Core Security Technologies Advisory 2007.0219

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ OpenBSD's IPv6 mbufs remote kernel buffer overflow Date Published: 2007-03-13 Last Update: 2007-03-13 Advisory ID: CORE-2007-0219 Bugtraq ID: None currently assigned...

USN-432-1: GnuPG vulnerability

Gerardo Richarte from Core Security Technologies discovered that when gnupg is used without --status-fd, there is no way to distinguish initial unsigned messages from a following signed message. An attacker could inject an unsigned message, which could fool the user into thinking the message was...

Important: Red Hat Security Advisory: gnupg security update

Updated GnuPG packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. GnuPG is a utility for encrypting data and creating digital signatures. Gerardo Richarte discovered that a number of applicatio...

CentOS 3 / 4 : gnupg (CESA-2007:0106)

Updated GnuPG packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. GnuPG is a utility for encrypting data and creating digital signatures. Gerardo Richarte discovered that a number of applicatio...

RHEL 2.1 / 3 / 4 : gnupg (RHSA-2007:0106)

Updated GnuPG packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. GnuPG is a utility for encrypting data and creating digital signatures. Gerardo Richarte discovered that a number of applicatio...

ProFTPD <= 1.3.0a (mod_ctrls support) Local Buffer Overflow PoC

Exploit for linux platform in category dos / poc =============================================================== ProFTPD = 1.3.0a modctrls support Local Buffer Overflow PoC =============================================================== Core Security Technologies - Corelabs Advisory ProFTPD...

CORE-2006-0714: Microsoft SRV.SYS SMB_COM_TRANSACTION Denial of Service

Core Security Technologies Advisory http://www.coresecurity.com Microsoft SRV.SYS SMBCOMTRANSACTION Denial of Service Date Published: 2006-08-14 Last Update: 2006-08-14 Advisory ID: CORE-2006-0714 Bugtraq ID: 19215 CVE Name: CVE-2006-3942 Title: Microsoft SRV.SYS SMBCOMTRANSACTION Denial of Servi...

CORE-2006-0327: IAXclient truncated frames vulnerabilities

Core Security Technologies - Corelabs Advisory http://www.coresecurity.com/corelabs/ IAXclient truncated frames vulnerabilities Date Published: 2006-06-09 Last Update: 2006-06-09 Advisory ID: CORE-2006-0327 Bugtraq ID: 18307 CVE Name: N/A Title: IAXclient truncated frames vulnerabilities Class:...

CORE-2006-0330: Asterisk PBX truncated video frame vulnerability

Core Security Technologies - Corelabs Advisory http://www.coresecurity.com/corelabs/ Asterisk PBX truncated video miniframe vulnerability Date Published: 2006-06-09 Last Update: 2006-06-09 Advisory ID: CORE-2006-0330 Bugtraq ID: 18295 CVE Name: CVE-2006-2898 Title: Asterisk PBX truncated video...

Symantec pcAnywhere Denial of Service

SUMMARY A buffer overflow has been resolved in Symantec pcAnywhere that could lead to a Denial of Service. The buffer overflow occurs prior to authentication and can lead to termination of the pcAnywhere component. pcAnywhere must be restarted to function as designed. Risk Impact Medium Remote...

MailEnable 1.8 Remote Format String Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================================= MailEnable 1.8 Remote Format String Denial of Service Exploit ============================================================= See-security Technologies ltd. http://www.see-security.com...

MailEnable 1.8 - Remote Format String Denial of Service

MailEnable 1.8 - Remote Format String Denial of Service See-security Technologies ltd. http://www.see-security.com MailEnable 1.8 Format String DoS exploit Discovered by Mati Aharoni Coded by tal zeltzer import sys import time import socket def PrintLogo: print "" print "...

MailEnable 1.8 Remote Format String Denial of Service Exploit

No description provided by source. See-security Technologies ltd. http://www.see-security.com MailEnable 1.8 Format String DoS exploit Discovered by Mati Aharoni Coded by tal zeltzer import sys import time import socket def PrintLogo: print "...

MSN Messenger - '.png' Image Buffer Overflow Download Shellcode

/ MSN Messenger PNG Image Buffer Overflow Download Shellcoded Exploit Bug discoveried by Core Security Technologies www.coresecurity.com Exploit coded By ATmaCA Copyright ©2002-2005 AtmacaSoft Inc. All Rights Reserved. Web: http://www.atmacasoft.com E-Mail: [email protected] Credit to kozan and...

MSN Messenger (Linux) - .png Image Buffer Overflow

MSN Messenger Linux - .png Image Buffer Overflow / Remember g++ k /str0ke / / MSN Messenger PNG Image Buffer Overflow Download Shellcoded Exploit Bug discoveried by Core Security Technologies www.coresecurity.com Exploit coded By ATmaCA Copyright ©2002-2005 AtmacaSoft Inc. All Rights Reserved. We...

DCE RPC Vulnerabilities New Attack Vectors Analysis

Date Published: 2003-12-10 Last Update: 2003-12-10 Advisory ID: CORE-2003-12-05 Title: DCE RPC Vulnerabilities New Attack Vectors Analysis Remotely Exploitable: Yes Locally Exploitable: Yes Vendors contacted: - Microsoft . Core notification: 2003-12-09 . Notification acknowledged by Microsoft:...

Snort <=1.9.1 Remote Root Exploit (p7snort191.sh)

Exploit for linux platform in category remote exploits ================================================= Snort =1.9.1 Remote Root Exploit p7snort191.sh ================================================= !/bin/sh p7snort191.sh by truff email protected Snort 1.9.1 and below remote exploit Tested on...

Heap overflow in Snort "stream4" preprocessor

Overview The Snort "stream4" preprocessor module contains a vulnerability that allows remote attackers to execute arbitrary code with the privileges of the user running Snort, typically root. Description Researchers at CORE Security Technologies have discovered a remotely exploitable heap overflo...

mutt-1.4.1 fixes a buffer overflow.

Mutt versions 1.4.1 and 1.5.4 have just been released and will soon be available from ftp://ftp.mutt.org/mutt/. Both versions fix a buffer overflow in mutt's IMAP client code which was identified by Core Security Technologies, and fixed by Edmund Grimley Evans. A more detailed advisory will be...

: Microsoft SRV.SYS SMB_COM_TRANSACTION Denial of Service

Advisory ID Internal CORE-2006-0714 1. Advisory Information Advisory ID : CORE-2006-0714 Bugtraq ID : 19215 CVE Name : CVE-2006-3942 Title : Microsoft SRV.SYS SMBCOMTRANSACTION Denial of Service Class : Failure to Handle Exceptional Conditions Remotely Exploitable : Yes Locally Exploitable : Yes...