9365 matches found
Make 3.81 - Heap Overflow (PoC)
Make 3.81 - Heap Overflow PoC =for comment Exploit Title: MAKE Heap Overflow - Pointer dereferencing POC Calloc-X86 X64 Date: 14.07.14 Exploit Author: HyP Vendor Homepage: http://www.gnu.org/software/make/ Software Link: http://ftp.gnu.org/gnu/make/ Version: Make 3.81 Tested on: linux32,64 bits...
CVE-2014-4975
Off-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1.2, when using certain format string specifiers, allows context-dependent attackers to cause a denial of service segmentation fault via vectors that trigger a stack-based buffer overflow...
CVE-2014-4975 ruby: off-by-one stack-based buffer overflow in the encodes() function
Off-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1.2, when using certain format string specifiers, allows context-dependent attackers to cause a denial of service segmentation fault via vectors that trigger a stack-based buffer overflow...
RedHat Update for qemu-kvm RHSA-2014:0704-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : samba (openSUSE-SU-2014:0859-1)
samba was updated to version 4.1.9 to fix four security issues and various non-security bugs. These security issues were fixed : - Fix nmbd denial of service CVE-2014-0244 - Fix segmentation fault in smbdmarshalldirentry's SMBFINDFILEUNIX handler CVE-2014-3493 - Malformed FSCTLSRVENUMERATESNAPSHO...
httpd: mod_log_config does not properly handle logging certain cookies resulting in DoS
The logcookie function in modlogconfig.c in the modlogconfig module in the Apache HTTP Server before 2.4.8 allows remote attackers to cause a denial of service segmentation fault and daemon crash via a crafted cookie that is not properly handled during truncation...
httpd: mod_log_config does not properly handle logging certain cookies resulting in DoS
The logcookie function in modlogconfig.c in the modlogconfig module in the Apache HTTP Server before 2.4.8 allows remote attackers to cause a denial of service segmentation fault and daemon crash via a crafted cookie that is not properly handled during truncation...
GNU libc/regcomp(3) Multiple Vulnerabilities
No description provided by source. source: http://securityreason.com/securityalert/8003 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 GNU libc/regcomp3 Multiple Vulnerabilities Author: Maksymilian Arciemowicz http://securityreason.com/ http://cxib.net/ Date: - - Dis.: 01.10.2010 - - Pub.:...
Sun SunVTS 4.x PTExec Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2898/info SunVTS is the Sun Validation Test Suite, distributed and maintained by Sun Microsystems. The SunVTS is used to test various components of OEM Sun hardware, and can also be used to stress-test components and...
RealPlayer <= 10.5 (6.0.12.1040-1348) - SWF Buffer Overflow PoC
No description provided by source. !/usr/bin/perl RealPlayer: Buffer overflow vulnerability / PoC CVE-2006-0323 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0323 RealNetworks Advisory http://service.real.com/realplayer/security/03162006player/en/ Federico L. Bossi Bonin...
cURL Buffer Overflow Vulnerability
No description provided by source. cURL buffer overflow Wed 06 February 2013 Volema found remotely exploitable buffer overflow vulnerability in libcurl POP3, SMTP protocol handlers which lead to code execution RCE. When negotiating SASL DIGEST-MD5 authentication, the function...
IBM DB2 db2govd Command Line Argument Local Overflow
No description provided by source. source: http://www.securityfocus.com/bid/8990/info IBM DB2 has been reported to be prone to multiple buffer overflow vulnerabilities that present themselves in binaries that are shipped with DB2. The vulnerabilities are likely caused due to a lack of sufficient...
Linux NTP query client 4.2.6p1 - Heap Overflow Vulnerability
No description provided by source. Linux NTP query client v4.2.6p1 Heap Overflow vulnerability vendor: http://www.ntp.org/ software: http://www.eecis.udel.edu/ntp/ntpspool/ntp4/ntp-4.2/ntp-4.2.6p1.tar.gz impact: minor/informational There is a local heap overflow in the ntpq utility client that...
tPop3d 1.5.3 DoS
No description provided by source. Exploit Title: tPop3d 1.5.3 DoS Date: 3/26/10 Author: OrderZero Software Link: http://www.ex-parrot.com/chris/tpop3d/ Download: http://www.ex-parrot.com/chris/tpop3d/tpop3d-1.5.3.tar.gz Version: 1.5.3 Debug: Starting program: /usr/local/sbin/tpop3d -d listenerne...
nginx 0.7.0-0.7.61, 0.6.0-0.6.38, 0.5.0-0.5.37, 0.4.0-0.4.14 - PoC
No description provided by source. debian: uname -a Linux debian 2.6.18-6-686 1 SMP Thu Aug 20 21:56:59 UTC 2009 i686 GNU/Linux debian: cat /etc/issue Debian GNU/Linux 4.0 \n \l debian: dpkg -l|grep nginx ii nginx 0.4.13-2+etch2 small, but very powerful and efficient debian: ps xauwww|grep...
MagicISO <= 5.4 (build239) - .cue File Heap Overflow PoC
No description provided by source. !/usr/bin/env ruby Credits to n00b for finding this bug. Magic iso has a stacked based buffer over-flow when We pass an overly-long file name inside the .cue file We are able to control alot of the registers so Command execution is possible,But im still learning...
MyServer 0.4.1 - Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8010/info MyServer HTTP server has been reported prone to a remote denial of service attack. The issue presents itself, likely due to a lack of sufficient bounds checking, performed on arguments that are supplied via...
Linux Kernel <= 2.4.23, <= 2.6.0 - "do_mremap" Local Proof of Concept (2)
No description provided by source. / Proof of concept code for testing domremap Linux kernel bug. It is based on the code by Christophe Devine and Julien Tinnes posted on Bugtraq mailing list on 5 Jan 2004 but it's safer since it avoids any kernel data corruption. The following test was done...
lighttpd Denial of Service Vulnerability PoC
No description provided by source. 29 of November 2011 was the date of public disclosure interesting vulnerability in lighttpd server. Xi Wang discovered that modauth for this server does not propely decode characters from the extended ASCII table. The vulnerable code is below: src/httpauth.c:67...
ntop 3.3.10 HTTP Basic Authentication NULL Pointer Dereference Denial Of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36074/info The 'ntop' tool is prone to a denial-of-service vulnerability because of a NULL-pointer dereference that occurs when crafted HTTP Basic Authentication credentials are received by the embedded webserver. An...