9369 matches found
OpenSSH/PAM <= 3.6.1p1 Remote Users Ident (gossh.sh)
No description provided by source. !/bin/sh OpenSSH = 3.6.p1 - User Identification. Nicolas Couture - [email protected] Description: -Tells you wether or not a user exist on a distant server running OpenSSH. Usage: -You NEED to have the host's public key before executing this script...
ProFTPD mod_sftp Integer Overflow DoS PoC
No description provided by source. ProFTPD modsftp Integer Overflow by Kingcope reference: http://www.castaglia.org/proftpd/modules/modsftp.html Exploit Title: ProFTPD modsftp Integer Overflow Date: 7 February 2011 Author: Kingcope Software Link:...
GNU Chess 5.0 - Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8097/info A local buffer overflow has been reported for GNU Chess that may result in an attacker obtaining elevated privileges. The vulnerability exists due to insufficient boundary checks performed on some commandline...
Sendmail <= 8.12.8 prescan() BSD Remote Root Exploit
No description provided by source. / Sendmail 8.12.8 prescan PROOF OF CONCEPT exploit by bysin This is to prove that the bug in sendmail 8.12.8 and below is vulnerable. On sucessful POC exploitation the program should crash with the following: Program received signal SIGSEGV, Segmentation fault...
Oracle Solaris - 'su' Local Solaris Vulnerability
No description provided by source. From http://cvs.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/cmd/su/su.c 521 for j = 0; initenvj != 0; j++ 1 522 if initvar = getenvinitenvj 2 ... 535 else 536 var = char 537 mallocstrleninitenvj 3 538 + strleninitvar 539 + 2; 540 void strcpyvar, initenvj;...
KDE 3.5 (libkhtml) <= 4.2.0 / Unhandled HTML Parse Exception Exploit
No description provided by source. !-- KDE 3.5 | libkhtml = 4.2.0 / Unhandled HTML Parse Exception ============================================================ Tested with Konqueror 3.5.2 and kmail 1.9.1 Federico L. Bossi Bonin [email protected] www.globalst.com.ar Program received signal...
ClamAV < 0.94.2 (JPEG Parsing) Recursive Stack Overflow PoC
No description provided by source. / There is a recursive stack overflow in clamav 0.93.3 and 0.94 and probably older versions in the jpeg parsing code. it scan's the jpeg file, and if there is a thumbnail, it'll scan that too. the thumbnail itself is just another jpeg file and the same jpeg...
Astium VoIP PBX <= 2.1 build 25399 - Remote Crash PoC
No description provided by source. !/usr/bin/python +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Astium VoIP PBX = v2.1 build 25399 Remote Crash PoC Date : 01-02-2012 Author : xistence...
GNU Info 4.7 Follow XRef Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10882/info GNU Info is reported prone to a buffer overrun vulnerability. The vulnerability is reported to present itself due to a lack of boundary checks performed on argument data for the f follow xref Info command. An...
PHP <= 4.4.3 / 5.1.4 (sscanf) Local Buffer Overflow Exploit
No description provided by source. ? / hoagiephpsscanf.php PHP = 4.4.3 / 5.1.4 local buffer overflow exploit howto get offsets: set $baseaddr to 0x41414141 ulimit -c 20000 /etc/init.d/apache restart execute script via web browser tail /var/log/apache/error.log ... Wed Aug 16 15:07:10 2006 notice...
ISC DHCP dhclient < 3.1.2p1 Remote Buffer Overflow PoC
No description provided by source. / cve-2009-0692.c ISC DHCP dhclient 3.1.2p1 Remote Exploit Jon Oberheide [email protected] http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0692 Stack-based buffer overflow in the scriptwriteparams method in...
iodined <= 0.4.2-2 (forged DNS packet) Denial of Service Exploit
No description provided by source. !/usr/bin/perl iodined = 0.4.2 DoS exploit by Albert Sellares whatsatwekkdotnet http://www.wekk.net 2009-04-26 This exploit shuts down the iodined daemon using a forged DNS packet. It works on the last debian stable version 0.4.2-2. It produces a segmentation...
PHP 5.2.5 Multiple GetText Functions Denial Of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/26428/info PHP is prone to multiple denial-of-service vulnerabilities because it fails to perform adequate boundary checks on user-supplied input. Attackers can exploit these issues to cause denial-of-service conditions...
Multiple Vendors libc:fts_*() - Local Denial of Service Exploit
No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 libc:fts:multiple vendors, Denial-of-service Author: Maksymilian Arciemowicz SecurityReason.com Date: - - Dis.: 21.10.2008 - - Pub.: 04.03.2009 CVE: CVE-2009-0537 We are going informing all vendors, about this proble...
SUSE-SU-2015:0427-1 Recommended update for xorg-x11-server
This collective update for xorg-x11-server provides the following fixes: Fix a segmentation fault that can occur when X11 packets are forwarded between a client and a server with different endianess. bnc874903 Free software cursor backing pixmap when transition between screens. This fixes a crash...
SUSE-SU-2015:1025-1 Recommended update for xorg-x11-server
This collective update for xorg-x11-server provides the following fixes: Fix a segmentation fault that can occur when X11 packets are forwarded between a client and a server with different endianess. bnc874903 Free software cursor backing pixmap when transition between screens. This fixes a crash...
Security fix for the ALT Linux 8 package samba-DC version 4.1.9-alt1
June 24, 2014 Alexey Shabalin 4.1.9-alt1 - 4.1.9 - fixed nmbd denial of serviceCVE-2014-0244 - fixed Segmentation fault in smbdmarshalldirentryCVE-2014-3493...
Security fix for the ALT Linux 8 package samba version 4.1.9-alt1
June 24, 2014 Alexey Shabalin 4.1.9-alt1 - 4.1.9 - fixed nmbd denial of serviceCVE-2014-0244 - fixed Segmentation fault in smbdmarshalldirentryCVE-2014-3493...
httpd: mod_log_config does not properly handle logging certain cookies resulting in DoS
The logcookie function in modlogconfig.c in the modlogconfig module in the Apache HTTP Server before 2.4.8 allows remote attackers to cause a denial of service segmentation fault and daemon crash via a crafted cookie that is not properly handled during truncation...
httpd: mod_log_config does not properly handle logging certain cookies resulting in DoS
The logcookie function in modlogconfig.c in the modlogconfig module in the Apache HTTP Server before 2.4.8 allows remote attackers to cause a denial of service segmentation fault and daemon crash via a crafted cookie that is not properly handled during truncation...