CVE-2007-1306

Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service crash by sending a Session Initiation Protocol SIP packet without a URI and SIP-version header, which results in a NULL pointer dereference...

Socket unreacheable in Amp II engine

Luigi Auriemma Application: Amp II 3D engine http://www.4drulers.com/amp.html Versions: any version since there is no patch available Games: Gore: Ultimate Soldier = 1.50 ... possibly others ... Platforms: Windows Bug: socket unreacheable Exploitation: remote, versus server Date: 06 Jan 2005...

CVE-2004-0247

The client and server of Chaser 1.50 and earlier allow remote attackers to cause a denial of service crash via exception via a UDP packet with a length field that is greater than the actual data length, which causes Chaser to read unexpected memory...

Remote crash of Half-Life servers and clients (versions before the 07 July 2004)

Luigi Auriemma Application: Half-Life engine http://half-life.sierra.com http://www.steampowered.com Versions: before the 07 July 2004 both Steam and not-Steam Platforms: Windows and Linux Bug: writing on a read-only memory zone causing crash Risk: high Exploitation: remote, versus server and...

tcpdump L2TP DoS

L2TP packet containing 0xff,0x02 bytes causes parser to enter an infinite loop...

PoPToP buffer overflow

Buffer overflow on small packet length in PPTP header...

[SECURITY] [DSA 245-1] New dhcp3 packages fix potential network flood

-------------------------------------------------------------------------- Debian Security Advisory DSA 245-1 [email protected] http://www.debian.org/security/ Martin Schulze January 28th, 2003 http://www.debian.org/security/faq -...

ipfilter denial of service problem

Below is an ipfilter security issue, and my previous mail to author Darren was bounced back, so I think maybe I should mail it to this mailing list. Overview -- Anytime ipfilter see a packet with ACK bit set without the previous SYN, it will marked it as TCPSESTABLISHED in it's state table, and f...

CVE-2002-1175

The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service crash when Fetchmail attempts to read data beyond the expected boundary...

CVE-1999-0763

NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network...