SurgeFTP 2.3a2 - Content-Length Null Pointer Denial of Service

SurgeFTP 2.3a2 - Content-Length Null Pointer Denial of Service source: https://www.securityfocus.com/bid/27993/info SurgeFTP is prone to a remote denial-of-service vulnerability because it fails to perform adequately boundary checks on user-supplied input. Exploiting this issue will cause the...

SurgeFTP 2.3a2 - 'Content-Length' Null Pointer Denial of Service

source: https://www.securityfocus.com/bid/27993/info SurgeFTP is prone to a remote denial-of-service vulnerability because it fails to perform adequately boundary checks on user-supplied input. Exploiting this issue will cause the server to copy data to a NULL pointer, which will crash the server...

Code injection

Unspecified vulnerability in the BEA WebLogic Server and Express proxy plugin, as distributed before November 2007 and before 9.2 MP3 and 10.0 MP2, allows remote attackers to cause a denial of service web server crash via a crafted URL...

Apple iPhoto DPAP server DoS

Malformed request causes server to crash...

Titan FTP Server 6.03 (USER/PASS) Remote Heap Overflow PoC

No description provided by source. Titan FTP SERVER REMOTE HEAP OVERFLOWUSER/PASS Impact : Critical Windbg Output: bec.528: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This exception may be expected and handled. eax=41414141...

Titan FTP Server 6.03 (USER/PASS) Remote Heap Overflow PoC

Exploit for unknown platform in category dos / poc ========================================================== Titan FTP Server 6.03 USER/PASS Remote Heap Overflow PoC ========================================================== Titan FTP SERVER REMOTE HEAP OVERFLOWUSER/PASS Impact : Critical Windbg...

Core Security Technologies Advisory 2007.1219

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs Firebird Remote Memory Corruption Advisory Information Title: Firebird Remote Memory Corruption Advisory ID: CORE-2007-1219 Advisory URL:...

Debian Security Advisory DSA 994-1 (freeciv)

The remote host is missing an update to freeciv announced via advisory DSA 994-1. Luigi Auriemma discovered a denial of service condition in the free Civilization server that allows a remote user to trigger a server crash. The old stable distribution woody is not affected by this problem. OpenVAS...

Debian Security Advisory DSA 089-1 (icecast-server)

The remote host is missing an update to icecast-server announced via advisory DSA 089-1. OpenVAS Vulnerability Test $Id: deb0891.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 089-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1370-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 089-1 (icecast-server)

The remote host is missing an update to icecast-server announced via advisory DSA 089-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

McAfee E-Business Server预认证远程拒绝服务及代码执行漏洞

BUGTRAQ ID: 27197 McAfee e-Business Server用于为存储和共享文档的企业和个人提供透明加密。 McAfee E-Business Server在处理畸形格式的请求数据时存在漏洞，远程攻击者可能利用此漏洞控制服务器。 如果向McAfee E-Business Server的管理接口（TCP 1718）发送类似于以下的畸形预认证报文的话： "\x01\x3f\x2f\x05\x25\x2a" + "A" 69953 就会导致服务器崩溃，也可能允许执行任意指令。 0 McAfee E-Business Server = 8.5.2 for Windows...

OpenAFS: Denial of service

Background OpenAFS is a distributed network filesystem. Description Russ Allbery, Jeffrey Altman, Dan Hyde and Thomas Mueller discovered a race condition due to an improper handling of the clients callbacks lists. Impact A remote attacker could construct cases which trigger the race condition,...

Syslog-ng: Denial of service

Background Syslog-ng is a flexible and scalable system logger. Description Oriol Carreras reported a NULL pointer dereference in the logmsgparse function when processing timestamps without a terminating whitespace character. Impact A remote attacker could send a specially crafted event to a...

OpenSSL 0.9.7l0.9.8d - SSLv2 Client Crash

OpenSSL 0.9.7l0.9.8d - SSLv2 Client Crash !/usr/bin/perl Copyrightc Beyond Security Written by Noam Rathaus - based on beSTORM's SSL Server module Exploits vulnerability CVE-2006-4343 - where the SSL client can be crashed by special SSL serverhello response use strict; use IO::Socket; my $sock =...

IRC Services-- Denial of Service Vulnerability

Secunia reports: A vulnerability has been reported in IRC Services, which can be exploited by malicious people to cause a Denial of Service. The vulnerability is caused due to the improper handling of overly long passwords within the "defaultencrypt" function in encrypt.c and can be exploited to...

IBM Director fails to properly time-out connection requests from clients

Overview IBM Director Systems, specifically CIM Server, contains a denial-of-service vulnerability that can allow a remote, unauthenticated attacker to render Director inoperative. Description IBM Director is a suite of system management tools.When a rogue connection request is made to IBM Direct...

[Full-disclosure] Crash in LIVE555 Media Server 2007.11.01

Luigi Auriemma Application: LIVE555 Media Server http://www.live555.com/mediaServer/ Versions: = 2007.11.01 Platforms: nix, Windows, Mac and others Bug: crash caused by access to unallocated memory Exploitation: remote, versus server Date: 18 Nov 2007 Author: Luigi Auriemma e-mail:...

Ubuntu 6.10 : postgresql-8.1 vulnerabilities (USN-369-2)

USN-369-1 fixed three minor PostgreSQL 8.1 vulnerabilities for Ubuntu 6.06 LTS. This update provides the corresponding update for Ubuntu 6.10. Michael Fuhr discovered an incorrect type check when handling unknown literals. By attempting to coerce such a literal to the ANYARRAY type, a local...

Ubuntu 5.04 / 5.10 / 6.06 LTS : openssh vulnerabilities (USN-355-1)

Tavis Ormandy discovered that the SSH daemon did not properly handle authentication packets with duplicated blocks. By sending specially crafted packets, a remote attacker could exploit this to cause the ssh daemon to drain all available CPU resources until the login grace time expired...