Firebird 'op_connect_request'远程拒绝服务漏洞

Bugraq ID: 35842 CVE ID：CVE-2009-2620 Firebird是一款流行的数据库程序。 Firebird不正确处理包含非法数据的'opconnectrequest'消息，远程攻击者可以利用漏洞对服务程序进行拒绝服务攻击。 发送非法的数据长度超过或等于12字节的'opconnectrequest'消息到默认的3050端口可触发此漏洞，导致应用服务程序崩溃，造成拒绝服务攻击。 Firebird Firebird 2.1.3 RC1 Firebird Firebird 2.1.2 Firebird Firebird 2.1.1 Firebird Firebird...

DSA-1841-1 git-core - denial of service

Bulletin has no description...

[SECURITY] [DSA 1837-1] New dbus packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1837-1 [email protected] http://www.debian.org/security/ Steffen Joeris July 18, 2009 http://www.debian.org/security/faq -...

To pack a site navigation of source code-bug warning-the black bar safety net

Brightly lit IT blog I accidentally saw a site navigation of source code, this source code is“visit hao123 and 2 6 5 of the COMBINED VERSION” There is a background but also very powerful！！！！！ Completely can be a background operation, I think such a station should be safe, so down look, a look...

[SECURITY] [DSA 1837-1] New dbus packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1837-1 [email protected] http://www.debian.org/security/ Steffen Joeris July 18, 2009 http://www.debian.org/security/faq -...

[SECURITY] Fedora 10 Update: perl-5.10.0-73.fc10

Perl is a high-level programming language with roots in C, sed, awk and shell scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common...

Pitch IRC 98 Client Buffer Overflow

!/usr/bin/python Usage : python pirch.py | || | / \ | | | | | | | | | - | | | / / | | |||| || // / |\ || Bug : Pirch IRC 98 Client response Remote BOF Exploit SEH Tested on : Xp sp3 ENVB Ref : Bid 5079 Exploited by : His0k4 Greetings : All friends DZ from socket import win32exec - EXITFUNC=seh...

ARD-9808 DVR Card Security Camera - GET Remote Denial of Service

import socket import sys print "----------------------------------------------------------------" print " ARD-9808 DVR Card Security Camera = Remote Denial Of Service " print " author: Stack " print "----------------------------------------------------------------" host = "127.0.0.1" port = 80 tr...

[SECURITY] Fedora 11 Update: perl-5.10.0-69.fc11

Perl is a high-level programming language with roots in C, sed, awk and shell scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common...

Debian DSA-1815-1 : libtorrent-rasterbar - programming error

It was discovered that the Rasterbar Bittorrent library performed insufficient validation of path names specified in torrent files, which could lead to denial of service by overwriting files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...

[SECURITY] [DSA 1815-1] New libtorrent-rasterbar packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1815-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 14, 2009 http://www.debian.org/security/faq -...

Peep worms soul-ShellCode-exploit-warning-the black bar safety net

Despite the vulnerability in the widely circulated before Microsoft introduced the corresponding patches, but numerous careless administrator or to hacker and worm writers to. On a network of tens of thousands with vulnerability tenacious running the server become hacker and Vxer targets, want to...

ST-Gallery 0.1a SQL Injection

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ WEB: http://blog.sebastian-thiele.net/projekte/gallery/ | |--DOWNLOAD: http://sourceforge.net/projects/st-gallery/ |...

SQL INJECTION VULNERABILITIES--ST-Gallery version 0.1 alpha-->

----------------------------------------------------------------- SQL INJECTION VULNERABILITIES--ST-Gallery version 0.1 alpha-- ----------------------------------------------------------------- CMS INFORMATION: --WEB: http://blog.sebastian-thiele.net/projekte/gallery/ --DOWNLOAD:...

DSA-1795-1 ldns - arbitrary code execution

Bulletin has no description...

32bit FTP (09.04.24) - CWD Response Universal Overwrite (SEH)

32bit FTP 09.04.24 - CWD Response Universal Overwrite SEH !/usr/bin/python | || | / \ | | | | | | | | | - | | | / / | | |||| || // / |\ || Bug : 32bit FTP 09.04.24 CWD Response Universal Seh Overwrite Exploit Refer : http://www.milw0rm.com/exploits/8611 Tested on : Xp sp3 ENVB Exploited by :...

32bit FTP (09.04.24) - 'CWD Response' Remote Buffer Overflow

!/usr/bin/python | || | / \ | | | | | | | | | - | | | / / | | |||| || // / |\ || Bug : 32bit FTP 09.04.24 CWD response Remote Buffer Overflow Exploit Refer : http://www.milw0rm.com/exploits/8611 Tested on : Xp sp3 ENVB Exploited by : His0k4 Greetings : All friends & muslims HaCkErs DZ,Algerians...

FreeBSD : apache -- apr_uri_parse IPv6 address handling vulnerability (762d1c6d-0722-11d9-b45d-000c41e2cdad)

The Apache Software Foundation Security Team discovered a programming error in the apr-util library function apruriparse. When parsing IPv6 literal addresses, it is possible that a length is incorrectly calculated to be negative, and this value is passed to memcpy. This may result in an exploitab...

Mandriva Linux Security Advisory : pulseaudio (MDVSA-2008:065)

Luigi Auriemma found a few programming errors in Pulseaudio, that can be used to crash the Pulseaudio daemon, by authenticated and unauthenticated users. The updated packages fix these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Mandriva Linux Security Advisory : wordnet (MDVSA-2008:182-1)

Rob Holland found several programming errors in WordNet which could lead to the execution or arbitrary code when used with untrusted input CVE-2008-2149, CVE-2008-3908. Update : The previous patch had a typo that caused incorrect behaviour in WordNet. This update uses an update patch that correct...