

Exploit for unknown platform in category dos / poc ================================================ P2P Foxy Out of Memory Denial of Service Exploit ================================================ P2P Foxy Out of memory Exploit Vulnerability Discovered by Styxosaurus Styxosaurus at gmail dot com...