4578 matches found
CVE-2004-1224: Undefined Security Weakness
Off-by-one error in the mtrcurseskeyaction function for mtr 0.55 through 0.65 allows local users to hijack raw sockets, as demonstrated using the "s" keybinding, which leaves a buffer without a NULL terminator...
Debian DSA-124-1 : mtr - buffer overflow
The authors of mtr released a new upstream version, noting a non-exploitable buffer overflow in their ChangeLog. Przemyslaw Frasunek, however, found an easy way to exploit this bug, which allows an attacker to gain access to the raw socket, which makes IP spoofing and other malicious network...
AWStats 5.0 6.3 - logfile File Inclusion Command Execution
AWStats 5.0 6.3 - logfile File Inclusion Command Execution Example: http://target/awstats.pl?filterrawlog=&rawlogmaxlines=5000&config=stats.jdims.info&framename=main&pluginmode=rawlog&log file=/etc/passwd...
Unreal IRCD OperServ Raw Message Channel Join DoS
Binary data 2154.prm...
[Full-Disclosure] DoS in Webbsyte Chat 0.9.0
Donato Ferrante Application: Webbsyte Chat http://sourceforge.net/projects/wchat/ Version: 0.9.0 Bug: Denial Of Service Date: 02-Aug-2004 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1...
CVE-2004-0181: Undefined Security Weakness
The JFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the JFS file system, which allows local users to obtain sensitive information by reading the raw device...
CVE-2004-0133: Undefined Security Weakness
The XFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the XFS file system, which allows local users to obtain sensitive information by reading the raw device...
FirstClass Desktop 7.1 (latest) Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ======================================================= FirstClass Desktop 7.1 latest Buffer Overflow Exploit ======================================================= / ++++++++++++++++++++++++++++++++++++++++++++++++++++ FirstClass Desktop 7...
[Hat-Squad] Remote buffer overflow in Mdaemon Raw message Handler
Hat-Squad Security Team Advisory http://www.hat-squad.com Product: Alt-N Technologies Mdaemon Mail Server Version: MDaemon 6.85 and Below to 6.52 Vulnerability: Remote buffer overflow in Raw Message Handler Release Date: 12/29/2003 Vendor Status: Informed on 29 Dec 2003 Quick response on 29 Dec...
MDaemon WorldClient form2raw.cgi Stack Buffer Overflow
This module exploits a stack buffer overflow in Alt-N MDaemon SMTP server for versions 6.8.5 and earlier. When WorldClient HTTP server is installed default, a CGI script is provided to accept html FORM based emails and deliver via MDaemon.exe, by writing the CGI output to the Raw Queue. When...
MS Windows 2000 RSVP Server Authority Hijacking PoC Exploit
No description provided by source. // Microsoft Windows 2000 Subnet Bandwidth Manager RSVP Server Authority Hijacking // // A problem has been identified in the RSVP Server for Microsoft Windows 2000 that // may allow an attacker to hijack management of the network. This could allow an // attacke...
Cisco IOS - using hping Remote Denial of Service
Cisco IOS - using hping Remote Denial of Service !/bin/tcsh -f Remote DoS exploit against the recent Cisco IOS vuln. Cisco doc. 44020 Vulnerable versions - all Cisco devices running IOS. Requirements : tcsh, and hping. Get hping @ www.hping.org And you know the best part? This script actually...
Cisco IOS (using hping) Remote Denial of Service Exploit
No description provided by source. !/bin/tcsh -f Remote DoS exploit against the recent Cisco IOS vuln. Cisco doc. 44020 Vulnerable versions - all Cisco devices running IOS. Requirements : tcsh, and hping. Get hping @ www.hping.org And you know the best part? This script actually works! Unlike the...
Cisco IOS - using hping Remote Denial of Service
!/bin/tcsh -f Remote DoS exploit against the recent Cisco IOS vuln. Cisco doc. 44020 Vulnerable versions - all Cisco devices running IOS. Requirements : tcsh, and hping. Get hping @ www.hping.org And you know the best part? This script actually works! Unlike the few .c's floating around the net...
UnrealIRCd OperServ Raw Channel Join DoS
The remote host is running a version of ircd which may crash when it receives certain raw messages. An attacker could exploit this flaw to disable this service remotely. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11797; scriptversion "1.14"; scriptbugtraqid8131;...
DSA-330 tcptraceroute - failure to drop root privileges
Bulletin has no description...
CVE-2002-0497
Buffer overflow in mtr 0.46 and earlier, when installed setuid root, allows local users to access a raw socket via a long MTROPTIONS environment variable...
CVE-2002-0497
CVE-2002-0497 describes a buffer overflow in mtr versions 0.46 and earlier when installed setuid root, allowing local users to access a raw socket via a long MTR_OPTIONS environment variable. The vulnerability is documented across multiple sources (Red Hat, Debian, NVD, CVE listings) and affects ...
CVE-2002-0497: Undefined Security Weakness
Buffer overflow in mtr 0.46 and earlier, when installed setuid root, allows local users to access a raw socket via a long MTROPTIONS environment variable...
