4534 matches found
GLSA-200702-06 : BIND: Denial of Service
The remote host is affected by the vulnerability described in GLSA-200702-06 BIND: Denial of Service An unspecified improper usage of an already freed context has been reported. Additionally, an assertion error could be triggered in the DNSSEC validation of some responses to type ANY queries with...
security flaw
The query planner in PostgreSQL before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 does not verify that a table is compatible with a "previously made query plan," which allows remote authenticated users to cause a denial of service server crash and possibly access database content via an "ALTE...
security flaw
PostgreSQL 7.3 before 7.3.13, 7.4 before 7.4.16, 8.0 before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 allows attackers to disable certain checks for the data types of SQL function arguments, which allows remote authenticated users to cause a denial of service server crash and possibly access...
CVE-2007-0555
PostgreSQL 7.3 before 7.3.13, 7.4 before 7.4.16, 8.0 before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 allows attackers to disable certain checks for the data types of SQL function arguments, which allows remote authenticated users to cause a denial of service server crash and possibly access...
CVE-2007-0556
The query planner in PostgreSQL before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 does not verify that a table is compatible with a "previously made query plan," which allows remote authenticated users to cause a denial of service server crash and possibly access database content via an "ALTE...
Code injection
PostgreSQL 7.3 before 7.3.13, 7.4 before 7.4.16, 8.0 before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 allows attackers to disable certain checks for the data types of SQL function arguments, which allows remote authenticated users to cause a denial of service server crash and possibly access...
GLSA-200701-14 : Mod_auth_kerb: Denial of Service
The remote host is affected by the vulnerability described in GLSA-200701-14 Modauthkerb: Denial of Service Modauthkerb improperly handles component byte encoding in the dergetoid function, allowing for a buffer overflow to occur if there are no components which require more than one byte for...
KarjaSoft Sami HTTP Server 1.0.41.0.52.0.1 - Request Remote Denial of Service
KarjaSoft Sami HTTP Server 1.0.41.0.52.0.1 - Request Remote Denial of Service source: https://www.securityfocus.com/bid/22159/info Sami HTTP Server is prone to a remote denial-of-service vulnerability. Exploiting this issue allows remote attackers to crash the server application, denying further...
WFTPD Pro FTP server DoS
Incomplete SITE ADMIN command causes server to crash...
Telnet-FTP Server目录遍历及远程拒绝服务漏洞
Telnet-Ftp Server是一款Windows平台上的多用户Telnet/Ftp服务器。 Telnet-Ftp Server的GET和PUT等命令的处理过程中存在输入验证错误，允许攻击者通过目录遍历攻击列出并下载FTP根目录外的任意文件。 此外，攻击者还可以通过发送两个连续的RETR命令导致服务崩溃。 Sorin Chitu Telnet-FTP Server 1.0 build 1.250 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://slimbyte.sufx.net/...
UniversalFTP FTP Server DoS
Server crash on MKD command with malformed argument...
[Full-disclosure] WarFTPd 1.82.00-RC11 Remote Denial Of Service
WarFTPd 1.82.00-RC11 Remote Denial Of Service --------------------------------------------- WarFTPd is vulnerable to a DOS condition when passing to various commands a long string with two times the "s" characters inside. It looks as non exploitable as the problem crashes with the same output at...
WFTPD Pro Server 3.23.1.1 - APPE Remote Buffer Overflow (PoC)
WFTPD Pro Server 3.23.1.1 - APPE Remote Buffer Overflow PoC !/usr/bin/env python import sys import struct import ftplib print "WFTPD Pro Server 3.23.1.1 Buffer Overflow Only a DOS currently, simple POC" print "Copyright c Joxean Koret" print target = "192.168.1.13" targetPort = "21" try: ftp =...
USN-369-1: PostgreSQL vulnerabilities
Michael Fuhr discovered an incorrect type check when handling unknown literals. By attempting to coerce such a literal to the ANYARRAY type, a local authenticated attacker could cause a server crash. Josh Drake and Alvaro Herrera reported a crash when using aggregate functions in UPDATE statement...
eXtremail 1.x/2.1 - Remote Format String (3)
source: https://www.securityfocus.com/bid/2908/info eXtremail is a freeware SMTP server available for Linux and AIX. eXtremail contains a format-string vulnerability in its logging mechanism. Attackers can send SMTP commands argumented with maliciously constructed arguments that will exploit this...
FreeBSD : postgresql -- multiple vulnerabilities (65c8ecf9-2adb-11db-a6e2-000e0c2e438a)
Multiple vulnerabilities had been reported in various versions of PostgreSQL : - The EXECUTE restrictions can be bypassed by using the AGGREGATE function, which is missing a permissions check. - A buffer overflow exists in gram.y which could allow an attacker to execute arbitrary code by sending ...
DEBIAN-CVE-2006-4005
BomberClone 0.11.6 and earlier allows remote attackers to cause a denial of service daemon crash via 1 a certain malformed PKGFackreq packet, which triggers a crash in the rscacheadd function in pkgcache.c; and 2 an error packet, which is intended to be received by clients and force client...
CVE-2006-3477
Unspecified vulnerability in the POP service in Stalker CommuniGate Pro 5.1c1 and earlier allows remote attackers to cause a denial of service server crash via unspecified vectors involving opening an empty inbox...
CVE-2006-3477
The CVE-2006-3477 issue affects the POP service in CommuniGate Pro up to version 5.1c1, where remote attackers can cause a denial of service (server crash) by triggering an empty-inbox condition. The root cause and exact vectors are not detailed in the description; exploitation is remote and aims...