Red Faction 1.20 - Server Reply Remote Buffer Overflow (PoC)

/ by Luigi Auriemma UNIX & WIN VERSION / include include include ifdef WIN32 include include "winerr.h" define close closesocket else include include include include include endif define VER "0.1" define BUFFSZ 2048 define PORT 7755 define RETADDR "\xde\xc0\xad\xde" // 0xdeadc0de void stderrvoid;...

Purge Jihad buffer overflow

Buffer overflow on parsing server reply...

Multiple nd bugs

Multiple bugs including buffer overflow on server reply parsing...

CVE-2003-1162

index.php in Tritanium Bulletin Board 1.2.3 allows remote attackers to read and reply to arbitrary messages by modifying the threadid, forumid, and sid parameters...

ltftp buffer overflow

Buffer overflow on 'ls' reply...

Eudora buffer overflow

Buffer overflow during "reply to all" on oversized From: and Reply-To: of original message...

bandwebsite.txt

Informations : °°°°°°°°°°°°°° - Product : Bandsite portal system - Website : http://membres.lycos.fr/fluxx/bandwebsite.php - Author : Jelle de Vos - Tested version :1.5 - Problem : vulnerability in Bandsite Allows Gaining Admin Access. Product Description : °°°°°°°°°°°°°°°°°°°°° Bandsite is an...

CVE-2003-0757

Check Point FireWall-1 4.0 and 4.1 before SP5 allows remote attackers to obtain the IP addresses of internal interfaces via certain SecuRemote requests to TCP ports 256 or 264, which leaks the IP addresses in a reply packet...

Sendmail DNS DoS

Uninitialized pointer causes DoS conditions on bogus DNS reply...

Trillian DoS

NULL pointer reference on large number of ctcp reply packets...

Trillian v.0.74* Remote DoS

Advisory Название : Trillian v.0.74 - удаленная DoS Сайт : www.trillian.cc Платформа : win32 Автор : lobsta/h [email protected] Информация о программном продукте Trillian - популярный чат-клиент, поддерживающий IRC, AIM, ICQ, MSN Messenger, и Yahoo! Messenger. Примечание к статье Основным отличие...

Abyss Webserver multiple bugs

Buffer overflow, HTTP reply spoofing...

FTP/X buffer overflow

Buffer overflow on parsing server reply...

BAZARR FAREWELL

/ traceroute local root advisory / / by: bazarr / / [email protected] / / bazarr episode / ------------------ PREFACE its me bazarr. i dont use ziplip anymore. resend any emails sent to bazarr@ziplip to [email protected] if i dident respond to them. this is a local root vulnerability in the...

LeapWare LeapFTP v2.7.3.600 PASV Reply Client Overflow

This module exploits a buffer overflow in the LeapWare LeapFTP v2.7.3.600 client that is triggered through an excessively long PASV reply command. This module was ported from the original exploit by drG4njubas with minor improvements. Module Options msf use exploit/windows/ftp/leapftp/pasvreply m...

Microsoft ISA Server

It's possible to cause infinite reply loops with spoofed UDP packets with bith source and destination ports 1745 between 2 servers on from server to itself...

Lotus Notes buffer overflows

Heap overflow during authentication process. Buffer overflow on oversized HTTP server reply Status: header in Web Retriever...

BitchX 1.0 - 'RPL_NAMREPLY' Denial of Service

// source: https://www.securityfocus.com/bid/6880/info It has been reported that BitchX does not properly handle some types of replies contained in the RPLNAMREPLY numeric. When a malformed reply is received by the client, the client crashes, resulting in a denial of service. / bitchx-353.c --arg...

CVE-2002-2026

Buffer overflow in BrowseFTP 1.62 client allows remote FTP servers to execute arbitrary code via a long FTP "220" message reply...

Code Injection in phpBB Advanced Quick Reply Mod

Software: phpBB Advanced Quick Reply Mod I've found a security hole in this sofware Code Injection. You can download this software at http://phpbbhacks.com/viewhack.php?id=586 Hackers can exploit this Mod to inject some shell code to hack your forum, your website or your server local exploit...