GnuPG: read_block() corrupt key input validation

The readblock function in g10/import.c in GnuPG 1.4.x before 1.4.13 and 2.0.x through 2.0.19, when importing a key, allows remote attackers to corrupt the public keyring database or cause a denial of service application crash via a crafted length field of an OpenPGP packet...

DEBIAN-CVE-2012-6085

The readblock function in g10/import.c in GnuPG 1.4.x before 1.4.13 and 2.0.x through 2.0.19, when importing a key, allows remote attackers to corrupt the public keyring database or cause a denial of service application crash via a crafted length field of an OpenPGP packet...

Scada Modbus Incorrect Packet Length (CVE-2013-0662)

...

PT-2011-3409

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center IMC versions 5.0 before E0101L02 Description The issue is related to a stack-based buffer overflow in the img.exe component. This can be exploited by remote attackers to execute arbitrary code via a crafted...

Wireshark: Denial Of Service (application crash) via a pcap-ng file that contains a large packet-length field

wiretap/pcapng.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service application crash via a pcap-ng file that contains a large packet-length field...

Wireshark: Denial Of Service (application crash) via a pcap-ng file that contains a large packet-length field

wiretap/pcapng.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service application crash via a pcap-ng file that contains a large packet-length field...

Mandriva Update for wireshark MDVSA-2011:044 (wireshark)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-1139

wiretap/pcapng.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service application crash via a pcap-ng file that contains a large packet-length field...

DEBIAN-CVE-2011-1139

wiretap/pcapng.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service application crash via a pcap-ng file that contains a large packet-length field...

CVE-2011-1139

wiretap/pcapng.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service application crash via a pcap-ng file that contains a large packet-length field...

CVE-2011-1139: Undefined Security Weakness

wiretap/pcapng.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service application crash via a pcap-ng file that contains a large packet-length field...

PT-2011-2898

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.2.0 through 1.2.14 Wireshark versions 1.4.0 through 1.4.3 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This can be achieved by providing a pcap-ng file that...

MySQL COM_TABLE_DUMP Information Leakage and Arbitrary Command Execution

No description provided by source. / April 21.st 2006 myexploit.c MySql COMTABLEDUMP Memory Leak & MySql remote B0f MySql = 5.0.20 MySql COMTABLEDUMP Memory Leak MySql = 4.x.x copyright 2006 Stefano Di Paola stefano.dipaolaatwisec.it GPL 2.0 Disclaimer: In no event shall the author be liable for...

Ubuntu Update for samba regression USN-617-2

Ubuntu Update for Linux kernel vulnerabilities USN-617-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN6172.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for samba regression USN-617-2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.ne...

evolution-data-server: insufficient checking of NTLM authentication challenge packets

The ntlmchallenge function in the NTLM SASL authentication mechanism in camel/camel-sasl-ntlm.c in Camel in Evolution Data Server aka evolution-data-server 2.24.5 and earlier, and 2.25.92 and earlier 2.25.x versions, does not validate whether a certain length value is consistent with the amount o...

CVE-2008-3584

NetBSD 3.0, 3.1, and 4.0, when a pppoe instance exists, does not properly check the length of a PPPoE packet tag, which allows remote attackers to cause a denial of service system crash via a crafted PPPoE packet...

Debian Security Advisory DSA 1409-3 (samba)

The remote host is missing an update to samba announced via advisory DSA 1409-3. OpenVAS Vulnerability Test $Id: deb14093.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1409-3 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Heap overflow

Heap-based buffer overflow in the Express Backup Server service dsmsvc.exe in IBM Tivoli Storage Manager TSM Express 5.3 before 5.3.7.3 allows remote attackers to execute arbitrary code via a packet with a large length value...

DEBIAN-CVE-2007-3764

The Skinny channel driver chanskinny in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service crash via a certain data length value...

TFTPDWIN Server 0.4.2 (UDP) Denial of Service Exploit

No description provided by source. !/usr/bin/perl TFTPDWIN Server UDP DOS 0.4.2 POC written By : Umesh Wanve [email protected] ------------------------------------------------------------------------------- TFTPDWIN Server is a Freeware TFTP server for Windows 9x/NT/XP...